Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
File: r6URZapQNqzaEf7gAg40_MQ57eY.mft (raw, json)
Hash identifier: 70Xm6/EHauZhIbxfwmB5joJDyzhj+ENPR3C+GgBmGk0=
Subject key identifier: DB:57:43:D9:54:B8:4A:33:F5:06:98:75:87:1B:CA:D5:B8:16:94:70
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 0197C0ECFF33339043EF3FE0A053DB236A82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
Manifest number: 15C0
Signing time: Mon 30 Jun 2025 13:00:46 +0000
Manifest this update: Mon 30 Jun 2025 13:00:46 +0000
Manifest next update: Tue 01 Jul 2025 13:00:46 +0000
Files and hashes: 1: JXD4YyeKM2DbSEsSMseYjT0o7Ww.roa (hash: YAf2/29DjA3Na+Hgt1fQsq3jSQYLqFSkMb1fHAx4RUM=)
2: r6URZapQNqzaEf7gAg40_MQ57eY.crl (hash: qk261TTRhDEz6thYaOUztntEBWkhFfqc86XReYRsM5I=)
3: rJjHJUl0uD_7dHjW4bG3nCxQ5iY.roa (hash: nazoboMf2p4XX7ExK1xqcEEDrXTJmHzU9uxX+kIOchk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:ec:ff:33:33:90:43:ef:3f:e0:a0:53:db:23:6a:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Jun 30 13:00:46 2025 GMT
Not After : Jul 1 13:00:46 2025 GMT
Subject: CN=db5743d954b84a33f5069875871bcad5b8169470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:02:6b:7c:31:1e:6d:b9:ed:e3:6d:29:fc:06:
8f:e1:b4:b3:f7:97:28:e9:5e:1a:40:d1:49:f6:a1:
8f:ff:0b:a8:f2:d0:10:89:41:aa:fa:4c:45:0a:af:
27:89:14:cb:41:bf:e6:ac:27:98:39:d6:ff:27:bf:
18:d8:b0:fe:07:ef:a9:12:0d:06:8f:32:13:fe:c3:
ea:0b:16:f6:f1:0a:05:1a:e9:82:2f:21:b4:2c:76:
b0:fb:4d:d4:ef:fa:e0:2d:d3:93:f5:e9:df:70:5c:
06:f6:6b:b1:39:75:4e:f3:85:96:21:18:de:3f:97:
23:14:1e:78:e2:6e:a4:8f:af:55:1a:c5:c0:07:90:
a4:ac:ea:bd:d8:52:e1:77:7c:2c:68:8f:b2:2c:42:
f3:51:17:f8:65:7d:ae:08:e1:b0:64:bb:e4:d3:25:
2f:09:7f:3e:08:78:ec:1d:86:47:05:5d:4c:0a:d5:
39:30:90:aa:67:35:88:9a:d9:f6:22:49:9f:68:ee:
7b:97:3c:d9:1b:0a:85:97:9c:f1:a8:02:09:2b:51:
e9:6e:5d:48:99:da:3a:c0:c0:53:43:8e:0b:b8:86:
aa:06:7f:b9:65:98:6f:73:57:c3:cf:7f:dd:0f:c8:
25:f0:b1:aa:33:ec:83:6a:63:f6:57:68:57:8a:e9:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:57:43:D9:54:B8:4A:33:F5:06:98:75:87:1B:CA:D5:B8:16:94:70
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:a5:5d:cb:90:41:56:40:73:34:fd:64:dd:90:e1:69:cf:47:
4b:69:da:db:b2:32:45:93:ed:08:a9:7a:a2:ed:93:47:b5:dd:
9c:f8:be:a2:10:5d:17:df:df:99:d7:a9:e0:94:b2:04:7c:c8:
17:1f:7e:83:eb:77:fc:66:3a:89:46:30:14:5d:2d:6d:8e:f0:
ce:2e:7a:a2:11:29:f8:cd:e5:b7:59:22:ec:e6:a7:a1:0e:bc:
d3:88:f0:10:4c:a9:1b:6d:23:96:8d:95:ea:86:1b:0d:5e:64:
da:7a:d8:90:21:ea:8a:ce:e9:7f:1a:4f:4e:d3:38:0f:41:8a:
82:2d:8d:6b:ad:e1:f9:cf:41:f9:45:8a:75:41:13:c7:ac:75:
cf:d2:dd:ea:2d:01:b4:77:9e:19:43:ef:82:77:89:b3:6b:e5:
b9:1f:0a:89:ea:3b:ec:da:ac:6e:79:6a:a4:41:72:76:a9:c4:
53:83:ec:b5:40:f7:f4:71:6b:34:df:e0:29:aa:d1:4d:69:4b:
23:b8:fe:c6:15:f4:06:4a:57:d3:33:f8:c3:60:32:46:d3:4f:
3a:91:94:f1:ed:c9:02:39:b9:fc:82:ee:de:16:98:c4:dc:de:
e9:84:3a:50:bc:15:fa:77:a2:e9:21:65:b7:27:57:89:13:0d:
45:3d:36:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 18:11:41 2025 by rpki-client