Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
File: d0TGtvujc4EeAL7khOIkxrbiP9I.mft (raw, json)
Hash identifier: 9ktgLCFEOGTvHZjoUOI67DLy3Q9Dfbj8PekAFk6esyE=
Subject key identifier: EF:4A:56:FD:23:2F:63:E8:1F:65:50:BD:EE:A0:AB:4B:12:D5:FB:61
Authority key identifier: 77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
Certificate issuer: /CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Certificate serial: 0197B6A1501644C06A248614F80D37F9FE31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:54 +0000
Manifest this update: Sat 28 Jun 2025 13:01:54 +0000
Manifest next update: Sun 29 Jun 2025 13:01:54 +0000
Files and hashes: 1: MPxrAGmlXi-R_-aAmj075zLDNVQ.roa (hash: u+cdaGdIb9sz6WUdHND28+hGiYkwyguJ2P/NJZ6f3PE=)
2: d0TGtvujc4EeAL7khOIkxrbiP9I.crl (hash: yBu2AkkFxB51HVJv5SDus23VseLFu/6zgPc9OkhGX/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:50:16:44:c0:6a:24:86:14:f8:0d:37:f9:fe:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7744c6b6fba373811e00bee484e224c6b6e23fd2
Validity
Not Before: Jun 28 13:01:54 2025 GMT
Not After : Jun 29 13:01:54 2025 GMT
Subject: CN=ef4a56fd232f63e81f6550bdeea0ab4b12d5fb61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:7c:c8:e2:ec:69:c1:61:b3:ea:1c:61:e3:3b:
a3:e5:a9:36:f0:1f:39:07:a1:82:f4:34:83:a0:f6:
b9:ee:17:db:0b:b3:87:ed:90:43:b4:fd:27:34:8e:
2e:40:be:83:d5:ef:58:ae:a7:55:8a:b8:ce:aa:0f:
03:ca:7f:38:0e:53:8d:70:34:3b:ba:94:35:29:41:
31:25:3e:fd:e5:ce:52:01:91:d1:89:4b:fd:01:30:
2b:60:cf:39:81:28:4b:91:b1:e9:27:a1:4d:e9:e4:
c2:17:83:8d:c7:0d:d3:2f:4d:b6:45:60:5c:98:8d:
91:09:c7:d1:45:0c:d7:37:ef:d4:fc:14:61:fd:5f:
7c:f6:6b:8f:32:cd:90:ef:5c:a9:40:c0:2a:3a:b3:
78:49:a0:91:31:10:63:a3:80:6a:e1:9a:41:1e:94:
86:f8:2b:1d:b6:c0:c8:ec:c6:03:d6:c0:5d:5e:d5:
ea:a7:5c:e1:f6:cf:5d:50:36:4c:4b:df:62:6b:81:
cd:cd:09:f9:a5:bb:2a:95:5f:ec:48:5f:07:94:f1:
0f:91:97:1d:24:5c:84:1c:30:08:88:8d:47:1a:6d:
44:16:3c:a4:d7:64:f5:30:75:51:2b:3c:f3:3f:b1:
77:cc:8b:92:c8:08:cd:2c:62:0f:1d:13:73:fc:c4:
0d:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:4A:56:FD:23:2F:63:E8:1F:65:50:BD:EE:A0:AB:4B:12:D5:FB:61
X509v3 Authority Key Identifier:
keyid:77:44:C6:B6:FB:A3:73:81:1E:00:BE:E4:84:E2:24:C6:B6:E2:3F:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0TGtvujc4EeAL7khOIkxrbiP9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/744df3-8e29-458b-a459-8f8c89226e3e/1/d0TGtvujc4EeAL7khOIkxrbiP9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:4b:d0:4c:c1:d2:0c:a8:4f:af:37:5a:f5:76:d0:af:64:e8:
29:03:28:49:4c:9d:a1:89:02:95:0b:d7:5d:87:5e:95:13:9f:
71:33:54:4c:9a:87:e0:5a:1a:ef:11:5e:9a:57:5d:eb:2c:1a:
ea:94:13:b6:e3:96:6a:c6:71:00:28:7d:ac:8a:23:59:08:bb:
53:00:ff:f7:38:95:84:aa:c8:83:e5:d2:82:c8:b5:2b:ba:d2:
3c:65:f2:c0:02:8a:8e:0b:3f:f9:88:cb:63:85:52:f3:4f:fb:
67:ac:46:a1:d1:1a:34:45:78:80:88:74:01:dc:68:76:3d:b9:
66:5a:c8:e5:8c:d1:cd:25:84:60:b8:d1:25:fe:75:36:32:6a:
56:d3:0c:40:23:09:9c:e4:9e:90:d1:ed:f7:fa:c3:bd:1d:dd:
20:ff:c9:72:68:31:74:7c:2b:1e:be:d5:2d:b6:d7:f5:b3:e7:
b9:cf:ef:77:a7:96:25:7e:02:b4:88:c3:fa:aa:c6:7b:f4:79:
ca:ac:5a:fc:c7:fe:81:ee:10:af:80:c0:f3:84:98:81:86:e3:
a5:18:b4:11:02:31:cc:87:9f:76:b7:36:9e:6a:63:4b:a2:5e:
bf:b9:1f:bc:78:8e:ec:2f:26:b7:2d:1b:18:62:2b:43:e5:c1:
3a:04:a4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:59 2025 by rpki-client