Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
File: 7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json)
Hash identifier: cCZqTNaslPmx9YuRhj6cGjttxazblcKWemYzwto9Rgs=
Subject key identifier: B8:B7:DE:A1:C1:6A:48:B2:D4:52:2D:1D:AC:55:DE:87:51:A1:69:09
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 0197B6A108377D7C7DB9110D9C73FE404767
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
Manifest number: 15BF
Signing time: Sat 28 Jun 2025 13:01:36 +0000
Manifest this update: Sat 28 Jun 2025 13:01:36 +0000
Manifest next update: Sun 29 Jun 2025 13:01:36 +0000
Files and hashes: 1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: 26/SjKby20xNBlU6mV601bLb3CzHt2OV6zatj1aKG/E=)
2: LSx9OlKUNiN9N5Lzmn4mpgYUaYM.roa (hash: SRtMriKTJRyDfQ60LOh5mHm3HAzdoYJatQZ33jFO0KY=)
3: Yzpl7dcbDV1oc45l6H78VWlDWek.roa (hash: rLWJRRPMzAUWRBDLzYpnEF8zI53ESvU9cKsYN1kvko0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:08:37:7d:7c:7d:b9:11:0d:9c:73:fe:40:47:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: Jun 28 13:01:36 2025 GMT
Not After : Jun 29 13:01:36 2025 GMT
Subject: CN=b8b7dea1c16a48b2d4522d1dac55de8751a16909
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:1e:36:04:3a:4e:29:99:4b:df:68:ed:12:8c:
1a:c5:af:cf:a5:e7:8f:3a:13:00:6a:5a:02:0d:5a:
35:66:16:30:64:d2:97:a3:92:14:cd:2c:cd:8b:a0:
ec:a7:36:b2:97:66:6f:38:42:39:04:6a:05:ba:d4:
78:d2:e1:92:40:3a:16:55:85:82:a5:8e:ce:86:35:
4b:27:fa:1d:eb:d6:59:59:4d:38:c7:03:fb:47:e5:
42:44:92:4d:72:37:73:60:f7:09:62:81:f6:88:5f:
4f:cf:4a:75:68:14:37:eb:07:90:00:96:66:d3:77:
e2:43:ae:61:dc:3e:4f:4d:02:14:d4:7c:e6:e9:07:
3f:66:45:7a:71:1e:ee:cd:b9:a0:36:c2:92:fa:42:
69:33:df:66:7e:68:6a:38:4c:a1:bd:1b:c2:b5:67:
4a:fd:43:3a:d2:ee:56:bc:d5:6d:79:4e:59:c8:7c:
60:d9:47:5c:dd:5a:95:c7:c5:f5:38:74:c8:18:6d:
5d:af:1d:49:c9:99:9d:fe:44:84:72:a6:20:5c:d7:
0d:3d:d1:a0:d9:32:b0:64:2b:d0:72:f4:bb:56:0c:
7a:f0:fb:21:1d:d4:9d:ba:a4:63:f4:46:28:f6:db:
e2:2c:da:35:78:68:8d:91:20:90:ed:ba:b6:04:3c:
d2:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B7:DE:A1:C1:6A:48:B2:D4:52:2D:1D:AC:55:DE:87:51:A1:69:09
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:7d:8a:0a:8e:62:3f:ca:38:d2:80:28:90:4c:37:70:16:f0:
2e:79:84:26:80:0f:42:af:b9:96:37:5e:63:8a:c3:32:d0:cb:
b2:b6:1f:0c:48:1e:34:3b:15:a4:3a:cc:e8:d0:6c:69:4e:4f:
ab:26:d5:b9:62:d3:a2:d9:d3:ae:94:dc:9b:0a:e8:6b:c8:13:
70:7e:41:34:22:ec:5a:77:f0:fd:04:84:50:88:fd:a8:94:90:
6b:c0:0b:99:d4:72:bb:92:4a:bd:ec:73:9e:8e:2c:48:60:f4:
f8:11:0b:ef:5c:b6:d1:f2:6c:fe:20:cc:c3:66:12:06:d3:21:
91:a3:7c:f9:db:a5:42:de:fe:c9:b1:f4:2c:37:d9:1c:7e:98:
48:78:f7:98:2f:04:54:42:a0:4d:ce:c9:56:b7:cd:d0:dd:85:
3f:d2:1e:4e:f6:1d:92:90:96:af:8b:07:88:83:ba:f8:d8:bf:
e2:8f:09:42:7b:4a:04:16:31:71:7d:c4:d5:32:c6:bf:37:dd:
6a:16:1d:88:ca:f2:ab:8a:71:fd:25:70:f3:bb:75:30:e6:ef:
24:85:fe:2f:a3:92:ee:89:0e:18:eb:ea:c8:2f:c0:4f:29:6d:
18:f9:80:ad:c9:a6:cc:04:53:58:fa:fa:65:43:df:1d:e1:e3:
23:a1:e5:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:44 2025 by rpki-client