
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
File: Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft (raw, json)
Hash identifier: 8GWNJc/w2vjOMKM02/NpbU15NhoFjkqdYhngcb5+CJs=
Subject key identifier: E6:69:4D:C0:A4:AB:E7:07:6E:0C:83:64:F5:A1:58:D2:2E:93:48:16
Authority key identifier: 32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19
Certificate issuer: /CN=323e300a7b63ad4fefbae671f51abc24f1128719
Certificate serial: 0197B70ED3C58D004240D39BA946809B5942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:31 +0000
Manifest this update: Sat 28 Jun 2025 15:01:31 +0000
Manifest next update: Sun 29 Jun 2025 15:01:31 +0000
Files and hashes: 1: Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl (hash: GOT+b/ndV9eoTk6j2XAnCk4S7/XRm4kwJNQAnoScMqo=)
2: nG0u5JVbsOz2NWyBPT2f0id55qg.roa (hash: rcOcuJUXRrdjca7vuzAqSL0w9cdWcN3PeqOknKKlStg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d3:c5:8d:00:42:40:d3:9b:a9:46:80:9b:59:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=323e300a7b63ad4fefbae671f51abc24f1128719
Validity
Not Before: Jun 28 15:01:31 2025 GMT
Not After : Jun 29 15:01:31 2025 GMT
Subject: CN=e6694dc0a4abe7076e0c8364f5a158d22e934816
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:b8:ae:fd:7c:46:b5:29:92:ba:3a:fb:d9:fb:
df:3c:68:13:ed:8f:eb:9a:94:8b:0a:22:7a:9e:92:
1a:c9:26:b2:1b:49:38:06:67:2f:6a:21:3b:37:5f:
3f:39:c2:b4:35:2c:c6:0d:9f:d4:cf:17:6e:71:4c:
0f:e1:a4:32:8a:b5:d9:69:ca:09:ef:7b:b6:58:1d:
f6:90:22:a4:7e:64:b2:ac:c7:93:ca:12:43:21:8e:
60:c1:04:26:27:9b:ba:e5:1f:46:33:56:da:b9:7a:
57:43:e5:27:0f:ce:d4:a7:f4:93:2a:03:08:df:64:
5f:38:2f:0e:b9:16:b5:6d:81:cd:6a:9d:f0:a9:67:
00:8b:dc:b1:eb:a2:06:40:7a:e3:69:34:45:6d:b5:
6a:c4:1f:bb:7a:7b:50:44:09:0d:3c:af:e3:a4:bc:
19:8a:a0:c2:ee:ab:d9:e5:93:26:bd:86:31:12:81:
6f:0e:5e:8c:ff:33:72:0e:3e:3f:4a:8b:5e:fe:a5:
2d:99:27:ba:20:90:84:73:26:72:59:54:68:aa:33:
3d:87:6e:bd:58:17:14:c4:4e:f4:d0:dd:e6:07:6d:
e1:7d:73:94:dd:68:be:dc:4b:2b:ec:1a:34:b4:2a:
4c:be:d0:2a:ad:a3:df:88:67:91:c2:00:c1:31:44:
ea:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:69:4D:C0:A4:AB:E7:07:6E:0C:83:64:F5:A1:58:D2:2E:93:48:16
X509v3 Authority Key Identifier:
keyid:32:3E:30:0A:7B:63:AD:4F:EF:BA:E6:71:F5:1A:BC:24:F1:12:87:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mj4wCntjrU_vuuZx9Rq8JPEShxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/8ab976-e53a-4c43-a8e8-2014fe0a1611/1/Mj4wCntjrU_vuuZx9Rq8JPEShxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:c0:3b:63:2a:62:43:2f:ec:3a:d3:b6:aa:d7:5c:f0:f5:7e:
b8:e1:c2:e1:d1:5c:fb:cc:2a:5f:09:b7:d8:a6:a7:17:2d:a0:
b1:7e:90:f3:8b:35:bf:66:5a:d1:43:cd:52:53:35:e2:8f:c4:
36:d2:49:63:da:ee:c7:7f:1f:f0:5b:a8:d2:e7:c1:ba:96:e9:
69:55:e2:68:93:5b:84:d5:48:4e:43:b4:fd:da:da:69:c3:13:
83:e7:5c:d0:30:ed:f8:2e:b9:d2:98:b3:e7:43:8a:5c:ac:53:
a2:52:34:d2:8b:d5:97:fd:c4:14:3a:71:ea:20:1d:16:d7:02:
1d:d0:93:b7:85:21:ba:1a:5e:3e:e1:35:90:58:80:62:65:07:
ef:c4:38:60:5d:45:58:69:41:0b:9b:36:5d:9a:28:50:de:10:
ce:58:93:cc:26:5c:bc:20:6d:ba:c2:78:cb:7d:09:c2:eb:05:
6a:04:33:43:39:5f:75:66:69:fc:e4:81:6b:10:fe:01:c9:57:
be:49:01:86:6e:af:35:80:e9:a9:94:44:a6:07:a5:9c:e6:f7:
2f:79:c2:8e:b1:3f:c5:d4:53:88:be:d9:76:a1:56:e9:48:f5:
5e:47:59:9c:9e:73:0f:03:e9:92:71:84:05:55:67:6c:98:87:
a2:80:c3:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:37 2025 by rpki-client