Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
File: m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft (raw, json)
Hash identifier: 0E+yxvlqHKFleyNRbnIqRECyv4M6PllH7P4WkEfg32c=
Subject key identifier: FF:4B:3A:43:FF:F8:D3:61:91:53:17:58:8F:24:8D:66:8F:61:7E:6B
Authority key identifier: 9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
Certificate issuer: /CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Certificate serial: 0197C75D09752EC315269B2204C5E24DA695
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
Manifest number: 15C3
Signing time: Tue 01 Jul 2025 19:00:52 +0000
Manifest this update: Tue 01 Jul 2025 19:00:52 +0000
Manifest next update: Wed 02 Jul 2025 19:00:52 +0000
Files and hashes: 1: ZdHbyAuVO2WgpjmgEUV_YXpHBBE.roa (hash: tusTXmTZKYrotber9y7JznlEvfOo5SzY2AbmCw6km5s=)
2: m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl (hash: 3PQdun3a7tpS3723nLcjQDj1oMpWiCbtVbnWAwaFXoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 19:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:09:75:2e:c3:15:26:9b:22:04:c5:e2:4d:a6:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bbfa772aac2107c90cf28b22b8d2ad0797f832d
Validity
Not Before: Jul 1 19:00:52 2025 GMT
Not After : Jul 2 19:00:52 2025 GMT
Subject: CN=ff4b3a43fff8d361915317588f248d668f617e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:20:2a:f2:0a:7d:ab:fe:11:7f:6b:b7:f2:bd:
e0:de:dc:74:46:69:b3:c7:53:90:42:ca:a3:5a:65:
9c:42:b7:16:0c:a1:56:a9:96:c2:a8:59:66:0b:44:
02:a1:64:7d:32:fc:26:b9:88:d0:c7:00:79:d1:7f:
2d:1d:2d:64:c6:c8:a6:37:75:69:09:ba:2e:57:51:
4a:4a:54:3a:6b:c4:3f:a9:f4:8d:b5:0e:0e:76:bb:
cc:dd:62:74:70:87:76:0b:12:6d:32:68:64:bd:45:
ff:1d:42:bd:0d:df:06:cb:8b:3d:ae:87:f8:96:52:
76:40:e9:54:7b:16:3a:17:2b:ce:63:86:7e:18:cb:
06:77:56:28:cc:80:3c:9f:b2:c1:0f:3b:b4:3c:64:
93:74:f7:c0:56:b9:80:0c:4e:ec:f4:2d:a9:6e:56:
b6:47:46:6e:4e:00:c3:92:67:99:45:48:10:a7:48:
04:9b:57:7f:ad:ae:cd:21:ae:c8:bf:b2:26:68:95:
ef:d2:db:04:bc:8b:31:8f:8e:74:a8:07:de:30:a3:
8e:3f:a3:29:04:83:9d:8a:00:8c:27:ae:c9:34:07:
67:bf:a1:dc:11:65:85:8e:e0:f5:bf:fd:5f:eb:19:
5f:ad:cc:8c:3d:77:de:22:45:2a:1e:f1:0e:eb:1c:
3b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4B:3A:43:FF:F8:D3:61:91:53:17:58:8F:24:8D:66:8F:61:7E:6B
X509v3 Authority Key Identifier:
keyid:9B:BF:A7:72:AA:C2:10:7C:90:CF:28:B2:2B:8D:2A:D0:79:7F:83:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m7-ncqrCEHyQzyiyK40q0Hl_gy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/552c94-7c99-4cdd-892a-ee9829dda8bc/1/m7-ncqrCEHyQzyiyK40q0Hl_gy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6a:16:2b:a3:0d:1c:28:f6:4a:31:ec:8a:97:9c:14:be:b6:
2e:db:31:79:8c:18:78:7c:3c:6e:7e:88:c6:2b:fb:de:71:87:
ec:65:58:fb:cf:3d:2d:f4:b8:66:d4:e6:98:76:48:f1:5b:78:
c1:83:34:19:2d:dc:dd:37:5e:6c:d4:c4:b2:ce:0a:e5:b8:44:
f0:01:d0:a1:6f:e5:3b:e0:55:e4:87:5c:b3:fd:6a:ef:8f:91:
46:ee:5d:25:ed:a0:73:f4:15:8f:2d:c5:c0:0e:dd:cd:ac:32:
85:2a:26:fa:f9:c3:58:f6:21:3e:50:50:29:5d:40:44:7f:18:
e5:4f:c8:c2:aa:57:ed:f1:26:61:74:0d:bb:15:b5:bf:cc:4f:
f6:f7:62:e3:6b:f6:1a:ee:09:59:c3:51:50:60:b7:b0:96:68:
fb:9d:0b:9c:6c:d9:f5:26:09:72:d0:69:00:09:b3:c1:c2:99:
fe:28:91:e8:fd:77:1f:ed:f0:f8:64:4d:2c:cd:71:a2:b7:3d:
41:93:9a:fa:c0:9a:72:86:ff:4a:fd:cb:3b:e5:25:67:2f:8f:
c5:cf:e0:4a:38:04:75:90:2a:c5:37:6e:e9:bb:2a:5b:92:a4:
70:0a:b3:ee:bb:9c:2e:17:8a:e3:c2:99:8a:52:32:0a:8a:24:
81:0f:97:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 05:08:44 2025 by rpki-client