Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
File: t5IgqAXkN4VH5Duscxzob-ARRcc.mft (raw, json)
Hash identifier: 1DCpoAIr3qQjHbUNwTyH/1fhSV8k4x2XfvA6oAf/JnE=
Subject key identifier: 19:EF:EF:53:34:ED:73:C0:90:F5:F4:B8:DF:CE:53:12:6E:21:72:EA
Authority key identifier: B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
Certificate issuer: /CN=b79220a805e4378547e43bac731ce86fe01145c7
Certificate serial: 0197B6A07C50863ECC37CAC4379DA0F17426
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
Manifest number: 15CE
Signing time: Sat 28 Jun 2025 13:01:00 +0000
Manifest this update: Sat 28 Jun 2025 13:01:00 +0000
Manifest next update: Sun 29 Jun 2025 13:01:00 +0000
Files and hashes: 1: E1LywobBcmK6AnOJwTgaLZby7Ro.roa (hash: n5sH5ypDKZX50nW+CdvdagJLuCKGRa+qpkP+9kKp1iw=)
2: IqJ3eC22ti_hCfC22ZrM8rRTtzM.roa (hash: aJf0pzqxrkhhPFt7HEGF+gQN8TPi2v4BsqZ0KQ3SArc=)
3: JsHUF9nO0Ubmx66NjwjSoa2db5s.roa (hash: 5Bntxxf/DOq1AqaoIFJIGiKuLbRTvnWBZ2d4WFO6pPY=)
4: MbqoSUw94G_kpX-xAxVWXxjX0io.roa (hash: R1upzBkGFuu3S6c70j9aIqWiLLfM3rhDbfCwHwN7UrE=)
5: dxIfYzd-HHl4lIaAqTEGfA9c7sQ.roa (hash: 1wNUGeXyusk9X3ieKOx2o0ugjj6lBznwR37kiJNdRxw=)
6: qBWUDdq6JGEqcxPlF6Ytcy33dJA.roa (hash: 00VI12BlUP26JR+mPLQ+RfjLscfTifDKz5JZWGxyZBQ=)
7: rAdBLvyRbVu9ByeGD622HSDJlBU.roa (hash: CZZqdpQQG94RuUVqGtWwcTYbY/5K07OCSVEcHRuO4vA=)
8: t5IgqAXkN4VH5Duscxzob-ARRcc.crl (hash: U3qVLLdVE6zH+ExVoKkpWP8SbQntJ+FZ4t43v4eY48E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:7c:50:86:3e:cc:37:ca:c4:37:9d:a0:f1:74:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79220a805e4378547e43bac731ce86fe01145c7
Validity
Not Before: Jun 28 13:01:00 2025 GMT
Not After : Jun 29 13:01:00 2025 GMT
Subject: CN=19efef5334ed73c090f5f4b8dfce53126e2172ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:33:67:6e:d4:a4:e8:47:d6:65:44:7b:fb:8b:
3a:d7:2e:c2:a7:da:28:4b:f6:0e:2a:be:ec:78:23:
8b:dd:48:9c:7f:d1:54:fb:92:8c:2d:82:4a:ff:4a:
b4:4b:8a:4e:1d:a3:f0:72:93:a2:fa:b4:cc:2d:01:
79:2e:bc:1e:df:fb:a8:bc:65:e2:e7:80:0a:3f:71:
0e:0d:57:19:cb:96:10:b3:51:a9:8c:6a:08:a4:60:
92:14:a3:e7:26:bb:98:b8:47:62:62:98:6b:4f:6d:
27:01:62:43:65:3d:e6:35:24:fb:f0:62:72:51:92:
78:f1:2a:fc:1b:b4:7b:56:9e:0b:7b:98:a3:01:66:
58:5e:76:4a:75:44:8f:c2:5e:c4:ad:eb:af:33:5e:
be:b4:be:d7:05:2c:ec:fc:79:56:7d:1e:36:b3:63:
7e:e0:d0:c9:6b:61:43:6a:6e:23:65:2e:e8:a3:2a:
12:90:68:57:be:6c:95:21:a8:6a:18:79:20:37:c7:
be:ff:e4:7a:95:e9:85:0f:0a:fd:35:cd:af:bb:13:
e0:93:05:ef:85:ba:60:ee:de:52:60:52:dd:c1:4a:
9c:19:89:e7:23:24:ce:61:f7:9a:fb:4d:33:12:57:
7f:cb:8b:b2:ba:44:de:f0:e6:38:6d:4a:43:fa:68:
9b:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:EF:EF:53:34:ED:73:C0:90:F5:F4:B8:DF:CE:53:12:6E:21:72:EA
X509v3 Authority Key Identifier:
keyid:B7:92:20:A8:05:E4:37:85:47:E4:3B:AC:73:1C:E8:6F:E0:11:45:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t5IgqAXkN4VH5Duscxzob-ARRcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/e7f884-cf7b-491c-9ed9-423afc2b68b8/1/t5IgqAXkN4VH5Duscxzob-ARRcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:9b:c7:6f:1f:4b:5b:97:3a:90:a4:0f:ee:85:3e:a1:15:ae:
c9:00:a6:56:ac:25:5f:71:b7:46:e8:b5:6c:b8:ea:c7:8c:89:
63:9a:5c:ff:b7:09:10:38:64:30:3e:38:7e:eb:a4:5c:f7:7f:
db:45:68:bb:31:9f:e2:97:61:40:57:7a:d9:a7:e1:99:04:38:
0a:f3:e7:41:d1:9e:50:87:3c:bd:23:21:33:48:fe:07:7c:7d:
2b:e3:d5:09:2c:34:cb:e5:7d:30:f3:a5:8a:09:8a:79:22:b0:
ba:1d:3d:66:e0:13:20:3a:4f:ad:3e:a0:ee:c6:c0:02:ee:e5:
a7:38:6c:e2:cf:2d:b5:06:b5:64:fc:57:5c:80:5a:cb:a7:47:
8c:5a:d2:a2:06:1e:ae:21:aa:92:13:47:93:ca:10:6d:e9:dc:
46:23:e4:89:9a:80:c0:1a:51:3a:d8:f8:81:b6:cf:86:e7:b3:
2f:e9:ca:0a:43:cf:c1:0e:7c:b9:1e:dc:f3:5b:9e:dd:0c:1b:
6c:5e:78:73:c4:86:50:45:b2:b9:fd:e9:61:62:29:fe:04:2d:
66:9e:0f:91:34:b6:27:bc:43:96:ed:12:3c:5e:d6:87:1d:62:
5b:84:36:a2:83:9d:58:ba:4b:84:e2:4e:33:a6:f0:a1:57:bb:
07:bb:c7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:39 2025 by rpki-client