
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
File: r-xPShbMUb1RYhARU5zrV0rBXQI.mft (raw, json)
Hash identifier: PuoLHnYJDDObSNIg65GK6BtrRSvPcEkKHahBLbjJlqo=
Subject key identifier: 25:9B:9F:C3:D9:02:5E:8E:84:D1:F1:AF:24:92:6B:F4:93:5D:D9:93
Authority key identifier: AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
Certificate issuer: /CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Certificate serial: 0197BA7E6C181374E9F309F41E944A64D894
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
Manifest number: 15BD
Signing time: Sun 29 Jun 2025 07:02:16 +0000
Manifest this update: Sun 29 Jun 2025 07:02:16 +0000
Manifest next update: Mon 30 Jun 2025 07:02:16 +0000
Files and hashes: 1: 0kNkc387z7I2x4Yteehk0180PTE.roa (hash: Zuu2mJeRDdNqByIOk7bup5wFBYcY2Qe7ktpeoS994ec=)
2: 9N3RXGB1Oy8UN0Y7dyN-L02RNQg.roa (hash: LpNakPd/aYXI1JhkoX1IQRJscRwTM6lULLDhw2GOIT0=)
3: Lul3hUvdV6C5cSn0ykUAxQPhSaQ.roa (hash: q+jHwWcary8atsFBUa3Y/27z3nJW8U1gs5fNpNDELkU=)
4: PIRRrWFSYrZNmeAa6_-TvMTmD6Q.roa (hash: V3+P79bG0jSa7b+MpAG52JNhfjYjObP7ww4sVt5PAYs=)
5: r-xPShbMUb1RYhARU5zrV0rBXQI.crl (hash: DEK6fGa6ZO1Pu8qpkN+b5i769Y/HiEU6N7xhTvw6su4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:6c:18:13:74:e9:f3:09:f4:1e:94:4a:64:d8:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afec4f4a16cc51bd51621011539ceb574ac15d02
Validity
Not Before: Jun 29 07:02:16 2025 GMT
Not After : Jun 30 07:02:16 2025 GMT
Subject: CN=259b9fc3d9025e8e84d1f1af24926bf4935dd993
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:2a:41:dc:9c:45:96:92:98:8b:88:9c:93:ad:
a2:62:c3:d0:91:70:f8:b3:b3:b6:79:7e:53:0c:74:
31:9e:61:6f:48:11:c1:0b:7a:18:b9:0e:42:f2:7b:
2e:e7:fd:20:61:2e:af:1f:6a:da:a4:a9:2f:42:3c:
05:04:32:bb:7c:72:62:2a:df:e9:07:3a:e9:35:37:
e2:47:85:b1:c7:11:fe:3c:4b:b8:81:86:a3:66:5b:
25:94:91:59:b6:01:35:89:5b:c5:f8:df:89:c9:75:
98:62:12:f5:4a:64:28:8d:14:9f:76:e7:25:96:67:
4b:cb:cb:81:17:84:b5:16:30:bd:fa:19:dc:20:af:
7f:b7:9b:e8:8a:25:d5:dc:1c:8c:92:ae:e6:b0:35:
dd:19:52:62:49:94:42:a4:f5:b9:72:4a:16:31:3c:
9b:5e:f8:cb:01:76:bf:5b:81:f0:ac:b1:61:7e:56:
30:28:1c:4a:17:45:61:83:d0:0d:1b:93:d0:8c:d3:
18:64:6e:2b:1e:81:09:67:95:35:17:b3:a5:7b:0e:
90:d5:6e:fe:48:07:ce:2b:3c:d4:77:61:01:d5:f8:
d0:82:f0:25:67:d5:e2:65:e7:ab:90:aa:48:c9:aa:
e1:b2:2b:cd:c4:04:9c:15:57:97:3f:74:4f:37:89:
fa:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:9B:9F:C3:D9:02:5E:8E:84:D1:F1:AF:24:92:6B:F4:93:5D:D9:93
X509v3 Authority Key Identifier:
keyid:AF:EC:4F:4A:16:CC:51:BD:51:62:10:11:53:9C:EB:57:4A:C1:5D:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-xPShbMUb1RYhARU5zrV0rBXQI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/9f7b6b-b29d-486e-8478-27efc13aff1e/1/r-xPShbMUb1RYhARU5zrV0rBXQI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f5:03:3e:ee:77:bd:f2:ec:2c:e1:0c:82:de:0e:71:da:59:
13:77:67:c8:10:43:44:ce:13:5c:67:14:22:80:ce:19:61:78:
1a:28:3c:56:88:3b:22:4b:07:b1:53:36:d7:d8:4f:58:07:c6:
5f:c7:31:f4:50:96:ed:99:3f:02:d4:bc:59:d7:a4:25:dd:cb:
8a:b4:e4:38:e4:f5:37:cc:0d:b5:80:1e:fa:53:c6:b9:e2:18:
d5:69:9d:e2:e4:77:ed:bb:4b:aa:a8:eb:38:c5:6b:27:fe:7d:
f8:72:ce:5f:36:f2:e6:7c:18:b9:7c:63:d9:a8:73:04:af:ca:
1b:e9:e0:b3:d2:df:03:82:6c:66:82:ae:14:9e:99:57:b5:f9:
8c:61:e8:41:e9:38:e3:37:ab:82:12:4a:0f:74:49:11:dd:f7:
91:36:64:0e:34:07:95:be:9c:27:49:2f:47:14:87:f9:8b:64:
79:83:09:7c:d7:40:92:94:7a:f1:8a:32:38:b0:ec:66:f3:56:
8f:34:f2:f9:5f:cf:7c:2b:d1:b4:c7:69:fe:c1:51:c8:2d:ad:
0e:13:8c:2b:e7:51:68:77:97:cb:75:b3:57:59:a9:7c:3e:84:
52:47:18:0b:09:21:aa:83:dc:6c:70:bd:4e:f4:4c:3e:25:0a:
67:70:eb:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:06:27 2025 by rpki-client