Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
File: 14rBdOhStxwxFj7B2GSf_2sHunk.mft (raw, json)
Hash identifier: tlFnQ+hsOdixmhZPYLtsr6rvEcLgm9o76L3XlmplB1I=
Subject key identifier: A7:EE:64:D6:8E:6B:A2:B0:D9:8A:23:D9:8A:B9:B4:C2:12:F6:76:F7
Authority key identifier: D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
Certificate issuer: /CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Certificate serial: 0197B6D7645168CEA5B3FD99589AA810DEAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:00:58 +0000
Manifest this update: Sat 28 Jun 2025 14:00:58 +0000
Manifest next update: Sun 29 Jun 2025 14:00:58 +0000
Files and hashes: 1: 14rBdOhStxwxFj7B2GSf_2sHunk.crl (hash: VehkXBYAiC5ZaCdUCL6yuZOxcCbPpnEMJM2jADjDiVs=)
2: G2qBYse5oGAPa5xfzo8tHGuDcqo.roa (hash: mPibjHFH8adYSb6G95eGzgbjvN5yGYvqGie41fvkWHY=)
3: YI8wZlD-HEfeT6xqGwFmZ1QdD6k.roa (hash: w7eB/hHlmGKQgAjYLk+eJl1NQTaGD79bb/QVrN64Cf4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:64:51:68:ce:a5:b3:fd:99:58:9a:a8:10:de:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d78ac174e852b71c31163ec1d8649fff6b07ba79
Validity
Not Before: Jun 28 14:00:58 2025 GMT
Not After : Jun 29 14:00:58 2025 GMT
Subject: CN=a7ee64d68e6ba2b0d98a23d98ab9b4c212f676f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:9c:cc:63:70:5f:b3:89:c9:fc:3d:f9:fe:e3:
72:71:e2:c7:fb:6c:b5:7d:dd:9b:0a:25:71:c0:ba:
2e:31:25:52:bd:5f:2f:a0:24:81:5b:db:13:14:03:
e2:8b:19:33:10:0a:05:82:e1:85:17:87:71:de:32:
52:fd:3c:f0:20:87:66:ef:89:bd:d6:9c:41:cb:8c:
86:76:ed:63:93:75:ba:e6:54:ce:61:20:6d:ae:3f:
28:2a:b7:75:91:8d:64:18:ed:ef:64:a8:d1:60:38:
18:65:20:dc:a5:3c:d3:b6:7a:36:5b:b1:2e:69:e3:
aa:a2:36:3f:d6:ea:6e:0f:ed:a9:b3:a2:bb:42:53:
33:a3:1e:4a:36:aa:23:4a:6a:71:c8:4e:1a:3d:91:
02:d0:77:62:c6:bd:d0:b8:32:2d:eb:99:16:90:b7:
36:25:ab:82:63:27:f6:da:7d:d0:f0:da:12:4c:4e:
1a:89:c1:bb:e9:82:09:93:66:d6:d7:29:e2:18:c2:
ae:5e:d8:fc:6d:d2:bf:cd:ab:09:45:62:a7:55:49:
da:ac:88:aa:75:ec:55:f4:40:01:15:d8:2b:f3:a5:
d6:d0:fb:a0:59:78:72:0e:b7:30:c9:c0:10:e5:38:
09:57:e1:53:11:74:74:34:33:ab:c0:2b:66:0e:6e:
0d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:EE:64:D6:8E:6B:A2:B0:D9:8A:23:D9:8A:B9:B4:C2:12:F6:76:F7
X509v3 Authority Key Identifier:
keyid:D7:8A:C1:74:E8:52:B7:1C:31:16:3E:C1:D8:64:9F:FF:6B:07:BA:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/14rBdOhStxwxFj7B2GSf_2sHunk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/e80231-53b8-4225-8523-947de3868cd5/1/14rBdOhStxwxFj7B2GSf_2sHunk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:bd:69:4d:51:08:c2:c1:b4:d2:1a:f5:65:e6:39:07:35:ff:
d8:00:e0:0a:ff:a0:6b:e5:7d:db:e4:04:e9:bf:3c:75:18:c6:
24:7e:f9:b9:2f:53:4e:57:4f:4f:13:de:82:2a:aa:4e:ed:3a:
2b:ed:35:b3:c4:42:be:89:c3:93:25:41:cf:31:3a:4a:5e:8c:
8e:cd:10:bd:b7:1c:6a:4b:90:41:41:ed:ba:10:ce:02:c3:5f:
63:88:b0:27:79:ce:ec:50:d2:a0:5b:53:49:27:ef:55:bb:2a:
7d:e8:b4:dd:d1:7d:09:c2:b5:1a:75:55:c0:f2:a5:49:d8:34:
7d:f1:f8:b4:98:0a:6d:0a:16:14:dc:39:61:c0:2c:e8:f7:cb:
a2:65:8a:3a:b9:c6:2d:89:8b:87:77:9f:12:c3:f2:a5:12:47:
2c:9c:8b:9e:88:00:d2:24:62:2a:09:77:58:06:6c:83:50:61:
c0:02:a5:5e:4d:52:b7:6e:91:8d:cc:91:d7:7f:bb:8a:f0:64:
57:1d:23:bd:0f:2d:b1:a2:7e:76:54:6f:e2:07:65:fb:d0:04:
f7:49:38:49:fb:69:4a:62:ee:6a:f2:5c:0a:0e:76:39:4a:7c:
d4:0c:58:6a:7d:2a:84:da:c3:da:59:98:89:6f:68:12:a1:ba:
93:1c:70:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:55:43 2025 by rpki-client