Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
File: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft (raw, json)
Hash identifier: Yj9TCTKnRgXrzJTYTwW1ByeRaFRIwIjtgmEGAB3AVrA=
Subject key identifier: 5C:14:34:21:FD:1A:9B:6B:5A:A0:30:F3:25:45:2E:02:2A:B5:44:95
Authority key identifier: D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
Certificate issuer: /CN=d7880ed1021d0ecac71205673b004813b39dfc99
Certificate serial: 0197B820EC0A8D53BD8888D8A27AEBD0D166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 20:00:54 +0000
Manifest this update: Sat 28 Jun 2025 20:00:54 +0000
Manifest next update: Sun 29 Jun 2025 20:00:54 +0000
Files and hashes: 1: 1-lmapd5w9HD2F08R09w_tZRWCa0.roa (hash: wweZhb13in2MHBYbFFvgxz1Av+9tarTLaej3LMI0a4A=)
2: 14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl (hash: Q+awjl7A3wSX4Wqs1TaLZz7xEBcemxdFI/aQ2I6JtHE=)
3: kwtdCRFAZPjQFHCak21_zozRzyg.roa (hash: EWeYVWP/wMFz4uen+0vNjC0GMpRDuD50ya++g2lRAIM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ec:0a:8d:53:bd:88:88:d8:a2:7a:eb:d0:d1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7880ed1021d0ecac71205673b004813b39dfc99
Validity
Not Before: Jun 28 20:00:54 2025 GMT
Not After : Jun 29 20:00:54 2025 GMT
Subject: CN=5c143421fd1a9b6b5aa030f325452e022ab54495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:51:da:14:bc:e7:db:33:94:02:4a:8a:e2:
18:12:e5:b8:fa:b2:a9:02:39:87:6b:e4:4d:c1:1c:
c4:05:df:ae:f2:13:d1:cd:01:b9:c3:6b:6b:a1:2e:
b7:5c:94:a3:c4:9b:27:88:94:e2:0d:3a:74:fb:78:
74:da:08:fb:9d:fc:4a:49:a8:d2:d3:f8:b8:fe:fd:
49:48:51:3e:b7:ca:58:76:ec:12:2f:ea:95:9f:77:
0e:c0:5a:00:de:58:93:cf:39:14:57:cb:58:cd:1f:
13:be:e8:40:6b:d1:9f:c1:b1:06:c4:fe:5d:fa:a4:
e2:09:3a:8f:6f:37:1c:a3:00:f6:9e:28:60:4a:7c:
9e:ff:9d:8b:10:22:cb:14:ab:dd:23:a3:70:77:67:
ce:dc:65:f1:93:60:89:54:06:06:e5:a8:d2:42:1e:
50:aa:b6:f3:cc:81:11:0b:73:a4:9d:1e:dd:ff:09:
df:85:e2:da:ee:68:5e:f1:c9:1a:05:66:c5:2f:36:
e2:83:5a:82:e6:46:33:0d:c1:9a:cd:ef:66:54:b4:
57:1b:c9:92:d8:bc:25:fb:a9:0b:51:50:89:d9:0c:
c1:23:6d:a8:b1:e8:3c:b3:88:dc:ee:aa:ff:ed:8a:
75:ae:5b:84:06:19:34:5a:7e:e5:94:18:90:44:3a:
4b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:14:34:21:FD:1A:9B:6B:5A:A0:30:F3:25:45:2E:02:2A:B5:44:95
X509v3 Authority Key Identifier:
keyid:D7:88:0E:D1:02:1D:0E:CA:C7:12:05:67:3B:00:48:13:B3:9D:FC:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14gO0QIdDsrHEgVnOwBIE7Od_Jk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/756505-2062-49e7-94fe-04777c198ef1/1/14gO0QIdDsrHEgVnOwBIE7Od_Jk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:cf:4c:f9:4c:39:4c:0d:89:62:26:6a:e9:c0:35:33:c5:69:
5d:30:ff:fb:fb:a6:c9:de:86:dc:53:19:a4:dc:e3:cf:76:32:
23:a5:e4:ff:ad:36:73:48:8c:c9:6e:16:68:95:41:8a:2f:f6:
c2:4b:0b:aa:37:62:6b:ba:94:1d:ae:93:26:7e:3d:79:b9:3e:
c6:e7:4a:49:a6:66:c6:60:13:10:1b:d4:97:c8:67:59:a7:ad:
6f:9e:06:d4:79:56:27:eb:2d:41:61:73:58:3b:97:4d:83:82:
0f:42:b2:b2:56:c2:ea:1a:e5:c3:fc:e4:22:5b:e9:c2:59:2e:
02:0e:f4:bd:4f:e7:78:91:df:1e:97:38:b0:56:49:33:ec:5f:
17:ed:a4:89:2d:88:d9:9b:58:04:07:0e:7b:ee:a2:b3:ad:13:
72:13:21:14:fe:94:9d:77:54:2b:4a:d2:a4:45:35:9b:59:41:
44:00:18:56:ed:87:1a:eb:b4:c3:fb:78:ee:39:bf:98:f9:38:
77:3d:cb:0a:00:b0:df:21:e5:69:cd:bb:cf:38:01:61:f1:3e:
ce:18:20:7a:5f:11:3d:3c:8f:cd:b8:70:11:ec:3c:64:cb:8b:
85:7e:f3:05:ff:ad:d2:e0:db:2a:f6:31:63:22:ca:96:c1:bb:
8c:9b:48:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:36 2025 by rpki-client