Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
File: b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json)
Hash identifier: dbZXa1Blc+o/LvYIEURVrv7fYDsvk+xsqmROAWixJuE=
Subject key identifier: 97:B1:CD:91:CD:EF:D7:45:E7:6A:CD:CF:70:A7:FD:FC:07:35:E7:CE
Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20
Certificate serial: 0197B6D78C80BF5957231A52BB62C6B61450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
Manifest number: 15F9
Signing time: Sat 28 Jun 2025 14:01:08 +0000
Manifest this update: Sat 28 Jun 2025 14:01:08 +0000
Manifest next update: Sun 29 Jun 2025 14:01:08 +0000
Files and hashes: 1: 3vEPBG1oI2P7D_OfeL-L-zO3dlY.roa (hash: tN3ytiGRqjapeYsvwHwSYsXkP2Hw2Lot2BTQS7jncsI=)
2: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: jjzRg4YxtoQDPNogbwT1FqVP5C8mh7R2de4llXyQaTk=)
3: jN3YKyZr7fLBbaM-ys_51VKLM4I.roa (hash: /Z7rTH+6bXmxYBkfBLPrrW+aXm6fTfnVD3Lj/2mMT08=)
4: pdxIZLkn44c6LSjDy38wqVYD4hk.roa (hash: A+cdWFoJP8yj76UKSIBetM0GWfZ4/vk5vohLKBXTmGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:8c:80:bf:59:57:23:1a:52:bb:62:c6:b6:14:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20
Validity
Not Before: Jun 28 14:01:08 2025 GMT
Not After : Jun 29 14:01:08 2025 GMT
Subject: CN=97b1cd91cdefd745e76acdcf70a7fdfc0735e7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:de:5c:2a:4b:04:91:cb:e1:d7:0e:76:d0:78:
d3:3b:e0:e8:48:7e:9e:e0:32:2e:f2:31:db:e5:64:
3b:87:b0:88:be:15:92:1c:9d:f8:1a:da:47:35:61:
d1:02:8a:38:c9:e8:33:d8:26:d1:54:bc:9f:8e:8d:
e4:cd:26:20:d8:da:10:29:66:0c:e3:a7:fc:e5:df:
20:5a:d3:7f:d3:ad:34:63:e1:e0:bb:22:1c:6b:ee:
51:2b:31:b8:24:34:65:4d:8e:87:c5:82:07:4d:e8:
c3:c0:45:bd:77:2e:94:b0:c0:c3:d5:fd:01:62:c5:
61:58:0b:04:17:db:31:ca:ca:7f:7f:ee:1a:ec:c9:
7a:c8:68:6b:24:b9:63:fd:39:3d:78:d8:09:c1:79:
4e:ac:22:35:89:72:3a:d8:f4:cb:9f:cc:75:60:f8:
04:15:c2:90:a8:2b:3b:ac:ec:2e:27:93:56:97:a2:
e7:e8:59:a3:30:c9:2b:c8:03:46:8f:21:e5:f8:03:
95:b5:ec:d4:62:9e:f7:2a:89:99:0b:52:71:6a:76:
87:ab:75:54:e2:01:26:3e:95:68:f1:0b:c2:aa:06:
ca:32:d7:0b:a9:fb:50:af:f9:db:fa:35:56:a3:03:
6f:35:b4:9c:93:44:41:80:2d:8d:c8:99:48:40:bf:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:B1:CD:91:CD:EF:D7:45:E7:6A:CD:CF:70:A7:FD:FC:07:35:E7:CE
X509v3 Authority Key Identifier:
keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:01:8f:29:35:db:1e:db:79:52:a2:07:10:b6:eb:28:d6:ee:
04:dc:24:2b:e9:c6:b9:e4:e3:15:a9:7d:ae:bf:6a:42:f5:75:
de:68:f9:08:10:1e:54:e4:70:c0:29:d3:bc:93:2a:e1:2c:52:
12:a9:1c:3d:03:1b:9b:f4:d2:d1:2a:cc:b0:ed:96:f1:31:84:
30:f6:94:bb:f3:e1:ff:e8:e0:5c:13:79:e0:9d:22:80:c8:2d:
d2:06:23:63:80:02:b0:5e:74:a3:69:73:7e:1e:e0:e8:08:b9:
c8:f8:5d:29:c8:1f:44:a0:93:76:5e:ef:2a:ab:e8:dd:86:4e:
46:01:66:6c:d8:27:44:bf:fd:b6:4b:86:7f:01:4f:00:15:bd:
16:63:8b:bb:21:b7:8f:a0:a7:cb:11:bf:86:75:2f:1b:a8:e2:
6d:29:9e:bb:28:75:ae:89:ea:ab:db:71:19:13:99:dd:59:29:
e8:c4:ac:d8:65:f8:0b:fc:db:8f:0b:c5:51:10:0d:80:77:ae:
f2:4a:a2:85:28:8e:4e:c0:35:3e:a9:d7:ac:e4:ba:98:ae:ac:
e4:c3:d0:4d:9c:7d:c0:fc:f6:b2:8e:54:1f:1e:37:ed:c1:0d:
d8:dc:63:16:ca:d5:d6:01:25:bf:6e:a0:35:fe:f2:4a:18:1a:
70:ba:ba:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:27 2025 by rpki-client