Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
File: mf5n9L9N0mrjFbMae0cs5NXBrmo.mft (raw, json)
Hash identifier: px/6CAVqL6ZrRw5wfY8+uI/aGlokdv5dJmHcfyMDMtM=
Subject key identifier: B6:93:87:6E:C1:51:74:A9:C9:58:39:31:DF:9D:B2:6B:A2:5C:BD:2E
Authority key identifier: 99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
Certificate issuer: /CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Certificate serial: 0197C3804BC8123A07078F1C29A67F9E8DA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 01:00:54 +0000
Manifest this update: Tue 01 Jul 2025 01:00:54 +0000
Manifest next update: Wed 02 Jul 2025 01:00:54 +0000
Files and hashes: 1: DJ9c19i6-KdVhR4wxk4rl1TwOA4.roa (hash: 9EgmYxbySr7FvyMgHaLB4XxWt5JwrgMM/8o6In9Xr3E=)
2: mf5n9L9N0mrjFbMae0cs5NXBrmo.crl (hash: f2xfk8HR6r/HLKd1JEOxFUHFxIFJW8qdbZiH4QXeWSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:80:4b:c8:12:3a:07:07:8f:1c:29:a6:7f:9e:8d:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fe67f4bf4dd26ae315b31a7b472ce4d5c1ae6a
Validity
Not Before: Jul 1 01:00:54 2025 GMT
Not After : Jul 2 01:00:54 2025 GMT
Subject: CN=b693876ec15174a9c9583931df9db26ba25cbd2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:0c:9a:d4:58:73:5d:3a:69:83:14:99:19:
12:fa:d9:32:84:2a:22:37:70:9f:52:27:8e:5a:13:
a1:12:2c:31:54:06:80:49:40:c4:f8:29:54:4a:01:
af:dc:f2:82:74:2b:36:23:de:c0:27:8c:07:e7:cb:
27:11:9c:c8:03:27:5d:30:c6:80:db:07:e0:b8:57:
88:86:95:c8:52:2b:2f:b3:04:a0:c6:62:f4:20:9d:
9b:06:3f:a4:90:24:95:fa:9d:d1:9c:3b:07:c6:9e:
a3:d0:07:ba:4a:fd:d0:0c:24:b0:59:73:a6:93:30:
0f:55:23:8f:63:11:4a:de:12:b1:0b:7f:c1:25:d5:
cb:4f:1c:d9:08:48:a7:3a:bb:81:a4:fc:2b:b7:10:
18:69:58:bc:e1:f0:85:70:46:49:03:85:9b:e6:e9:
f0:f1:bf:ff:e7:e5:aa:e0:e9:21:df:cf:1d:a3:e5:
6a:43:58:e8:1c:2a:4e:06:a3:db:6a:f3:74:83:4d:
13:4f:50:0a:3e:70:69:14:df:31:0e:35:b7:2b:6b:
a6:62:d4:9a:64:8b:13:29:26:5e:7f:17:8e:e4:2f:
b3:f5:e4:5c:d3:20:ca:db:00:a9:74:9b:a2:cf:bd:
4e:41:64:88:17:92:71:ec:74:fa:7a:6a:28:b6:7a:
4c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:93:87:6E:C1:51:74:A9:C9:58:39:31:DF:9D:B2:6B:A2:5C:BD:2E
X509v3 Authority Key Identifier:
keyid:99:FE:67:F4:BF:4D:D2:6A:E3:15:B3:1A:7B:47:2C:E4:D5:C1:AE:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mf5n9L9N0mrjFbMae0cs5NXBrmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/27fb48-d066-42d9-9432-a05bd228337c/1/mf5n9L9N0mrjFbMae0cs5NXBrmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:84:63:cf:c9:08:1a:68:9c:1b:2d:a4:7e:92:0e:2f:49:bd:
bd:bf:81:13:31:1b:37:dd:e8:c0:0e:8a:c2:0c:c8:32:96:8b:
99:40:fd:ea:74:e8:83:75:9a:82:5b:78:f5:01:5d:f3:75:b0:
ef:b6:bf:3c:74:9c:55:1a:83:1f:b1:d6:69:1c:96:59:7d:23:
68:59:4c:3a:8c:e0:d9:d8:66:5a:45:03:26:0c:e5:bc:58:3f:
a4:76:df:bb:05:ff:a5:65:34:91:3d:71:28:fb:b5:c3:e1:68:
7a:cc:0c:86:ca:f1:d7:f2:da:db:18:f7:03:b2:f2:a7:75:4d:
00:a8:07:32:3c:4f:65:9e:0f:6f:fa:ea:18:7f:e4:de:3d:93:
09:b0:cc:da:26:30:74:d9:ab:ed:8b:f2:4b:50:a5:34:20:1c:
6e:1d:26:fd:74:bf:f0:24:f8:4b:65:da:74:f0:a0:17:cd:34:
9a:db:b6:6b:6c:26:00:13:ea:22:aa:9a:45:24:7e:9f:c2:c6:
64:dc:47:7c:f5:82:86:38:27:83:45:f7:c6:cb:c9:8f:05:e9:
c8:00:20:70:04:fd:58:29:c7:73:25:b6:5d:df:ab:d4:c1:e2:
9c:3a:d9:f3:bf:f2:7c:fb:f7:56:48:2d:c8:72:cd:7a:64:f2:
83:4d:98:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 02:33:15 2025 by rpki-client