Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
File: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft (raw, json)
Hash identifier: My4xAIQhkFUb0l0S6pg+7ws5sy+zBAYln8FfLxPIFMU=
Subject key identifier: AD:95:EA:76:69:47:51:75:1B:AE:10:43:18:C2:F1:BD:FF:09:BA:19
Authority key identifier: 75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
Certificate issuer: /CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Certificate serial: 0197B6D76F4D490CB7E267404511344033C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 14:01:01 +0000
Manifest this update: Sat 28 Jun 2025 14:01:01 +0000
Manifest next update: Sun 29 Jun 2025 14:01:01 +0000
Files and hashes: 1: dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl (hash: FqabvEmFhsMYJ12dRHp4MKwCDhuXp3F7f7IGktgrnno=)
2: tP4Nr3k13Af3UtlucGdOvIgy7uY.roa (hash: ofrFnG5ByBdxFiFLthIkeYVusoIIsNMbVNLs6rFZMMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:6f:4d:49:0c:b7:e2:67:40:45:11:34:40:33:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75b345562d5718b6c4b206b1ae304fc68436adb2
Validity
Not Before: Jun 28 14:01:01 2025 GMT
Not After : Jun 29 14:01:01 2025 GMT
Subject: CN=ad95ea76694751751bae104318c2f1bdff09ba19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:58:01:aa:76:eb:8a:2e:1f:29:48:fd:69:46:
1a:4c:f0:a2:5e:b5:c9:f2:59:46:75:16:b1:bc:61:
ba:fb:83:e2:81:26:2c:63:d3:d7:47:04:e9:36:b8:
d8:1b:37:5d:86:a4:52:80:65:b6:3c:e6:92:f7:f5:
01:6a:46:19:57:56:0f:ad:f5:76:44:a3:e3:4f:1c:
e5:af:63:66:97:2a:62:d0:27:3c:d7:96:e8:f0:25:
1f:40:ad:c0:d7:02:a6:9c:7c:a0:94:a8:bb:08:78:
d4:71:5c:ee:3d:e5:01:aa:96:8c:ad:76:b4:5c:4a:
38:6f:84:22:ec:d9:5e:32:3d:42:77:da:0d:85:77:
d2:09:92:32:69:8b:e5:2e:25:91:4f:9a:ca:ad:5b:
86:b8:d6:71:e1:08:db:0a:ac:a0:cc:2f:dc:3a:fa:
15:4a:64:4c:da:59:e8:f0:2f:18:76:d2:13:66:0a:
14:98:47:dc:e4:84:79:f0:ca:3f:a4:0a:69:7c:89:
94:ba:1f:b6:2b:0c:9b:f0:61:17:c8:28:ff:d7:eb:
8b:f1:32:7b:c1:bc:f1:19:d5:b1:67:4c:a2:0f:32:
77:46:3c:4c:4d:13:1c:06:ca:31:0b:39:8c:f2:a1:
97:0f:a9:4a:20:5b:45:ff:b3:41:af:7d:37:dc:d9:
4f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:95:EA:76:69:47:51:75:1B:AE:10:43:18:C2:F1:BD:FF:09:BA:19
X509v3 Authority Key Identifier:
keyid:75:B3:45:56:2D:57:18:B6:C4:B2:06:B1:AE:30:4F:C6:84:36:AD:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/30eaee-1ad7-4e73-a4dc-8ae51f62d218/1/dbNFVi1XGLbEsgaxrjBPxoQ2rbI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:5a:82:9c:89:e1:65:39:d4:38:00:ee:11:1e:d5:a3:3a:2c:
e1:48:9d:fe:fd:c8:a1:05:25:f3:a7:95:66:b6:5f:41:a0:7a:
7b:6e:0d:6c:7a:4c:07:ee:84:17:5b:79:e5:28:df:06:29:77:
fb:dc:8d:5a:88:91:13:b3:41:55:06:7a:f9:ab:de:70:d5:39:
ac:7d:da:f9:a1:82:9c:9f:49:52:bd:ec:a0:85:93:16:1e:47:
a5:06:3f:dc:ec:66:1d:99:54:de:00:e9:cc:a8:77:b9:2e:2d:
46:2d:52:7e:12:d1:68:70:14:d1:3e:4f:2c:d4:ac:8d:83:7d:
db:9e:8e:7f:db:a5:1a:ae:73:b4:c3:c2:99:1a:db:f7:78:a4:
85:a1:41:90:8e:cc:71:50:a7:ec:3b:a8:2c:34:f4:e4:df:ef:
58:1c:8d:a0:73:13:72:b5:5c:8d:2f:34:ce:35:74:31:d6:b6:
a7:5d:7f:0b:fb:5d:1c:e6:96:f7:3b:a1:27:23:11:f1:14:7e:
0d:66:54:f0:6a:c9:d0:42:86:55:13:b3:31:13:97:d7:8c:9d:
fb:2c:89:d8:ef:85:b7:3f:b6:e2:1f:82:9a:ad:5f:92:69:b6:
4e:6d:0d:9b:9b:ae:68:4c:ee:9d:5f:ee:03:db:0a:b0:81:2c:
53:eb:ec:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:40:16 2025 by rpki-client