Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
File: m2fALef8jRGhr-euYsWFTRd2dVM.mft (raw, json)
Hash identifier: /rj1uHniJ+P7AAdIBboKFjGKV7BD2/JWkHWQqJBki3E=
Subject key identifier: DC:3F:A1:A0:4E:E5:D3:13:F6:A9:E4:A7:17:14:85:A2:08:19:4E:78
Authority key identifier: 9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
Certificate issuer: /CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Certificate serial: 0197B7EA759A072816023DC10C24F13A1A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 19:01:25 +0000
Manifest this update: Sat 28 Jun 2025 19:01:25 +0000
Manifest next update: Sun 29 Jun 2025 19:01:25 +0000
Files and hashes: 1: 1mDSvWCAPrTbdUwmp52_NsdaJps.roa (hash: FwQIJqtRB7XaFGpge2zOocq9MbKJo1suVWwULTT7sHA=)
2: JI_IFEVZOLgwy-WHZOm2izr6PIo.roa (hash: OO8EbVI1MKPERWUpbisO0H4MA7HYDCDhv160pD1pO5c=)
3: m2fALef8jRGhr-euYsWFTRd2dVM.crl (hash: Z7AAb0+AM8be/YMpOW61lXWoESU4RUHrdScGW2pAfqI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:75:9a:07:28:16:02:3d:c1:0c:24:f1:3a:1a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b67c02de7fc8d11a1afe7ae62c5854d17767553
Validity
Not Before: Jun 28 19:01:25 2025 GMT
Not After : Jun 29 19:01:25 2025 GMT
Subject: CN=dc3fa1a04ee5d313f6a9e4a7171485a208194e78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d6:b0:a2:38:47:d6:5e:43:bf:d0:85:07:05:
26:93:a5:d8:4b:c1:4a:79:a5:c1:40:bd:fb:85:46:
8c:a6:a7:57:b2:f0:44:5d:0e:04:1a:14:39:05:5f:
8d:b1:dc:b9:e4:a3:18:e7:34:b6:d7:ff:6f:cc:cf:
2c:0c:fb:2e:2c:04:be:44:3a:05:7a:b2:ef:e4:ca:
3a:1c:b2:fe:80:0c:ea:87:19:53:bc:fd:65:3f:05:
02:a3:6b:d7:37:20:66:28:5e:7f:d2:b1:b4:f3:7b:
04:11:8d:bf:b2:4f:27:a8:c2:be:d7:f2:49:99:04:
8f:37:28:51:63:b8:25:5b:33:e7:32:fc:ce:d8:3f:
93:36:78:a1:04:1f:84:93:ee:3e:05:55:6d:7c:9f:
d9:b8:28:0b:cc:f4:eb:15:98:e0:93:d0:c8:4a:4a:
00:eb:83:52:9b:3a:d5:62:c7:d7:2d:b1:7b:40:66:
6e:4c:6f:fa:b6:2b:ea:0a:14:e8:96:e2:a0:39:46:
54:b8:17:67:02:09:7b:b9:1c:ba:76:95:36:a3:ad:
95:d4:70:9a:94:bb:c7:a9:36:f4:7a:48:53:51:c3:
b1:bd:3e:d0:90:b1:b1:aa:08:ed:a8:59:4b:b6:7a:
13:c2:ca:3c:2a:ff:1e:18:81:4d:23:e6:1d:f3:32:
de:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:3F:A1:A0:4E:E5:D3:13:F6:A9:E4:A7:17:14:85:A2:08:19:4E:78
X509v3 Authority Key Identifier:
keyid:9B:67:C0:2D:E7:FC:8D:11:A1:AF:E7:AE:62:C5:85:4D:17:76:75:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m2fALef8jRGhr-euYsWFTRd2dVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d54e81-3317-4283-b45f-c81743b2cae6/1/m2fALef8jRGhr-euYsWFTRd2dVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:d0:36:3d:99:92:85:12:db:54:bf:1a:c7:5b:7d:60:9d:a0:
1e:14:c5:50:5b:f5:e9:43:0b:ab:98:0d:42:b1:15:9b:be:fb:
7f:2b:f2:b4:b9:0e:9d:05:ec:9b:18:e2:34:8b:9e:52:b7:50:
1c:9c:7b:64:d6:e4:08:e9:ed:bc:10:f4:fb:99:27:9e:03:af:
5b:ba:b3:7c:31:8e:86:14:89:55:f0:9c:0a:26:7c:0e:0e:f7:
87:4c:6f:01:f4:49:36:80:2c:c3:35:8d:61:04:2b:c5:f1:8b:
aa:40:b4:64:08:58:05:68:5d:f3:cd:00:59:ed:47:0e:06:d3:
79:db:9e:4f:c3:1a:3a:0c:c4:a9:ea:14:47:20:1c:a6:0f:26:
5d:db:c3:74:de:f8:b1:b9:42:1c:a6:73:b1:3c:98:e7:ad:b0:
14:b5:7a:0b:09:77:74:a5:ba:ec:84:45:92:87:b8:3e:91:9a:
fd:21:60:87:90:41:93:62:c2:e2:a0:0b:88:e0:25:5d:de:22:
fb:31:74:0d:33:7d:ee:a0:01:83:10:29:b4:52:bf:05:93:8f:
c5:15:7d:a3:79:f2:25:7a:f2:1e:2d:91:90:2c:b9:c6:5e:6d:
2d:93:30:5a:68:7d:fa:c3:fb:91:99:58:88:06:a8:a9:0a:a2:
c0:6f:8d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:28:11 2025 by rpki-client