Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
File: 69siVHHy1uQQYLNBhXJUhUgQFLg.mft (raw, json)
Hash identifier: D7xEQUAxRgvaGbq4dkF7AbmBeCa2avh54vm8oDxG56w=
Subject key identifier: 89:1E:FF:8E:EF:48:9E:66:96:F1:D2:62:78:B4:2A:96:A6:89:F9:8A
Authority key identifier: EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
Certificate issuer: /CN=ebdb225471f2d6e41060b34185725485481014b8
Certificate serial: 0197B70EEDBE82A500B08BC01FACCC8F425C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
Manifest number: 1516
Signing time: Sat 28 Jun 2025 15:01:38 +0000
Manifest this update: Sat 28 Jun 2025 15:01:38 +0000
Manifest next update: Sun 29 Jun 2025 15:01:38 +0000
Files and hashes: 1: 69siVHHy1uQQYLNBhXJUhUgQFLg.crl (hash: dUlXVW+s2l7o2LTacbxK/u3aLEfQHIULiMv/ofRDcpk=)
2: fa7NROYx8iSrXkapsnKC5maWgAE.roa (hash: uTBWDWi+lUO6SXQc1mkpkLFQ4pPjE/7aqsWLMLokR9M=)
3: ypiHaIkjWTMZcDzv0-OFLs0Vl8g.roa (hash: VEkHUv83f9ifQbOyDH/QRdAXTrrARw1jb4RzCM/pIXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ed:be:82:a5:00:b0:8b:c0:1f:ac:cc:8f:42:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebdb225471f2d6e41060b34185725485481014b8
Validity
Not Before: Jun 28 15:01:38 2025 GMT
Not After : Jun 29 15:01:38 2025 GMT
Subject: CN=891eff8eef489e6696f1d26278b42a96a689f98a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ac:01:26:f4:ec:c4:80:b6:aa:e8:30:2f:12:
c4:39:0e:4d:20:c2:6a:64:fb:e6:6a:5a:05:16:6e:
08:6d:35:3b:04:e4:e6:cd:ef:77:39:96:7c:10:84:
97:15:dd:51:5b:03:05:85:bc:58:65:d0:6a:92:44:
42:16:9f:e1:8a:a2:5f:06:10:8c:0f:02:aa:df:a9:
b8:8a:e2:3b:5c:56:55:db:37:44:1a:20:0c:b8:d2:
e8:e7:a9:c0:d5:cb:71:3a:e1:dc:9d:9e:1d:43:df:
93:8f:94:53:71:f2:54:36:40:23:67:28:9a:54:52:
5d:c6:0e:7a:91:cf:25:c8:b5:93:da:ef:b4:82:44:
e4:53:34:68:b4:72:70:aa:a1:bb:b7:b0:c7:da:9b:
2e:19:82:56:9f:9f:64:4b:01:4f:d9:99:bb:f2:da:
b7:81:c5:61:49:d2:3f:33:c8:1b:47:6a:60:e5:48:
a6:64:f0:36:cd:6a:f8:ef:97:3b:9e:26:64:96:d7:
52:e5:68:25:03:99:26:95:ba:0d:17:cf:58:b4:c3:
84:df:32:75:80:29:2f:73:07:ab:6e:b1:0d:06:e2:
9c:70:30:b6:cc:ef:5b:05:70:33:ef:7f:01:94:12:
ab:c3:31:f2:96:a5:68:d3:dd:42:b7:7e:de:88:2b:
79:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1E:FF:8E:EF:48:9E:66:96:F1:D2:62:78:B4:2A:96:A6:89:F9:8A
X509v3 Authority Key Identifier:
keyid:EB:DB:22:54:71:F2:D6:E4:10:60:B3:41:85:72:54:85:48:10:14:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/69siVHHy1uQQYLNBhXJUhUgQFLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/376853-2abf-4232-91ff-09a5e8d960dd/1/69siVHHy1uQQYLNBhXJUhUgQFLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:78:18:a4:41:2e:31:ab:90:a3:50:e7:92:e0:35:a5:93:36:
08:28:72:5a:0f:52:94:1f:f0:01:a1:19:e4:07:7b:ef:bc:57:
81:65:33:54:eb:00:30:cb:8e:51:00:7b:76:eb:95:75:76:c9:
35:64:56:4e:d4:08:f2:7b:94:b7:71:85:5c:db:c5:ba:ce:fb:
20:e6:0a:42:e8:47:e2:c2:30:69:eb:8b:14:d0:45:24:9a:2a:
c8:83:1f:6f:75:a6:45:15:58:a0:85:0a:de:40:8a:6a:ac:d9:
53:37:b5:16:2c:cd:14:c9:83:34:b7:49:f4:20:0b:ad:42:f2:
f6:48:87:1e:6a:67:11:cc:fb:4a:8e:5c:f1:c8:cf:ae:d2:92:
9e:25:1f:53:bd:a5:62:85:30:87:a5:83:d1:8c:64:bc:e8:4b:
b6:a4:bc:51:f1:41:d8:ce:5e:b1:7d:08:bc:c6:c7:29:88:36:
7b:5d:f3:12:f2:1f:f0:de:3d:31:03:e4:eb:2d:89:d6:65:3e:
cd:9d:3b:69:ab:59:37:cf:ef:7b:59:a6:24:1b:8a:31:83:01:
24:9a:3a:5f:1b:b4:45:fc:7a:20:a8:db:fd:38:21:59:d4:e1:
2d:28:61:91:73:74:c1:89:f0:68:29:58:3f:30:e4:ef:a8:e2:
39:68:7e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:35 2025 by rpki-client