Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
File: S82iMJZ8_y7eIXfy0zKvCst-ULw.mft (raw, json)
Hash identifier: ErOhC8Z2tR8ZpYQhkh68RQryCCvA3R1Q5FxiN2L8cDA=
Subject key identifier: 69:43:A9:60:2F:25:75:FD:1B:0F:9E:40:C0:69:BE:C6:1B:56:2B:25
Authority key identifier: 4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
Certificate issuer: /CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Certificate serial: 0197B7EA5ACACFCF22A2AC1DB53B6FCB15A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:18 +0000
Manifest this update: Sat 28 Jun 2025 19:01:18 +0000
Manifest next update: Sun 29 Jun 2025 19:01:18 +0000
Files and hashes: 1: Fu8psE_bzNyJ-uC9sx-rTJ-3C5Y.roa (hash: reqjwr/lIQUNR5CfmDP6LbkF/9R8ba/CN2hm8CCraWc=)
2: S82iMJZ8_y7eIXfy0zKvCst-ULw.crl (hash: n9iul6BtLDWAaXu9mSa73l2B9PKUA55MZ3bKN+JJWPU=)
3: zxQl6jvGeb1c6IVFjqYVLDZ62L0.roa (hash: 1fee2j1QaONApl9ibC5gkmW09S49dKdtErXLxO2GvfI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5a:ca:cf:cf:22:a2:ac:1d:b5:3b:6f:cb:15:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bcda230967cff2ede2177f2d332af0acb7e50bc
Validity
Not Before: Jun 28 19:01:18 2025 GMT
Not After : Jun 29 19:01:18 2025 GMT
Subject: CN=6943a9602f2575fd1b0f9e40c069bec61b562b25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:76:0d:3d:f1:24:63:ae:d8:28:c9:0d:0b:40:
45:57:fb:72:1f:95:a6:09:73:de:49:18:84:91:6f:
81:c6:44:26:af:9c:9d:fb:18:1f:4f:48:e8:79:78:
d6:00:d6:e9:96:f4:d1:20:a8:11:d5:f6:a5:fd:62:
98:bb:f7:83:70:ee:f3:84:29:89:54:40:6b:74:bf:
7d:9b:40:ae:3a:54:d8:5c:99:ac:40:59:14:65:39:
9b:ab:0e:86:d7:d9:ca:1e:bd:16:c5:f6:4c:11:e0:
a6:fc:b4:0c:f6:25:1c:96:55:e8:a8:8b:14:f9:0b:
0a:57:03:ca:23:ef:54:76:5c:20:28:d3:2b:32:03:
c0:ec:44:40:a7:55:71:72:e0:14:13:09:4c:86:89:
26:4c:0e:4d:a9:de:52:a4:78:e0:af:1b:25:fd:79:
a0:a4:aa:3a:0d:e2:16:d4:99:ef:6e:6e:5a:ea:9d:
59:b6:71:87:7c:b4:8d:19:f9:60:2d:ae:8f:98:af:
67:42:29:82:75:f8:58:4e:56:33:f8:b6:23:d0:7d:
74:2b:9f:6c:2c:fc:99:c7:f2:0b:00:78:0d:a5:ae:
ab:27:f4:1c:6e:93:9b:97:54:92:fe:4b:06:f3:08:
0e:a3:04:29:d6:3d:c5:3e:49:d2:99:56:a5:e9:2b:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:43:A9:60:2F:25:75:FD:1B:0F:9E:40:C0:69:BE:C6:1B:56:2B:25
X509v3 Authority Key Identifier:
keyid:4B:CD:A2:30:96:7C:FF:2E:DE:21:77:F2:D3:32:AF:0A:CB:7E:50:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S82iMJZ8_y7eIXfy0zKvCst-ULw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4e5572-a84a-4c9f-9cb1-fe0a1d00b209/1/S82iMJZ8_y7eIXfy0zKvCst-ULw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:df:97:e7:1b:b7:25:8f:d0:51:31:79:85:ab:e8:6d:6c:57:
21:31:f2:dd:90:ba:48:30:4d:19:5f:57:51:96:ad:4a:2d:b9:
85:e7:3f:b0:6b:e2:43:bc:6b:19:1d:4e:92:35:a1:f6:92:0d:
d8:20:6d:ae:16:84:61:8c:48:8e:27:a9:89:83:9a:3d:df:de:
f4:a5:95:ea:03:91:ed:53:7c:ed:d2:6f:47:95:dc:34:11:b6:
b0:4c:9c:99:40:1d:ed:f6:1a:af:29:30:58:84:e4:d0:97:17:
87:a3:62:a3:43:fe:33:f7:0d:fe:ae:25:a3:84:3c:d4:44:9c:
a6:16:0e:ff:72:fd:4f:19:62:42:a0:43:db:76:2e:bc:b3:ab:
46:0b:3b:3f:f1:a3:25:89:17:d0:dd:33:50:c9:dd:8f:87:c2:
04:de:82:47:c4:09:62:62:3d:7c:44:fd:89:85:8d:24:d4:ee:
5c:e4:82:49:ce:ae:ce:7c:e0:8e:13:e4:3d:d5:71:ef:d3:cd:
86:b5:02:dd:e4:30:08:d7:2d:71:0b:00:e3:78:f5:84:70:23:
21:0c:51:f1:4c:67:f7:1a:98:8b:11:cd:c2:26:21:c3:04:f6:
2b:7e:12:cb:e0:a6:22:b4:94:7d:78:01:fe:7b:a1:d3:90:e0:
f5:9e:b0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:55 2025 by rpki-client