Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
File: SeRO7qJladDdvQ6GN_Es9QWk7ek.mft (raw, json)
Hash identifier: obuyy0U83kPfvNCuv5XVMRZFCMZNLbij2x0ZrUjwc6k=
Subject key identifier: FA:11:E4:E6:D3:2F:64:22:4A:26:B0:B2:4F:0A:02:A1:B0:E6:DA:14
Authority key identifier: 49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
Certificate issuer: /CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Certificate serial: 0197B74599D176AC98F9FF3579994E6EF381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 16:01:21 +0000
Manifest this update: Sat 28 Jun 2025 16:01:21 +0000
Manifest next update: Sun 29 Jun 2025 16:01:21 +0000
Files and hashes: 1: SeRO7qJladDdvQ6GN_Es9QWk7ek.crl (hash: LMLlYZnP/Bn+lJlz23jw4YFT7naIFY6fgy7izzhoB2w=)
2: ZLZClTfuDKfBFAb78-Sh9gGUq9o.roa (hash: ZjgvTzOG0NWN+AmJ71kj5d0LbF11Gt0UdOZExqIqebk=)
3: p2fhpZIvDg7W2OOGqfE-3RVm0N4.roa (hash: DvMSp/MfQ7NdY6pMQjoAQc3gH3XB9mi4vIoWMnYXfxs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:99:d1:76:ac:98:f9:ff:35:79:99:4e:6e:f3:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e44eeea26569d0ddbd0e8637f12cf505a4ede9
Validity
Not Before: Jun 28 16:01:21 2025 GMT
Not After : Jun 29 16:01:21 2025 GMT
Subject: CN=fa11e4e6d32f64224a26b0b24f0a02a1b0e6da14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:44:20:8d:c7:fd:90:01:88:94:03:76:f6:0a:
24:62:57:5a:75:b5:cd:37:2c:a2:36:56:0e:9a:3b:
93:f1:fe:68:55:7c:3d:71:46:74:a3:5b:cd:8e:cc:
5c:ab:b0:d9:71:46:61:9b:14:3c:92:88:c3:b1:79:
c4:6a:30:f5:01:dd:d7:6a:3c:2a:72:19:99:7a:a3:
16:2e:20:7d:6a:c0:a4:7b:75:cd:c0:e8:49:20:81:
ec:4b:0c:bc:63:44:60:d9:8c:7f:ab:5b:80:e9:3d:
a6:f7:e7:18:7b:e3:22:24:c8:ef:16:2a:d0:8f:3e:
7a:f1:a2:90:22:8c:d6:d6:71:64:c6:10:f6:3b:94:
70:17:7b:38:a0:c2:b9:9e:e3:a2:0a:f1:ce:31:84:
31:ec:98:66:9f:6b:76:64:e6:8e:28:ab:1c:ae:b8:
35:a6:47:1f:26:7b:7f:4a:88:fd:20:27:cf:47:4b:
d1:b4:b5:1a:db:2b:6b:b1:eb:55:5f:c5:cd:24:43:
c6:3c:c3:c1:23:09:29:92:93:82:8b:b6:33:fe:73:
7a:0b:19:47:74:aa:41:55:c8:10:f3:32:a6:7f:b0:
cb:6b:4c:c2:78:67:bb:42:61:ef:c1:1f:ed:4e:d3:
b6:2b:76:15:a2:07:da:80:db:f1:01:e3:6f:b1:0f:
74:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:11:E4:E6:D3:2F:64:22:4A:26:B0:B2:4F:0A:02:A1:B0:E6:DA:14
X509v3 Authority Key Identifier:
keyid:49:E4:4E:EE:A2:65:69:D0:DD:BD:0E:86:37:F1:2C:F5:05:A4:ED:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeRO7qJladDdvQ6GN_Es9QWk7ek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c3dc1b-d1ee-4ff2-a5aa-f0c4be8e240a/1/SeRO7qJladDdvQ6GN_Es9QWk7ek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:65:cc:19:30:8f:91:a4:ab:97:3b:de:95:ca:a5:4c:52:28:
e7:23:1a:a2:1b:93:b1:76:37:ea:0c:a3:ce:b5:4b:11:cd:cf:
38:f1:75:6c:c2:6b:26:f5:a8:d4:f9:b5:76:98:37:93:23:1d:
bd:0d:45:31:e3:d0:f1:35:1b:78:0b:12:3a:3e:0d:e2:2d:1f:
ff:7a:9f:08:c6:28:63:cb:3a:6d:02:8d:21:ac:47:95:6d:5d:
12:3d:1b:53:a9:47:49:88:a3:fe:52:c3:2f:eb:98:96:dd:a8:
77:ae:2e:d4:5b:35:12:b5:fd:73:0a:a3:05:9f:13:8a:08:62:
ff:b8:b0:b8:06:fd:ba:e7:6c:e8:22:36:f2:ce:80:e7:26:00:
3b:ec:f1:0b:cd:7e:5c:84:bd:81:c8:e4:5a:53:eb:37:59:2c:
41:6c:e1:be:72:d8:ff:a3:f7:04:d6:58:58:61:a8:d0:68:37:
3e:95:3b:10:1c:c8:35:b4:b8:62:3d:e8:a4:d2:ff:6e:6d:03:
23:ad:ee:b1:92:70:b2:ee:34:8e:90:ff:ca:43:c9:f7:9e:9a:
08:3b:d4:3e:3a:28:0c:98:9f:aa:b4:d0:ac:4c:3d:6e:fb:a6:
e1:ac:0a:13:a1:0f:4a:be:ea:81:e1:37:75:c2:72:3b:56:f2:
00:f6:07:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:51 2025 by rpki-client