Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
File: rdbXV2zSgkXGefmvNXXANbiiLJ4.mft (raw, json)
Hash identifier: tClYqhTu4mG5UGu0LwfDI1FQxVnrCbz6Tmoz78/ziuc=
Subject key identifier: 4C:7C:C3:71:99:F8:A5:70:09:26:F9:1A:72:9E:35:93:0F:3D:1C:F8
Authority key identifier: AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
Certificate issuer: /CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Certificate serial: 0197B6A0B4B3082E39B250AB0E9B2E96FAB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:14 +0000
Manifest this update: Sat 28 Jun 2025 13:01:14 +0000
Manifest next update: Sun 29 Jun 2025 13:01:14 +0000
Files and hashes: 1: l7t2iScMgw_Vqqdey3zojLvCFAo.roa (hash: GElb5qawLmwlWjlnnhanimj+W7edI5MOyhH1UzXbSog=)
2: rdbXV2zSgkXGefmvNXXANbiiLJ4.crl (hash: sSYwwVM/iYoOTde1svlZznRTxPeEbe0l5KTBbR9tnnw=)
3: svKZo3SYe3cv8Mz7OTgmT4eXdPY.roa (hash: hDRuttNUPmkUswD/PN5v7bjO2pBa9L/1t8q5gG/jwI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b4:b3:08:2e:39:b2:50:ab:0e:9b:2e:96:fa:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=add6d7576cd28245c679f9af3575c035b8a22c9e
Validity
Not Before: Jun 28 13:01:14 2025 GMT
Not After : Jun 29 13:01:14 2025 GMT
Subject: CN=4c7cc37199f8a5700926f91a729e35930f3d1cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5c:9a:bf:55:5c:b8:51:d1:ef:cb:29:90:39:
55:37:90:e8:8b:72:cd:22:1a:9a:24:5b:55:52:87:
bd:b3:82:ea:bf:06:5c:2f:eb:22:d3:70:de:23:6c:
2d:2b:b7:30:3e:aa:d4:8a:c9:78:fc:8a:2e:e3:73:
96:53:f1:a9:ce:34:a2:91:98:2f:39:2b:d9:cc:f3:
4e:ae:c7:c1:3b:09:4b:ab:48:b7:57:86:85:0f:b0:
e4:b9:72:38:c5:f9:03:e1:6f:28:ed:dc:93:1f:32:
c1:28:d2:a5:23:7b:46:08:73:a8:65:05:53:af:20:
1b:83:e0:38:6c:9c:98:83:b3:20:03:b3:9c:62:ab:
30:8e:4d:b2:f4:d2:50:16:73:24:81:d5:d3:f5:95:
b1:10:98:99:50:f6:24:ae:f1:3b:fd:ab:21:ea:8d:
a9:ca:51:93:4f:ca:9d:06:6c:2e:b5:5e:92:16:6a:
a0:1e:01:f7:d0:9c:a0:0a:54:6a:6c:9e:20:f3:18:
82:95:4c:46:e4:a7:11:ff:72:93:dc:71:d8:31:50:
dd:ef:dc:c1:23:6f:2e:26:3e:cf:08:94:eb:9a:4a:
01:95:fd:c8:8e:ab:c1:c6:9b:ef:b9:73:6e:8a:80:
93:c7:bd:d8:95:82:e0:a9:06:89:cc:12:b9:23:cf:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:7C:C3:71:99:F8:A5:70:09:26:F9:1A:72:9E:35:93:0F:3D:1C:F8
X509v3 Authority Key Identifier:
keyid:AD:D6:D7:57:6C:D2:82:45:C6:79:F9:AF:35:75:C0:35:B8:A2:2C:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rdbXV2zSgkXGefmvNXXANbiiLJ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/03c0aa-7f94-40c1-9742-ddb0484a6da2/1/rdbXV2zSgkXGefmvNXXANbiiLJ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:da:73:e4:0e:77:3f:f1:e7:8d:2a:1c:6a:96:2e:35:ab:a5:
99:e3:97:10:d9:4f:51:64:9b:7e:43:4b:25:cb:4c:da:43:bc:
4e:11:1c:ef:f4:16:2f:f2:bb:7e:da:16:bd:f3:60:e7:3d:19:
a6:59:97:03:e3:fc:cd:c4:92:bd:05:24:26:96:6d:b4:91:18:
16:af:84:5b:37:1d:77:b6:59:4f:12:63:d8:4b:c2:e6:2f:c6:
16:43:3b:fa:54:4b:b6:78:73:77:63:b3:79:06:32:da:1d:7c:
66:c9:b5:80:b6:eb:8c:b1:05:6a:07:19:8b:39:fc:ba:0d:89:
28:01:b2:3c:8c:e6:3b:5f:ed:97:30:cb:4b:2d:ef:9d:d3:58:
ec:20:79:23:ed:fb:4c:20:0e:cf:df:6e:94:bc:a6:db:cb:0b:
6d:9b:ef:0d:d8:83:48:01:6b:2e:08:a3:90:2e:42:0c:e6:b8:
a4:3f:94:2e:5d:f1:04:8c:6f:cc:b9:c6:b4:92:f0:46:ae:21:
ce:9e:4b:bb:fc:5e:dd:f7:74:6a:20:90:2d:bd:30:70:92:32:
d4:8b:03:77:cf:41:22:e7:e8:77:6f:9e:45:51:b4:cc:76:06:
07:c0:a3:9d:18:8b:8a:8d:96:32:2f:6e:ae:db:c0:33:48:4f:
eb:56:fc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:32 2025 by rpki-client