Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
File: d2ijHlyKWogiWYmhuu9KOBM4YBo.mft (raw, json)
Hash identifier: /dF+TiQzxLaC3uJB98zuyLnp8DnuITpmwV6rMP8ALzU=
Subject key identifier: 2A:77:C0:77:96:71:A6:84:B7:78:6B:74:29:CD:C1:D9:EE:2F:C6:86
Authority key identifier: 77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
Certificate issuer: /CN=7768a31e5c8a5a88225989a1baef4a381338601a
Certificate serial: 0197B77C72C590DCE609FC4EE9D02BB5FA90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:15 +0000
Manifest this update: Sat 28 Jun 2025 17:01:15 +0000
Manifest next update: Sun 29 Jun 2025 17:01:15 +0000
Files and hashes: 1: 1-Q1JJEM-283CkQsyWnWZizkRRH0.roa (hash: pMkrNzbMgj6JidKdCAH0olpZAepxai3+rIJ34FZ4TEQ=)
2: d2ijHlyKWogiWYmhuu9KOBM4YBo.crl (hash: bP9NFosbN7K4kUMxqo6Tp1qvt5MZaw/GYXA38bSmCrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:72:c5:90:dc:e6:09:fc:4e:e9:d0:2b:b5:fa:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7768a31e5c8a5a88225989a1baef4a381338601a
Validity
Not Before: Jun 28 17:01:15 2025 GMT
Not After : Jun 29 17:01:15 2025 GMT
Subject: CN=2a77c0779671a684b7786b7429cdc1d9ee2fc686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:87:c2:9b:15:5e:2f:92:91:28:0d:0d:f7:23:
9a:35:6a:b4:48:e0:cc:55:32:75:2e:c2:3c:38:2c:
e8:40:f0:0d:fe:7e:b9:22:d8:84:6d:3d:7b:55:70:
c8:62:b5:44:7b:9b:59:cf:7c:a5:69:19:0f:b3:29:
6f:7c:8f:b2:0c:e6:98:d2:aa:24:5c:97:0e:74:75:
b5:a9:6c:b9:f6:64:f4:0f:67:ed:55:94:c6:43:a6:
8c:30:8b:8c:b9:cf:23:d2:10:40:6d:9b:b7:f2:2e:
0f:97:10:bb:08:3a:7e:98:bf:e1:1a:be:b1:91:dd:
2a:c5:53:ec:7e:e3:05:75:cf:b7:04:f4:87:53:f9:
1f:cb:47:65:15:74:5c:a3:17:09:1e:3f:d3:2b:02:
b3:7a:4b:fd:ef:bb:ca:3d:c5:ed:9a:3a:0d:70:52:
e7:6a:82:42:2c:bf:bd:f4:f3:c4:80:46:43:b6:d0:
8c:36:54:8d:4c:ca:69:ed:fc:18:23:fc:f3:7e:2b:
f1:b6:07:9a:90:58:a8:d8:3d:bb:92:a2:38:37:8d:
fc:f0:0f:0a:63:25:93:49:23:09:dd:48:a9:7c:8d:
71:ae:68:09:bd:7d:d9:c0:e3:d4:a0:bd:32:a9:ef:
05:2e:d4:ae:62:28:62:40:81:e6:04:14:b5:9a:3a:
fb:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:77:C0:77:96:71:A6:84:B7:78:6B:74:29:CD:C1:D9:EE:2F:C6:86
X509v3 Authority Key Identifier:
keyid:77:68:A3:1E:5C:8A:5A:88:22:59:89:A1:BA:EF:4A:38:13:38:60:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2ijHlyKWogiWYmhuu9KOBM4YBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/e3050e-9994-4b96-bc79-766ead7e6513/1/d2ijHlyKWogiWYmhuu9KOBM4YBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:50:c4:cc:2f:50:b7:35:e3:4f:06:cc:ca:18:a3:d6:ac:38:
d8:42:c1:58:37:52:2b:b9:16:8c:7b:75:4e:59:e0:f5:19:0b:
62:38:bc:d6:39:a8:4c:d0:52:69:3c:86:d3:98:8c:14:2f:26:
cf:0f:21:25:98:0f:28:09:e3:28:30:8b:eb:e9:c2:c4:0d:66:
17:ca:7d:65:9e:f2:e6:48:cc:2b:cb:8e:3d:b6:29:b8:3c:e8:
fe:7b:50:a6:0e:93:a5:b3:eb:b2:95:4b:ba:8f:26:da:ef:f3:
45:8b:78:74:03:04:ab:a8:15:40:f3:d4:a9:fc:9d:23:a5:43:
df:60:c7:c4:29:e4:39:40:04:08:86:ac:ee:13:e0:42:95:94:
89:bb:02:aa:9f:a1:0f:a9:4e:22:fc:68:47:6b:c6:fc:38:d4:
a1:21:8d:db:d7:0c:68:a0:af:7c:cf:2b:44:37:ca:4b:40:0f:
0c:c5:e3:28:f9:96:86:0e:50:d4:55:f1:4d:6f:cb:3c:27:5e:
5d:bd:98:4f:72:a4:4e:82:9f:97:b8:bc:77:05:50:60:79:53:
b3:db:d2:04:66:db:04:d1:e1:4d:d6:f9:c0:c0:8a:1d:6a:56:
ab:8a:0c:81:74:8b:9f:90:82:89:d9:da:08:34:f2:2f:9d:0c:
72:bc:e0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:07 2025 by rpki-client