Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
File: p0NjdfsDInVrVdr_ZOJl73LA2lI.mft (raw, json)
Hash identifier: 8BmqXfyVOJBGftiYXNdbxuRnLRqE1k/5JggzmVmJ7KA=
Subject key identifier: 67:39:33:8C:E6:76:15:E2:0E:F2:B2:05:34:D4:DC:A2:A5:09:F1:B3
Authority key identifier: A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
Certificate issuer: /CN=a7436375fb0322756b55daff64e265ef72c0da52
Certificate serial: 0197B7B331569239526AD10019626E5A9BC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 18:01:03 +0000
Manifest this update: Sat 28 Jun 2025 18:01:03 +0000
Manifest next update: Sun 29 Jun 2025 18:01:03 +0000
Files and hashes: 1: 4x6rjkazNCLflUWUlsTwU4cxca8.roa (hash: ow7cUKut6886qX9EXf4fCgAMPFDIEd+yoCgqSPSsnlI=)
2: 7h9PVYRfpJWQVe6p_fUNqkMIVJM.roa (hash: 0F7e9cMMXcDHwo+/3DX5egozFHFiaYZUkpRfNYs9hic=)
3: p0NjdfsDInVrVdr_ZOJl73LA2lI.crl (hash: DpyS9kzbpPCm0aH+wAO9ETzQUvte12M3KXlkulCzjDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:31:56:92:39:52:6a:d1:00:19:62:6e:5a:9b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7436375fb0322756b55daff64e265ef72c0da52
Validity
Not Before: Jun 28 18:01:03 2025 GMT
Not After : Jun 29 18:01:03 2025 GMT
Subject: CN=6739338ce67615e20ef2b20534d4dca2a509f1b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:5a:42:c6:43:0b:1e:6a:a5:e0:ff:c0:b4:
ef:4f:45:52:a1:0e:1b:45:42:c2:5a:10:2b:6e:61:
f5:3b:11:19:82:b7:ab:5f:10:69:40:c9:6e:b0:b1:
fd:6c:74:f9:ae:43:9f:28:23:31:43:1c:e1:fe:a0:
ad:b2:78:1f:b2:36:ff:aa:d6:74:75:eb:ff:30:ec:
ea:16:df:bd:51:88:f0:f0:2a:3e:ed:4c:39:73:f0:
2c:ff:d1:55:eb:0f:ef:38:1a:40:01:9d:11:bb:9d:
cf:7d:20:f3:95:29:eb:6e:11:b0:21:bf:49:d3:3a:
89:92:65:ed:2c:96:d9:79:8f:c3:a4:1d:d5:27:aa:
cc:f2:d2:19:38:44:82:8c:1f:23:6a:2b:88:d5:3f:
07:e8:57:77:ae:16:f4:1a:a0:c9:60:f0:03:b6:0d:
3f:60:9d:5d:b3:e7:dd:53:38:78:5a:a3:33:79:0d:
d3:fa:64:ea:18:2f:78:1c:6a:87:31:2c:71:de:9e:
b2:12:a2:05:66:2d:aa:b4:80:34:e5:a7:5d:13:0d:
98:3f:9c:75:6c:30:6a:38:22:3c:c6:ad:13:31:05:
aa:c7:98:b5:74:4e:d8:63:ec:38:59:68:bd:3f:8c:
da:09:ff:47:c9:8b:35:b1:5b:2e:84:97:c9:ee:28:
8a:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:39:33:8C:E6:76:15:E2:0E:F2:B2:05:34:D4:DC:A2:A5:09:F1:B3
X509v3 Authority Key Identifier:
keyid:A7:43:63:75:FB:03:22:75:6B:55:DA:FF:64:E2:65:EF:72:C0:DA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p0NjdfsDInVrVdr_ZOJl73LA2lI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e5e3fa-99ee-45cf-bd9a-0e6c1fe9d015/1/p0NjdfsDInVrVdr_ZOJl73LA2lI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a5:ee:4a:10:ad:04:f2:84:94:8d:af:2c:8a:70:b6:bd:af:
7f:28:eb:24:67:d8:da:cc:29:08:85:8c:68:33:0d:f1:74:d0:
bc:95:d1:37:b8:d2:61:6c:2c:cf:6a:61:96:0e:65:e9:b1:39:
18:e8:e3:57:7a:8a:d3:e8:74:d2:18:c6:56:05:6b:9c:a1:4d:
96:73:91:23:ab:5c:d4:a2:5d:d2:69:e2:d2:d0:96:c7:9b:f0:
df:c1:f8:37:9c:c8:b6:e1:2f:bf:21:1f:3a:5b:6d:60:d4:91:
85:9f:9a:75:fa:98:13:71:b3:f6:a2:68:5a:1c:c0:8b:1c:cb:
ba:15:10:ee:c8:bc:f5:74:ac:92:ba:62:56:03:8d:2b:e5:92:
f8:75:87:ae:3a:ac:61:20:49:27:a6:7a:07:af:05:63:96:8c:
6c:3c:c5:75:40:80:a3:9b:3b:82:b3:83:c1:74:0e:f4:db:48:
3c:40:7d:71:4d:61:d9:b8:b0:ab:b8:04:3b:7d:e2:40:17:b6:
cf:7f:60:18:32:cb:50:83:52:62:73:34:b7:de:37:cb:34:62:
47:ef:2f:66:43:bc:98:c0:3c:18:cf:22:8f:92:4c:b8:25:13:
cd:d3:47:5c:d1:52:3a:f4:0a:d2:ea:b6:1b:8c:28:0f:c0:5e:
e2:6b:2c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:20:14 2025 by rpki-client