Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
File: 1lRDbtMkK925b98TmhJT3rmG39A.mft (raw, json)
Hash identifier: trNbuKgI8qcU6pKRHks/ef0B9znyhAPnqm3orqO4xqg=
Subject key identifier: 2F:59:47:87:2A:B4:69:BB:B0:01:45:54:29:1A:A5:15:0A:F0:1A:BE
Authority key identifier: D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
Certificate issuer: /CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Certificate serial: 0197B820D665DF53726242530B93F1D5801F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 20:00:49 +0000
Manifest this update: Sat 28 Jun 2025 20:00:49 +0000
Manifest next update: Sun 29 Jun 2025 20:00:49 +0000
Files and hashes: 1: 1lRDbtMkK925b98TmhJT3rmG39A.crl (hash: hqnsP9maiyB0qLtKQ7MPTd+vxu2HNgyk/q8Xb0BHZ3Q=)
2: _kWvdqNfB5Qi_pth9OeMu1E5uoI.roa (hash: NWHqYOJDwR6XeYKKHls7B7q+f2asHmCl+FEc/+iucHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d6:65:df:53:72:62:42:53:0b:93:f1:d5:80:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d654436ed3242bddb96fdf139a1253deb986dfd0
Validity
Not Before: Jun 28 20:00:49 2025 GMT
Not After : Jun 29 20:00:49 2025 GMT
Subject: CN=2f5947872ab469bbb0014554291aa5150af01abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b9:e9:9c:b3:e6:df:40:a6:be:6a:b8:6a:f0:
2b:49:43:c5:97:34:86:de:87:5c:85:c9:59:7c:56:
e2:62:c2:5a:84:31:2a:b5:5e:e9:ff:28:11:ad:22:
ff:b9:d2:d0:64:4a:0a:9d:71:af:d3:2d:6e:75:7e:
83:e0:8c:b9:2c:83:31:8e:f2:f3:37:be:da:f5:d5:
16:7c:fc:08:2d:2f:10:dc:8b:5e:c6:f5:42:d8:44:
84:0c:c0:a1:44:3f:32:37:d9:fd:b0:f4:97:51:d1:
8d:93:91:65:7e:0f:e9:fe:b2:dc:a0:0f:bd:62:03:
e5:3d:75:d0:2e:ab:10:1b:16:6b:49:bd:53:4d:33:
d5:e1:38:24:62:f4:ac:fb:0a:c3:fa:83:7a:1a:8a:
4c:73:b8:6d:03:a8:02:b9:b6:43:5c:1c:b1:be:5a:
77:24:2c:01:9d:ba:d8:06:6c:9c:e4:59:7a:ed:5c:
ef:77:ab:27:05:36:75:8f:0e:3f:9e:59:ed:54:6c:
ad:2d:26:1c:b4:1a:ed:0b:3d:78:88:88:21:72:fa:
a0:9b:c0:f2:04:bd:9a:f5:35:cd:99:e9:f2:a1:de:
7a:82:3c:6d:ba:66:a7:be:e1:5e:19:5e:b7:95:33:
aa:09:c2:d3:c1:fe:60:4e:44:3b:0d:a3:e0:3c:2c:
1d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:59:47:87:2A:B4:69:BB:B0:01:45:54:29:1A:A5:15:0A:F0:1A:BE
X509v3 Authority Key Identifier:
keyid:D6:54:43:6E:D3:24:2B:DD:B9:6F:DF:13:9A:12:53:DE:B9:86:DF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1lRDbtMkK925b98TmhJT3rmG39A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/3de94a-1e60-4eb8-9a5e-a142087ce890/1/1lRDbtMkK925b98TmhJT3rmG39A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:1c:8b:86:57:a2:8d:2b:9e:4e:d3:05:56:47:a7:e0:5f:b0:
a8:ee:82:ea:d0:2d:c0:c0:80:26:23:77:c5:cb:b2:fd:af:2c:
0d:76:8f:4e:b5:e2:35:e1:56:68:b5:20:02:ab:b0:10:67:a2:
df:62:f3:f8:e2:f2:d4:04:f4:04:90:7c:e0:ab:2a:8f:73:f0:
91:e2:b6:ca:e0:60:55:d5:4b:85:40:9e:96:ec:01:64:ea:ed:
f6:68:51:f9:cb:5b:76:22:29:e8:c8:35:62:98:23:48:ed:a1:
fd:dc:18:fd:b9:ee:ae:2b:27:22:62:b5:dc:62:61:2c:d5:36:
d1:49:e9:80:6e:02:06:20:2a:a1:2c:bd:70:89:7e:c5:d4:51:
c9:1f:46:f0:a6:8d:5d:28:6e:93:6d:81:2d:28:31:5b:50:62:
84:af:08:48:71:b3:68:e0:10:a6:c0:cd:a0:9f:91:83:03:c2:
e3:9e:84:f0:57:dd:57:d0:29:5e:13:4e:72:42:33:c2:cf:63:
1c:a8:d0:89:01:fc:1b:bf:60:b8:9d:8e:c6:85:f6:87:9a:2a:
16:5f:d1:4e:14:2b:5c:07:3d:64:2a:c7:e8:06:66:d9:5d:5a:
da:08:0b:90:32:05:33:f6:8a:c1:51:aa:7c:8d:90:de:bd:dc:
85:a5:17:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:00 2025 by rpki-client