Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
File: insJq1RYUceJ0sqolCujnOoT6T4.mft (raw, json)
Hash identifier: er9Q6jdtpFag1wIqV8lohzCWztjtYmuwztUzA2r9wBI=
Subject key identifier: 16:21:EB:1C:14:82:39:50:32:73:C8:77:34:9A:D5:F4:5B:49:1A:D9
Authority key identifier: 8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
Certificate issuer: /CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Certificate serial: 0197B7B380B8DEC6F117A97D7A92CEDB6B60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:01:23 +0000
Manifest this update: Sat 28 Jun 2025 18:01:23 +0000
Manifest next update: Sun 29 Jun 2025 18:01:23 +0000
Files and hashes: 1: GSXQP-yJ0oWFWG7SiFPS52SpSgY.roa (hash: yWv48sy81gH1KSMrgFDXRAC5wY8B4250+tW5tBvtQ4E=)
2: TZjDxa0WLxZ4-HRGPSFJK9LraZg.roa (hash: mYc2KZGGYZLCnNBNUhGV4DJVMUhPM50/TitGKZaaJPU=)
3: insJq1RYUceJ0sqolCujnOoT6T4.crl (hash: OT7RRdxiBoKZj7Wd3cOkRT3DrchTEyip/QEahIIM2h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:80:b8:de:c6:f1:17:a9:7d:7a:92:ce:db:6b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7b09ab545851c789d2caa8942ba39cea13e93e
Validity
Not Before: Jun 28 18:01:23 2025 GMT
Not After : Jun 29 18:01:23 2025 GMT
Subject: CN=1621eb1c148239503273c877349ad5f45b491ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0b:c5:c7:b6:3d:0a:d8:53:2d:d7:4b:e5:b4:
b4:3d:26:42:2b:f8:b0:a8:7f:4f:67:5f:76:a0:32:
8a:b4:41:37:b0:36:f5:01:b0:fd:d7:a5:fa:7b:54:
fc:89:11:6d:80:4b:d6:cc:26:85:e4:1b:f8:92:34:
97:c0:20:95:00:1d:d7:8b:c4:a6:45:41:3e:3e:c1:
af:89:67:26:58:8d:fd:d5:50:f2:26:01:1b:66:6c:
46:7f:31:eb:2d:9f:b6:37:e9:c1:8f:f1:22:af:aa:
d7:cb:f3:c6:0b:06:9f:c7:94:f1:d2:3e:c9:aa:f9:
bc:5c:a3:9c:30:3f:15:55:8d:12:fd:0b:8b:31:df:
ac:65:ef:e9:44:9c:96:62:c4:0f:7d:96:05:41:ba:
9d:f3:88:93:ad:0d:4d:37:a0:0a:05:f4:b7:a4:ff:
aa:5b:ed:4b:c0:7d:15:c3:8e:27:64:31:2a:74:fc:
19:79:4c:fd:d9:20:99:5b:94:6d:c1:8a:c5:1d:e2:
54:f2:ac:3e:22:e8:54:85:8c:8c:3f:5b:86:17:4e:
66:73:15:ec:8d:db:79:4c:f8:53:41:2d:c3:86:5a:
00:f9:79:59:c2:04:6a:97:7d:dd:74:ef:19:0d:e5:
e5:09:95:bc:a2:9b:dd:15:b6:0a:f7:59:0c:df:f6:
dc:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:21:EB:1C:14:82:39:50:32:73:C8:77:34:9A:D5:F4:5B:49:1A:D9
X509v3 Authority Key Identifier:
keyid:8A:7B:09:AB:54:58:51:C7:89:D2:CA:A8:94:2B:A3:9C:EA:13:E9:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/insJq1RYUceJ0sqolCujnOoT6T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/731f56-a2a1-4c75-95c3-5e7dc828d05d/1/insJq1RYUceJ0sqolCujnOoT6T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:40:50:b3:77:c8:6a:51:e2:cc:31:36:17:73:12:c6:28:70:
f7:57:5b:77:0f:8e:6b:5a:d9:b9:8d:86:dc:3b:6f:71:1e:4f:
df:9b:14:2b:31:3c:88:cb:54:53:ec:5a:09:e8:aa:2b:76:08:
a5:bd:74:8c:de:ef:c8:2e:35:58:96:3f:64:f4:74:a4:b5:02:
d2:c2:d7:60:44:be:32:71:24:69:c6:09:cf:f7:d5:9d:39:16:
2d:e6:80:d5:f2:dd:9b:8c:29:f6:f6:d7:d4:a1:39:d0:6b:4d:
4f:b7:0e:44:b7:87:24:4f:8b:f4:b9:bf:c2:27:30:0b:28:42:
be:06:4e:aa:b1:f5:ee:40:0a:f8:f6:fc:9a:4a:14:bd:83:0d:
5e:90:cd:95:06:b1:2f:af:bb:71:51:84:5d:f1:72:a8:9e:d0:
c8:9c:91:fd:77:40:f5:72:40:97:69:e3:5d:ea:b0:90:59:99:
64:1a:2f:86:92:35:89:1d:63:57:07:cd:1a:d5:e9:c8:54:3a:
2d:5c:b0:c4:7b:ac:9b:23:f8:6f:a6:1c:b3:38:2c:03:89:f6:
8a:e7:22:c1:3a:d4:72:94:8f:7c:6c:85:b8:a6:a7:3e:7a:4b:
63:26:f6:c4:9e:08:c3:6c:07:70:9f:ed:c2:76:67:8b:9a:00:
61:f4:ed:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:13:29 2025 by rpki-client