Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json)
Hash identifier: Mca4/QkL/zGU9oKGGc0O7onf4eX2CJG+CRNH06Ucbv0=
Subject key identifier: E7:DF:B5:50:AD:AD:15:23:87:0F:BF:E6:99:36:1F:2F:9A:33:2D:57
Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Certificate serial: 0197BA7EDE64F370C4CB58765F4F47B1B937
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
Manifest number: 15C8
Signing time: Sun 29 Jun 2025 07:02:45 +0000
Manifest this update: Sun 29 Jun 2025 07:02:45 +0000
Manifest next update: Mon 30 Jun 2025 07:02:45 +0000
Files and hashes: 1: 96Q3_tRAllst6ja08qEgDUeoS3s.roa (hash: M/XsnaTMi6H7HudvwSEvRzo4uPxFB65/y7e+qQGzx28=)
2: DDQIJxH2b58VmcYYvk8QaV3dTZs.roa (hash: 0ls+tmpY6MrdlYFsq9WP/IA6QXpmNxNjMV8MGQI0rqA=)
3: aBa2MjdPH7cD_zGoyc7aV3RoAOE.roa (hash: jbRWHdEg7tl7TrOzBobGPeyboOtfV4qfJQlBzdiCP8Y=)
4: mpnmxcezza43gCgHhqavVbc5ErA.roa (hash: jNboZ69/cDqtpmyXSrtnPV/gJ9nvg6c2NlB1yYkw+PA=)
5: oatwYy2j--y4A4dkdi2Ei0TqLKU.roa (hash: beRtQjCncuGRKcclQ2/Ky7ZCUl+J1GdvvwHgNtsiUNI=)
6: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: dqwbVFmO+K1UQYIT0l4/RuORziK8vWK4ZyOfimco+hU=)
7: sBAxckkYtrfgcrfBR2IV3YAZOPc.roa (hash: lqfygX1WU8rH/a5kZrR2qQOCzsbDovxIUT7C9BuVnZc=)
8: xcdxsrUjEBV7WF24jzMhc8IqKVo.roa (hash: hBVbnIFi48onJ15EyX9//i4bQVarPZB24udvlAZ7VnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:de:64:f3:70:c4:cb:58:76:5f:4f:47:b1:b9:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc
Validity
Not Before: Jun 29 07:02:45 2025 GMT
Not After : Jun 30 07:02:45 2025 GMT
Subject: CN=e7dfb550adad1523870fbfe699361f2f9a332d57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:30:5c:ec:88:21:c3:85:8c:af:5d:22:35:3d:
25:26:d0:5c:26:57:40:b2:7a:df:46:91:f3:ef:15:
47:7f:6b:ec:f6:fa:31:8c:4c:cf:f8:d6:2c:98:92:
a3:87:64:b1:d1:e9:e5:1d:e7:ef:36:6e:53:8b:99:
cc:5a:c7:64:d3:ae:57:2d:47:b6:0d:88:af:0c:30:
ba:28:8b:5d:11:4e:67:12:40:a4:2e:76:03:8a:4d:
41:66:f9:a0:be:fd:01:2b:02:cc:aa:24:75:c5:c1:
22:00:f4:8c:03:78:e7:1a:f4:2c:a7:82:5a:a0:ab:
3a:30:a3:b0:ce:f4:14:f4:8f:e2:d5:73:33:1d:c9:
b7:96:32:6d:49:87:f2:bc:db:54:73:41:c2:9a:f6:
9b:bc:51:0f:19:44:e0:aa:f4:5d:a3:4a:14:2f:b0:
55:dd:b9:df:a9:c6:d7:42:2b:57:53:1a:c0:92:42:
cb:86:44:f4:21:be:26:f4:b2:e6:1a:57:9d:f7:47:
d5:18:ed:57:a5:cd:54:a6:02:f5:96:c3:68:1f:ce:
15:3c:9b:e3:d3:5b:53:d2:05:79:a1:b1:1d:38:04:
3e:8b:95:88:9e:9b:06:d3:76:d1:96:80:00:5c:99:
eb:d2:00:f7:1d:43:35:cd:bb:5a:ea:44:73:ba:5b:
c6:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DF:B5:50:AD:AD:15:23:87:0F:BF:E6:99:36:1F:2F:9A:33:2D:57
X509v3 Authority Key Identifier:
keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:e8:54:12:b1:95:79:fd:dc:b5:b7:72:5b:b1:57:ce:26:14:
4c:6b:29:58:b5:2f:65:90:cc:73:0b:f4:bf:83:2f:a7:c2:93:
93:f6:73:6d:dd:db:ea:fa:14:8e:e1:d7:00:b6:d7:e8:45:f2:
64:c0:e8:5a:5a:78:94:25:1e:53:5b:ec:1d:c1:e1:34:2c:18:
12:4f:88:74:9d:8b:9b:52:f7:60:aa:5d:5f:c0:96:79:00:6f:
c4:79:94:a8:bb:a9:0b:50:24:47:70:68:01:be:7e:2e:a4:9d:
cd:39:1a:16:60:a7:d3:45:dc:9b:de:4d:48:a0:c2:fb:9a:94:
90:84:e6:65:44:d4:0e:9d:50:af:e0:a3:e3:dd:ac:a3:49:09:
f2:40:ca:00:af:07:2e:12:87:83:a6:3b:20:b2:96:28:cf:aa:
a2:83:c8:f8:1f:b9:1f:89:b0:e6:a5:f4:13:ce:16:2d:d6:77:
0e:af:82:80:a2:d1:b1:1b:ac:a6:be:59:16:e8:df:34:96:0a:
f2:83:a7:40:4a:c7:09:1b:81:97:3b:62:13:6e:6f:63:d7:60:
f9:b7:a3:3c:45:02:8f:6a:23:24:36:51:4b:46:cf:44:ab:f3:
a5:1e:36:c6:b6:87:f0:b4:62:9a:e4:39:16:f6:3c:06:24:fb:
71:69:f8:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:04:51 2025 by rpki-client