Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
File: _7yuKykMgB1X0J0CWpNI4WcG8YI.mft (raw, json)
Hash identifier: S778O9NhTuaJ39BsUzXuq5HfvPGUgPISMXk27tjCJtQ=
Subject key identifier: 4E:C7:2F:59:2E:34:63:2B:A6:01:A1:90:66:51:AC:41:4F:CC:7F:11
Authority key identifier: FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
Certificate issuer: /CN=ffbcae2b290c801d57d09d025a9348e16706f182
Certificate serial: 0197B70EFB9FE537F3417ECCCF8B727CCEC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
Manifest number: 1516
Signing time: Sat 28 Jun 2025 15:01:41 +0000
Manifest this update: Sat 28 Jun 2025 15:01:41 +0000
Manifest next update: Sun 29 Jun 2025 15:01:41 +0000
Files and hashes: 1: 8wTHmWo4SSJsVc0t3sJFniZg3X0.roa (hash: nwCEElQrpQEsbcFPrYoePVQv66vMAWow/x3hFkCdNgc=)
2: BS9tKB-yEzTuSlcr0sNlNMplJ-U.roa (hash: +wyGsgZf3mkT04YYiaLjKGX/U5oOsHBvxk3RajkpCvY=)
3: _7yuKykMgB1X0J0CWpNI4WcG8YI.crl (hash: NBfQ3eN4IES6cfQ9td4FL+eVNA6kTzFWcpUvBI6JJqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fb:9f:e5:37:f3:41:7e:cc:cf:8b:72:7c:ce:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbcae2b290c801d57d09d025a9348e16706f182
Validity
Not Before: Jun 28 15:01:41 2025 GMT
Not After : Jun 29 15:01:41 2025 GMT
Subject: CN=4ec72f592e34632ba601a1906651ac414fcc7f11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:47:0c:1a:00:98:87:cf:4e:f2:5a:e7:a6:85:
c5:7e:5d:06:82:c8:4b:e6:1b:72:6d:31:15:63:4a:
b9:cf:c9:79:41:4a:e2:ed:db:6c:f1:8e:ec:11:ef:
58:95:be:52:dd:d8:51:98:81:fa:ba:de:d1:a6:f5:
22:1f:26:bf:d1:5c:d4:a9:64:ba:43:ac:38:a5:dd:
3c:44:71:ec:8f:e1:c6:83:ea:9e:7d:be:dc:a9:51:
42:5d:19:0f:9e:d4:f4:e2:23:fc:64:0f:1a:82:a1:
c1:20:7d:af:6e:13:2f:63:2b:3f:99:b3:8e:f2:a6:
1b:bc:a2:c5:da:91:42:9f:f8:2d:cc:ed:02:68:10:
ff:17:77:b1:27:0f:14:96:21:c5:1d:74:e1:79:4b:
4b:b4:16:f7:34:5d:fa:59:35:e8:31:50:49:58:73:
f1:c9:bf:6c:90:d0:0e:78:25:f2:2c:8d:75:4a:b4:
c5:98:ad:5b:60:25:68:03:51:14:93:d2:8a:6f:44:
8c:46:7c:30:93:f3:3e:24:cd:ac:de:8c:69:72:05:
74:43:05:85:f2:ea:f0:96:3a:79:b1:db:59:ad:ec:
10:3b:eb:23:d3:c1:45:a9:d8:1d:42:b3:d4:23:be:
0c:c5:86:4a:71:26:ad:54:e6:6a:87:0e:81:ab:ce:
d4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:C7:2F:59:2E:34:63:2B:A6:01:A1:90:66:51:AC:41:4F:CC:7F:11
X509v3 Authority Key Identifier:
keyid:FF:BC:AE:2B:29:0C:80:1D:57:D0:9D:02:5A:93:48:E1:67:06:F1:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_7yuKykMgB1X0J0CWpNI4WcG8YI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/59bcd1-1e0b-485d-9510-096af478f04b/1/_7yuKykMgB1X0J0CWpNI4WcG8YI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:94:71:1c:82:6e:0b:38:9d:f2:96:0b:11:a4:c9:93:30:e2:
0f:f9:ab:e9:18:4a:e2:1b:5b:44:62:22:8c:cc:14:35:a3:66:
ed:0b:f2:a1:97:c5:63:b5:2a:14:d8:8b:17:67:b1:44:8c:ea:
a6:66:4d:dd:f8:ee:d1:5d:0c:73:5a:a2:a5:c8:93:26:2a:23:
b2:6d:c3:28:5f:17:77:17:1d:11:9c:fd:1b:8b:3f:2e:8f:e4:
67:cf:80:2d:84:3b:55:d7:9a:c1:41:db:71:e5:66:4a:05:2f:
68:88:8a:17:b5:c6:a9:de:02:72:40:3c:79:cb:1a:1f:58:fd:
be:58:d6:0a:ca:20:21:95:8c:b2:23:85:ac:08:f2:54:b8:cd:
87:16:5f:eb:72:cd:9b:13:30:0f:d7:e5:ec:99:9a:92:01:7d:
2d:62:3b:85:4c:06:1b:27:c4:5c:70:33:91:2b:70:06:63:b6:
a6:31:65:73:47:83:9f:5d:ea:8c:8e:7d:a5:6f:e0:89:50:7d:
88:d8:89:7f:cb:33:4e:7b:09:72:33:cf:62:a4:59:86:4d:d3:
f3:47:49:09:f9:47:23:e8:b6:d0:d8:50:cf:d7:fd:bc:37:02:
5d:b8:9e:de:ab:0b:ba:13:07:81:31:0f:af:ce:4a:87:33:bc:
12:d8:d8:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:48 2025 by rpki-client