Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
File: S6ydJvegW02SUkmAV6OBSsr30a4.mft (raw, json)
Hash identifier: zKGwo9wrC9F9o9EguaqE/eU+tum9hXKOohPuoIHD5yQ=
Subject key identifier: D1:17:DC:81:54:A1:F1:77:4E:1A:3C:53:B4:54:A5:57:99:AA:DC:E5
Authority key identifier: 4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
Certificate issuer: /CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Certificate serial: 0197B88EF763C538D02C5BBA6F81EDBF89B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:01:06 +0000
Manifest this update: Sat 28 Jun 2025 22:01:06 +0000
Manifest next update: Sun 29 Jun 2025 22:01:06 +0000
Files and hashes: 1: S6ydJvegW02SUkmAV6OBSsr30a4.crl (hash: 45dv101Kn+zI52CXRvnyiHHrxyoWf2GH2itUt3RwwaQ=)
2: f3uE1VDv54J39oNndZpR1jGOB3k.roa (hash: VxNR3ak8y3zHWEe06TEiHqAXTE53GXjV8ny9xJNog8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:f7:63:c5:38:d0:2c:5b:ba:6f:81:ed:bf:89:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bac9d26f7a05b4d9252498057a3814acaf7d1ae
Validity
Not Before: Jun 28 22:01:06 2025 GMT
Not After : Jun 29 22:01:06 2025 GMT
Subject: CN=d117dc8154a1f1774e1a3c53b454a55799aadce5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f0:e6:de:d9:44:bd:23:2e:ae:35:54:67:f7:
9e:fc:9b:d5:cf:d0:fa:f4:92:41:db:78:57:1b:20:
ca:80:0a:e4:ea:9c:29:86:b5:fb:5e:cd:2f:0b:7a:
68:78:a9:e4:56:55:b1:df:4e:61:ab:6f:1a:67:fe:
ff:24:43:0f:be:f0:13:f6:5d:45:6c:1d:dc:f3:ba:
d2:9d:e6:e9:9c:9b:da:86:5b:dd:c5:be:e2:f1:20:
ed:83:a7:82:5d:ba:ee:c1:fc:47:a5:34:76:e1:ef:
82:66:c8:fa:1b:11:a2:77:05:ba:ec:26:e2:82:95:
1a:6e:ce:55:72:77:b7:aa:6c:45:0e:00:1c:83:f2:
fd:6e:b9:83:ee:85:14:d8:ad:e4:bd:53:cd:d9:18:
8c:69:27:8c:9a:72:fe:ff:2d:55:dd:90:d8:44:03:
77:a9:b5:6f:ac:48:74:b9:1c:b1:e4:52:3b:39:d3:
0f:8d:47:42:dc:db:26:7e:cd:de:0c:73:31:b7:fd:
5f:12:be:9b:5b:df:47:93:1b:ee:df:9c:58:5d:3a:
a0:1d:9b:64:83:a4:cb:6c:34:50:60:ae:2f:a4:39:
b9:ab:08:db:86:33:0a:be:00:7e:04:3f:bb:84:89:
46:e3:83:2f:6b:5a:d3:55:1d:c0:f1:ef:03:cf:2e:
13:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:17:DC:81:54:A1:F1:77:4E:1A:3C:53:B4:54:A5:57:99:AA:DC:E5
X509v3 Authority Key Identifier:
keyid:4B:AC:9D:26:F7:A0:5B:4D:92:52:49:80:57:A3:81:4A:CA:F7:D1:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S6ydJvegW02SUkmAV6OBSsr30a4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/008d7e-19a5-42b9-808c-bdb64929983f/1/S6ydJvegW02SUkmAV6OBSsr30a4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:af:22:e6:f3:f7:08:05:8c:e2:ce:66:ad:eb:ca:bf:d8:9b:
d8:bf:e9:b4:0f:5b:b8:10:6d:36:db:4e:de:e2:a9:f0:93:ca:
49:56:37:4c:60:e1:1f:d4:8e:80:60:70:c2:0b:1a:e2:2f:97:
ed:c1:43:56:1b:c5:4f:af:41:2b:6a:7f:b8:f2:d8:38:14:66:
bb:7e:d4:b7:70:74:d9:7f:ac:07:0a:1c:d2:83:96:10:f6:dc:
55:a0:76:3b:0d:bb:38:72:99:0a:65:fd:7b:e9:36:ec:08:cf:
82:1c:d7:24:f4:b1:38:a3:9a:16:3c:52:b3:73:f4:1c:ee:ed:
ce:36:92:83:bb:df:f2:92:c6:ab:82:d9:b1:b8:07:74:a1:bd:
27:d8:23:34:cd:db:aa:2c:0b:bd:0d:b8:e4:7c:8f:65:3b:ec:
39:69:15:db:91:ed:c6:38:88:ee:b2:86:40:e2:b3:0a:a6:b8:
01:76:72:de:0b:f3:b9:af:f4:a6:59:f6:fb:5e:3f:bd:07:5b:
45:2f:a6:8c:34:a8:86:eb:e5:4a:a1:60:9d:02:8e:eb:27:03:
0e:82:5e:5c:f5:00:3f:91:61:19:b6:c8:9b:fe:e8:b1:80:4f:
e8:49:4e:12:cd:89:6f:df:7d:8e:fd:ac:d5:dd:8d:8b:de:02:
1e:15:06:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 08:15:03 2025 by rpki-client