Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
File: 15-SXhc4vDUrxrXPX_lRs9gTrjk.mft (raw, json)
Hash identifier: NRsL81OWzDuOLWdQd652zQzWuarLiGpoZ+BJNadyGvc=
Subject key identifier: B4:B4:39:DC:F4:72:6E:8D:40:B7:9D:86:8C:D3:DB:40:08:CA:29:AB
Authority key identifier: D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
Certificate issuer: /CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Certificate serial: 0197B6A105FE58FA28F1B9D9446E6CAE960B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
Manifest number: 0637
Signing time: Sat 28 Jun 2025 13:01:35 +0000
Manifest this update: Sat 28 Jun 2025 13:01:35 +0000
Manifest next update: Sun 29 Jun 2025 13:01:35 +0000
Files and hashes: 1: 15-SXhc4vDUrxrXPX_lRs9gTrjk.crl (hash: r31LUiRbnU6tezAWunE8S7KA1uP71jNBUBAf5VNIcjQ=)
2: qNoTgo75uHZdX7Pw5KIkSMbCuIk.roa (hash: Wp90B7y4b1beWFho9S7pJxCTTLLhfUdptb3Ax7iQwmA=)
3: ygl5P_7lTFnzJgirLplRNSI58XI.roa (hash: cR+NYAbF+5iFZxCdzFXgCBDiu3chwIso0AL6/JnYtEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:05:fe:58:fa:28:f1:b9:d9:44:6e:6c:ae:96:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d79f925e1738bc352bc6b5cf5ff951b3d813ae39
Validity
Not Before: Jun 28 13:01:35 2025 GMT
Not After : Jun 29 13:01:35 2025 GMT
Subject: CN=b4b439dcf4726e8d40b79d868cd3db4008ca29ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0f:d9:aa:ac:10:a0:f8:c5:87:89:e1:12:b4:
86:ea:df:38:eb:ef:08:b7:33:63:1a:20:bd:24:c2:
c6:e7:71:a9:9f:48:ca:66:bf:fc:41:cd:68:49:05:
05:b7:dd:56:ad:df:e0:0e:74:02:c0:50:b9:ba:48:
cf:71:98:34:6d:74:66:64:ac:66:17:11:6a:4b:76:
95:95:1d:c0:a1:eb:9e:32:cf:e2:a8:4b:cb:48:23:
45:84:10:59:34:b9:2f:2a:d0:0a:2e:7f:2a:24:e8:
fa:58:fe:0b:20:25:92:db:9b:6d:9d:0d:07:30:f2:
11:17:1b:3a:bf:07:b6:bd:35:a7:4e:82:88:ea:21:
13:74:15:a9:e7:e0:21:b7:e2:5d:2b:71:e2:64:61:
61:d3:b7:d6:86:c4:b5:1f:8c:c5:68:7c:b4:67:29:
c0:12:90:eb:92:27:56:9a:67:51:b5:95:ef:f9:cf:
bb:90:9b:6d:37:85:45:d5:f8:ab:80:0b:e9:86:55:
fd:c3:62:9f:0f:b3:41:bd:27:75:38:9e:da:ea:fc:
98:cf:0a:9e:89:08:63:23:2b:91:71:eb:1e:52:ac:
e2:26:e2:34:18:35:34:9f:fc:5a:e6:fe:98:d2:42:
19:c1:57:d5:91:93:66:20:db:ad:53:90:23:ea:c8:
36:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:B4:39:DC:F4:72:6E:8D:40:B7:9D:86:8C:D3:DB:40:08:CA:29:AB
X509v3 Authority Key Identifier:
keyid:D7:9F:92:5E:17:38:BC:35:2B:C6:B5:CF:5F:F9:51:B3:D8:13:AE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15-SXhc4vDUrxrXPX_lRs9gTrjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/3b2c00-94b6-434d-b362-96a34b022f89/1/15-SXhc4vDUrxrXPX_lRs9gTrjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:27:ab:7e:99:95:21:93:10:90:5c:b2:1f:88:78:4e:70:ba:
18:6a:92:09:7a:f4:70:b4:dd:4a:07:05:bc:53:67:f7:d4:18:
81:2f:f0:24:99:86:7f:7c:c7:96:e2:ba:e0:4a:ee:e6:a6:e2:
96:53:d0:fe:83:06:25:f4:47:60:a1:74:51:30:fc:c9:78:d0:
31:92:b7:07:1c:45:1a:ff:32:2b:7f:e3:02:9c:5e:a7:ac:4c:
59:bf:d8:6c:45:17:4e:aa:81:fb:1d:ce:ce:e2:e9:7f:32:fb:
c4:1d:8e:9d:7a:70:78:95:db:d8:6b:e8:3f:29:b3:68:37:0c:
42:f4:09:9f:b1:e8:07:dd:63:ce:8a:b0:c0:63:ec:e4:ef:6c:
d8:4b:3a:1e:ca:87:3a:25:b3:55:3e:50:c6:02:9a:2e:23:3c:
97:ea:90:e2:85:48:fc:d4:6d:b6:e2:2c:e4:6f:0e:cc:83:08:
c9:30:9e:9c:d1:e1:d7:00:8f:42:03:3d:21:97:b3:f3:da:59:
f6:c2:be:62:eb:b5:24:05:78:2f:9d:9a:df:79:43:dc:90:0e:
e6:9f:b6:51:91:55:cf:59:7e:e9:b3:88:79:d4:a0:d5:e4:61:
c4:87:05:7e:d3:97:5a:59:5c:75:26:01:2e:40:c4:08:1e:db:
f1:5a:ed:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:52:33 2025 by rpki-client