Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
File: rN4jWPV0OcRPaxZi9VYVoKq2uss.mft (raw, json)
Hash identifier: T7HuMlGaI59Hpkg64EmMI7DsVGwbwSOtlunHaroZMKc=
Subject key identifier: C0:A0:9C:03:04:9B:70:9B:CF:1C:7C:0D:53:BC:83:5A:70:1B:81:25
Authority key identifier: AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
Certificate issuer: /CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Certificate serial: 0197B7B347F68F6B40EAC9C1D949E26D857F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 18:01:09 +0000
Manifest this update: Sat 28 Jun 2025 18:01:09 +0000
Manifest next update: Sun 29 Jun 2025 18:01:09 +0000
Files and hashes: 1: 1-XA6Oyh0n7DlBmRcqaq5JPobRBQ.roa (hash: 4xRutx43UVc6W0el47UeYIWEsInjaHlLdoMFA8q84mY=)
2: 2IN1Er2MsTzD9JeH28eRdl-c7u0.roa (hash: 02dSVlb8MKuiq6SZlhNvmzUoRJ0PeDVGS4rbsaqtZBI=)
3: rN4jWPV0OcRPaxZi9VYVoKq2uss.crl (hash: S2mAHJvjCdGTFK5OE0YaqS8478cp3XurARTMbXwbTfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:47:f6:8f:6b:40:ea:c9:c1:d9:49:e2:6d:85:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acde2358f57439c44f6b1662f55615a0aab6bacb
Validity
Not Before: Jun 28 18:01:09 2025 GMT
Not After : Jun 29 18:01:09 2025 GMT
Subject: CN=c0a09c03049b709bcf1c7c0d53bc835a701b8125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0a:72:68:51:6c:11:6e:0b:37:a4:01:db:99:
5d:c4:80:ba:22:00:7b:2a:93:1a:53:f9:e4:c7:ca:
d8:96:1c:3a:d0:2a:15:b9:25:75:92:54:4a:b7:20:
ba:b6:c2:95:95:74:a5:bf:db:da:51:8e:93:a9:85:
83:73:57:ec:fd:f4:a9:95:85:19:4e:05:b7:a7:f3:
91:da:c3:13:83:37:b7:a8:56:fc:1d:06:6d:4d:f3:
8a:21:f2:ee:be:81:5e:4b:88:fb:eb:b3:7e:98:2a:
96:3a:a5:01:8f:ef:64:a8:42:61:bf:55:51:bc:83:
e4:c4:00:47:dc:1e:c4:67:b9:92:b8:d6:a4:85:c7:
2b:73:8e:32:7e:6e:81:46:f2:a3:41:de:aa:91:ce:
4b:53:72:44:aa:9b:5f:f4:ac:55:9a:e1:3d:22:a2:
18:ab:df:29:5c:6a:cf:35:4c:a8:72:e3:c6:68:24:
54:89:27:14:bd:cf:60:72:a1:1a:33:6c:37:db:8f:
dd:66:12:f3:30:af:5e:89:f5:30:a6:f4:50:97:83:
19:19:22:3a:9b:c8:40:5f:cc:64:f9:e2:5d:3a:2f:
5f:1b:c6:04:19:9b:c4:ee:81:35:c9:9f:20:d2:5d:
f0:12:40:ab:07:57:dc:ee:a5:53:ac:16:7e:51:c8:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A0:9C:03:04:9B:70:9B:CF:1C:7C:0D:53:BC:83:5A:70:1B:81:25
X509v3 Authority Key Identifier:
keyid:AC:DE:23:58:F5:74:39:C4:4F:6B:16:62:F5:56:15:A0:AA:B6:BA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN4jWPV0OcRPaxZi9VYVoKq2uss.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/b65e33-f947-4968-a27c-dd99d397e4d6/1/rN4jWPV0OcRPaxZi9VYVoKq2uss.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:ce:e4:33:3e:5c:e1:9c:50:6d:49:c4:91:d8:34:b8:e8:d9:
60:ef:b0:1c:fc:f1:4e:ec:9d:20:91:cf:53:36:a0:8b:4d:de:
30:77:b0:f6:50:6c:53:d2:07:3f:0f:c2:4a:5e:62:6c:26:d0:
4d:3e:0c:34:a7:c4:47:31:df:a0:3a:25:88:f7:38:3b:41:27:
ac:c2:e5:f9:33:da:31:8e:d9:2d:f1:cd:17:57:4a:e0:98:77:
eb:9d:12:d8:45:a9:3c:95:2f:fc:7f:f9:37:51:b6:57:57:e1:
65:bc:32:ea:fb:a5:20:44:a8:b7:5a:28:ee:00:9c:0e:92:25:
2d:6a:03:ff:0f:9b:24:14:f1:da:2f:cb:d4:e8:0f:b5:ce:4f:
6c:b8:71:b0:2d:57:1f:e4:72:b3:ae:ed:fe:f6:dc:54:bf:9d:
c1:82:6c:e3:36:bb:ae:bc:48:dd:80:14:07:b0:a5:12:73:59:
55:77:43:86:81:d2:80:01:3d:08:e2:ef:28:62:3d:ff:24:1f:
f4:7b:24:cd:4f:08:dd:84:b6:03:08:2a:6e:a7:12:57:4a:9d:
08:29:51:eb:cc:ee:8e:64:65:83:e9:a3:5c:14:e3:00:d5:06:
8f:79:86:1c:08:2e:d6:49:59:52:c7:71:79:01:e3:d6:e7:71:
e4:04:46:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:23 2025 by rpki-client