Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
File: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft (raw, json)
Hash identifier: JTp9icB2uU1aa/1u53Do5wilEeBg6u3Mjp7Kv9B0YTE=
Subject key identifier: E9:2F:15:9F:82:24:A5:C9:FF:BA:2E:3A:63:0E:80:24:B9:3F:30:CC
Authority key identifier: EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
Certificate issuer: /CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Certificate serial: 0197B6D77FD15979D87DD0C14F073F60B95E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 14:01:05 +0000
Manifest this update: Sat 28 Jun 2025 14:01:05 +0000
Manifest next update: Sun 29 Jun 2025 14:01:05 +0000
Files and hashes: 1: 7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl (hash: yGP8/88bWbq0/TDHeyO3oPu115w0p9SZs9eUbII4ZQ8=)
2: QmonITNns_8Q9qn9QpgL_m0jbZY.roa (hash: lePHGLh8RQcKhBsHHefYW0245CnYH1iaj+dz5PW9vD0=)
3: d24ICbco0VbAsWx0dcNaky51E1k.roa (hash: d1k6XX+Y5B2DmgHQo92ou+wFZc56ndYpjjXsKkYwekM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7f:d1:59:79:d8:7d:d0:c1:4f:07:3f:60:b9:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee2259f158b9aa76aad0b1adfa62c1eed4559d14
Validity
Not Before: Jun 28 14:01:05 2025 GMT
Not After : Jun 29 14:01:05 2025 GMT
Subject: CN=e92f159f8224a5c9ffba2e3a630e8024b93f30cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:70:dd:7a:45:62:83:ef:14:13:57:3e:5e:41:
7a:b6:1b:db:fe:e3:e9:f8:b5:7c:c8:02:4b:9a:ef:
73:a6:95:27:f9:12:54:6a:8e:8d:f4:7a:ca:ad:8b:
9b:19:84:71:b1:40:66:ca:be:76:d7:42:d6:d9:6b:
74:6c:9a:b7:e9:67:70:bd:00:6e:c5:a3:85:01:93:
92:b2:e6:22:3a:54:64:71:32:cc:db:a4:0d:df:52:
9f:25:e4:cd:76:61:51:cc:98:e1:ec:3f:fc:de:b1:
4f:1e:ec:a4:61:45:b9:39:5f:40:27:0e:5e:d5:7a:
6d:f2:fe:4c:33:7a:47:fb:6f:26:05:b7:c2:b3:30:
41:8f:96:a7:5d:ef:43:f7:03:29:c1:67:70:c9:69:
da:88:ea:e3:6c:06:49:bb:cb:79:17:12:40:94:4d:
c9:7e:de:5d:23:33:9a:f4:f5:ab:6e:6c:5b:92:15:
17:d5:09:03:a4:08:16:03:c5:00:43:1d:aa:bd:b2:
91:56:36:69:ef:65:89:0e:5d:ea:4f:ee:25:13:23:
29:e2:fd:d6:96:b3:1a:85:ce:1b:ac:8d:45:64:71:
1d:e8:2c:5b:10:fa:f6:cf:f7:76:88:90:b2:85:c8:
5c:8c:32:29:f2:2d:5b:fb:43:ee:c7:1a:82:f1:62:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:2F:15:9F:82:24:A5:C9:FF:BA:2E:3A:63:0E:80:24:B9:3F:30:CC
X509v3 Authority Key Identifier:
keyid:EE:22:59:F1:58:B9:AA:76:AA:D0:B1:AD:FA:62:C1:EE:D4:55:9D:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/41012e-7885-4f40-bdf4-3497ce1b71bf/1/7iJZ8Vi5qnaq0LGt-mLB7tRVnRQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:73:77:4c:1f:f6:93:44:b5:55:57:5e:88:16:7d:0e:d1:03:
42:07:c9:41:92:a5:bc:21:9d:ab:5c:ad:88:e5:68:38:2c:f7:
56:64:c9:d4:19:75:3f:a6:8f:32:9e:9c:0c:f5:33:aa:27:67:
14:ba:a9:68:33:fe:fe:87:9c:14:c9:cc:93:b7:52:78:d7:67:
4c:bc:9a:ee:f6:19:50:d8:14:b9:50:3b:da:18:b6:36:b4:aa:
7c:49:51:95:9f:e4:d6:da:a5:88:e7:a9:51:b3:e0:c8:4c:ee:
52:34:e6:29:2f:45:c9:c3:fb:30:1c:98:ee:d5:f9:4b:9c:0a:
dd:26:b3:55:52:ea:fe:c6:fa:28:d5:28:f7:63:16:70:8e:af:
7a:58:a7:60:43:29:d8:3f:4a:7b:0c:dc:7a:7e:d1:b9:d6:24:
9f:ac:13:aa:6f:45:56:2c:23:67:66:0d:36:74:41:5f:04:38:
12:78:e3:62:8c:09:a9:a6:c0:21:0e:01:4d:22:eb:21:7b:1e:
1f:32:af:0f:d1:4a:10:07:b1:e7:aa:6b:9e:f6:fe:0d:32:4c:
fe:12:bd:af:49:55:b3:b6:b1:cb:f7:af:7f:6a:14:d7:8a:38:
91:00:61:6e:02:4f:08:26:a0:23:c9:42:81:f9:37:02:d8:b5:
b8:f9:9c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:16 2025 by rpki-client