Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
File: n15P8s7k23qVvPKjrRHJR1dbsaY.mft (raw, json)
Hash identifier: hXndC/kWZtDmRDnFvHLVX6ILZ+H9dHJs70rLk8fzKUo=
Subject key identifier: 17:20:2A:19:AE:86:79:BB:53:B3:BC:77:87:30:75:92:64:6A:DC:28
Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Certificate issuer: /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Certificate serial: 0197B70E73ACAF7CEDFD24CE9D0123EFBDCD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
Manifest number: 0B39
Signing time: Sat 28 Jun 2025 15:01:06 +0000
Manifest this update: Sat 28 Jun 2025 15:01:06 +0000
Manifest next update: Sun 29 Jun 2025 15:01:06 +0000
Files and hashes: 1: 1-jitS6EpXiqLjoTy0y90wIH72rI.roa (hash: Rfg5nTBCaEYBRoN4EImwETKxmFJYdYpWUORSCCGtVf4=)
2: CoX1lhKeqnywoZzkBVdeBK0K-8E.roa (hash: UeFCTUO9sjJL5Z6FG4W0m09+58Inz20WQtlj2knxqFc=)
3: n15P8s7k23qVvPKjrRHJR1dbsaY.crl (hash: gA2kJc7L4zR+syJzcxwQG27Te5U1wnRkVoPI2hVX/jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:73:ac:af:7c:ed:fd:24:ce:9d:01:23:ef:bd:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Validity
Not Before: Jun 28 15:01:06 2025 GMT
Not After : Jun 29 15:01:06 2025 GMT
Subject: CN=17202a19ae8679bb53b3bc7787307592646adc28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:1b:90:ae:07:3c:27:ba:73:ac:2e:c6:b8:
46:91:00:9f:66:1c:85:43:e9:07:7a:71:60:97:16:
bb:e5:81:fe:6d:45:15:a1:dd:66:dd:0e:63:38:b1:
d9:e3:7b:e2:37:8a:fe:67:a2:2d:86:18:70:62:64:
42:af:c1:16:b8:2e:ed:aa:75:3c:ce:5f:46:c4:03:
61:96:42:95:f4:9b:ba:03:d7:a0:ed:0b:fc:4e:f7:
d5:f6:bb:66:f2:09:c5:d1:e2:f9:dc:a0:a9:16:dd:
a6:17:c1:2b:25:bc:1b:01:4a:fc:60:6e:fb:08:9e:
3c:13:b8:ee:5b:b6:3d:a0:f9:82:d5:26:2e:05:db:
ff:ef:5f:3f:1f:9d:e5:45:cf:80:bf:40:8e:4d:9a:
39:c5:2c:29:0b:bd:04:02:87:8d:69:95:a7:7b:17:
9f:0d:9f:e8:fb:43:75:09:21:96:d3:0f:c3:cb:6a:
0e:0f:aa:5f:a2:fb:8c:4d:64:e4:58:89:e7:25:13:
7b:f6:72:42:5c:8b:d9:5c:0b:f4:f4:ea:70:da:dc:
b7:43:e1:89:cc:d4:5d:12:d4:71:ef:53:d0:82:aa:
e5:2e:00:d6:27:7c:21:c4:21:86:71:e5:24:24:92:
62:ce:be:c7:b2:d5:4b:93:0f:20:9c:b2:e4:ab:c8:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:20:2A:19:AE:86:79:BB:53:B3:BC:77:87:30:75:92:64:6A:DC:28
X509v3 Authority Key Identifier:
keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:57:67:34:2f:54:d0:18:5e:b9:17:f1:f9:d8:00:4f:2e:a1:
b6:9c:87:39:60:c1:d5:b0:f6:83:f8:a2:7f:01:04:82:fd:d4:
7e:e6:60:0e:1d:fd:57:47:57:6a:fd:66:d6:c8:49:16:29:25:
e3:db:15:c4:d1:96:ec:22:d9:d1:7a:3c:bb:a8:69:c4:61:c3:
ba:d8:65:35:88:73:da:29:b1:ad:d3:1a:59:0b:61:9b:ec:2b:
a6:d5:f7:61:6f:4d:af:fb:08:e6:fc:1c:e4:71:60:18:95:40:
0f:c3:c6:c3:8c:93:3a:9a:f4:68:02:0d:e3:69:d3:5c:70:4a:
c2:0e:13:e4:d9:81:69:d1:7d:c4:e8:6e:98:6b:9b:1f:b5:02:
ce:4e:6c:6b:b9:25:ad:f1:69:2a:6a:d1:d7:be:d7:36:d7:20:
a4:44:66:44:51:9e:0d:d9:ae:f7:15:95:cb:bc:6c:51:d2:0c:
f9:5e:1a:ed:02:8c:21:b7:06:14:9c:71:de:13:e8:36:e5:14:
b2:af:fe:34:79:3e:71:f4:74:c7:58:7d:17:1c:4d:b9:84:7b:
c7:47:b8:5f:b5:17:3b:9b:35:2c:6f:d5:9c:c7:84:bd:dc:75:
55:08:fd:3e:5a:7d:d9:46:18:78:4c:ac:cc:e0:0f:cf:86:2c:
4b:73:cd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:35 2025 by rpki-client