Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
File: 1Iml3dMALoAJmbXBhn94Z4G68T0.mft (raw, json)
Hash identifier: /ge5i1lpeE5YoObv28l2deOAyLiOHHaV+rfBLi2+n3M=
Subject key identifier: 2B:B7:C0:82:62:BE:BE:B8:9A:52:27:72:FA:22:EF:53:BC:3C:4B:21
Authority key identifier: D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
Certificate issuer: /CN=d489a5ddd3002e800999b5c1867f786781baf13d
Certificate serial: 0197B77C330E94124E43FF7866E01F71DC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:00:59 +0000
Manifest this update: Sat 28 Jun 2025 17:00:59 +0000
Manifest next update: Sun 29 Jun 2025 17:00:59 +0000
Files and hashes: 1: 1Iml3dMALoAJmbXBhn94Z4G68T0.crl (hash: 03a7a/j3cgQzmXMk6+FlwbW8iexXuWulIJA6XrdwuC4=)
2: Oic624JnJmz9lkyUCkfkxynrzXU.roa (hash: reuQNdNLE9OYq59c7HheLuUPxQ+GdUmZR0j+FA5WU8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:33:0e:94:12:4e:43:ff:78:66:e0:1f:71:dc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d489a5ddd3002e800999b5c1867f786781baf13d
Validity
Not Before: Jun 28 17:00:59 2025 GMT
Not After : Jun 29 17:00:59 2025 GMT
Subject: CN=2bb7c08262bebeb89a522772fa22ef53bc3c4b21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:35:1c:dd:e0:c7:cd:67:86:45:d8:b8:24:20:
f8:d7:27:b3:a2:c4:cd:d9:43:50:91:be:d8:fc:27:
ea:0a:9f:74:cd:28:e6:44:7f:dd:d5:56:02:f6:2c:
b5:72:5a:04:d1:90:2b:4e:0d:f1:b2:9b:66:ec:85:
7a:55:59:f0:d4:f4:7a:6c:be:e5:bd:46:47:1e:a0:
35:da:f3:a8:4b:a2:d9:5a:9b:43:75:f3:5c:21:04:
34:21:4e:5c:eb:47:89:91:d9:32:4e:f4:75:f6:82:
ef:3a:8d:02:2e:d1:b6:f7:42:45:2c:0f:02:56:59:
22:c7:02:a4:17:50:09:52:c7:e8:39:1c:18:b4:70:
c5:44:79:13:80:e1:dd:d8:db:eb:43:0e:57:1f:c5:
68:56:09:41:0c:1e:3f:dc:b9:13:28:7c:3e:5e:5c:
68:56:db:6b:04:c4:6a:ce:10:dd:67:0e:bf:ec:50:
84:5d:78:44:7f:33:7f:da:c7:38:6c:98:01:3a:4a:
25:6a:90:16:03:e2:b7:97:ae:a7:39:e2:1c:ef:99:
72:e3:5e:95:a9:8c:64:ba:5b:f7:34:d9:28:89:85:
f5:c1:1c:af:6c:17:76:03:09:e5:bb:cd:26:b3:b9:
e2:67:76:92:18:b5:be:11:63:df:e4:fb:b9:53:ea:
fc:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:B7:C0:82:62:BE:BE:B8:9A:52:27:72:FA:22:EF:53:BC:3C:4B:21
X509v3 Authority Key Identifier:
keyid:D4:89:A5:DD:D3:00:2E:80:09:99:B5:C1:86:7F:78:67:81:BA:F1:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Iml3dMALoAJmbXBhn94Z4G68T0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/bfd2d4-6d45-44bb-ae6b-5259eedca07c/1/1Iml3dMALoAJmbXBhn94Z4G68T0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a3:da:9f:bb:42:30:ac:d2:20:bc:39:d8:4a:77:2b:13:79:
00:c4:66:b2:3d:ca:a7:04:0b:04:c4:c2:2d:fe:7e:c5:72:b6:
bd:a7:ce:9d:c0:df:9c:e1:c4:c9:40:65:bc:ff:9e:e2:48:8d:
04:8b:cb:12:04:a7:82:50:03:98:ce:1b:b2:a3:7e:e7:9a:59:
bf:9d:0c:c5:40:6a:84:9a:22:1f:1f:5f:33:07:0f:50:0c:ab:
95:31:55:13:6d:f0:a3:43:95:00:31:07:47:ea:52:a1:64:24:
35:69:9c:cf:ec:d9:24:15:05:75:ba:ad:45:16:61:c3:30:27:
8d:e1:17:f1:92:da:4b:6b:69:f5:52:c6:f1:4e:ac:80:75:8d:
3a:76:b3:d4:ea:9a:d2:5e:a3:7b:3b:2e:cf:80:d9:45:dc:74:
92:85:b8:9f:d4:e4:67:93:4d:7c:99:14:58:3e:90:5d:6b:fe:
2d:14:7c:36:02:8f:86:72:cb:da:70:8c:81:c1:fe:3a:de:8c:
cc:1b:89:10:18:6a:6a:55:74:78:b3:7a:a6:b3:4a:a5:db:f1:
25:a4:2f:71:d7:ff:30:0c:38:c4:82:f6:55:18:35:f3:20:5a:
58:b2:d0:8a:12:8f:ac:33:e1:d2:89:75:e4:e6:89:f0:bd:1b:
d7:69:a1:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:03 2025 by rpki-client