Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
File: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft (raw, json)
Hash identifier: W1iXCE3C3xV2etCo6AzN7b4fu1/MbQE+5Vyn/KLJ9T0=
Subject key identifier: B6:3F:F1:77:11:02:E8:67:6A:F0:84:BC:A5:BC:99:FC:4D:B1:3E:82
Authority key identifier: 49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
Certificate issuer: /CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Certificate serial: 0197B6D768340FC3DBF78F62137CFF619028
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
Manifest number: 015D
Signing time: Sat 28 Jun 2025 14:00:59 +0000
Manifest this update: Sat 28 Jun 2025 14:00:59 +0000
Manifest next update: Sun 29 Jun 2025 14:00:59 +0000
Files and hashes: 1: 2VOoNC3U3dbfOvp8BLzsJ1f-ifE.roa (hash: /4n1vWOP9xioYbfhWLfqMCZdtH551Gxmhk/RZPxKlZ0=)
2: 75LTo_jTlCg81UcwDjwfJUQMDKk.roa (hash: EkR0b+zKTp/aZ94o/SjZ2ZZg+QA0fvdyyS6BFZkQ6d8=)
3: Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl (hash: rt744PkigqbQXxOip1Xjd+S/2qjdtyH550yJwsghO98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:68:34:0f:c3:db:f7:8f:62:13:7c:ff:61:90:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e9753b5d99fc6c9bd835bd6e4a153201c9c448
Validity
Not Before: Jun 28 14:00:59 2025 GMT
Not After : Jun 29 14:00:59 2025 GMT
Subject: CN=b63ff1771102e8676af084bca5bc99fc4db13e82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:d0:3f:ba:45:1e:2c:e5:8f:a0:e9:84:e4:
de:45:c8:ec:52:04:17:d1:6c:c2:76:7e:dd:c9:da:
66:01:d6:1a:0a:73:1a:c9:7c:d0:8c:c8:8f:45:95:
92:29:19:b5:90:a0:28:fe:58:3b:35:fa:4b:0e:3d:
94:ce:d6:06:28:93:44:02:d4:5b:61:e4:47:00:c4:
1b:b1:63:db:b3:2f:24:ea:fb:3f:6c:74:7e:6e:8d:
41:0a:54:11:d6:09:98:e7:12:15:19:60:b8:5c:3d:
e1:3a:de:3f:49:2c:b8:87:eb:af:cd:6e:86:17:5f:
03:f5:52:22:9b:b0:fd:96:64:de:8c:4e:26:f8:35:
a1:3c:03:25:49:ae:b5:34:8a:45:b5:f3:9f:67:6d:
63:9b:c4:86:58:bd:80:42:22:03:02:09:ba:e5:ab:
63:4f:1c:6d:ef:c4:8b:79:2d:3f:90:6a:18:49:48:
13:40:b1:8c:40:6b:62:3b:8f:6a:1d:f7:a1:b0:eb:
ab:b6:7e:50:56:db:10:32:e0:47:2c:f7:e2:73:c6:
cd:de:f5:c0:9a:c5:b2:91:72:6b:86:c9:ae:28:10:
2d:dd:4e:ab:12:6c:ee:3e:5f:10:a9:09:2a:2f:51:
60:88:6d:84:48:16:5c:15:6e:e4:03:a8:29:de:3b:
4e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3F:F1:77:11:02:E8:67:6A:F0:84:BC:A5:BC:99:FC:4D:B1:3E:82
X509v3 Authority Key Identifier:
keyid:49:E9:75:3B:5D:99:FC:6C:9B:D8:35:BD:6E:4A:15:32:01:C9:C4:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/d92cfc-95e8-499e-a6fd-f1b47b12a75c/1/Sel1O12Z_Gyb2DW9bkoVMgHJxEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:7c:da:e6:23:09:52:6a:e4:9c:4c:fe:f2:88:de:fb:86:4a:
4e:c4:b0:92:43:72:8d:09:37:c6:b3:7b:2c:b3:16:c1:20:ba:
a9:35:76:ea:89:70:b6:e1:63:ef:99:7b:79:dd:90:a2:24:c6:
59:aa:bc:2a:68:e9:32:bd:e8:29:55:88:59:77:5f:f1:60:b8:
d5:bc:ec:b8:c4:52:84:3c:b7:d1:87:f3:48:c9:3b:1e:dd:68:
57:48:ef:09:79:7a:a8:08:d6:9a:35:2a:e0:fa:9b:6f:18:db:
c3:e7:ed:30:c4:b1:12:50:f7:f6:1b:ff:b9:b2:fd:67:bd:b5:
e5:42:ef:35:d3:60:64:70:64:02:23:47:31:c1:e3:fc:5e:e3:
c1:72:27:5b:76:89:79:06:89:4a:9a:a3:55:6d:58:de:dd:06:
0c:86:76:98:18:9e:b6:c7:21:3d:cc:9b:bc:bf:b2:4a:46:62:
b5:7e:e4:95:2f:88:12:7b:b6:25:7e:26:4e:8b:e7:30:65:57:
5b:7d:83:b5:65:77:00:66:6c:4d:bc:cc:cd:d5:dc:2f:bb:28:
59:7a:dd:38:35:d4:a9:bd:68:71:16:c7:37:10:20:6a:5d:eb:
35:2b:86:cc:d6:37:9b:fa:5a:46:f9:da:f8:b6:2c:b9:88:2d:
04:3c:eb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:35 2025 by rpki-client