Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
File: CrONq5DGFFDcitZrSF1TbLr54Pk.mft (raw, json)
Hash identifier: GUtEw/bISdDO7TAuGe/2BSu9ZJgENnMX5kej2h+oYhc=
Subject key identifier: 1B:99:ED:0C:20:85:E8:97:23:00:7C:9E:12:A0:CE:DC:1D:64:39:29
Authority key identifier: 0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
Certificate issuer: /CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Certificate serial: 0197B7B35C6E131915D887B7B24A9F8E81DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:01:14 +0000
Manifest this update: Sat 28 Jun 2025 18:01:14 +0000
Manifest next update: Sun 29 Jun 2025 18:01:14 +0000
Files and hashes: 1: CrONq5DGFFDcitZrSF1TbLr54Pk.crl (hash: JQ2YfrBz8mUjqyoyzOX7mcygQ4X8zFDIMoUwGfQDOlY=)
2: dsMTPLjfaNvTqQpdbtuvGWvm6Hk.roa (hash: l6/M/n3EBumhBbie3xlIG6P/vZga7KGXHStNkbnqQXA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:5c:6e:13:19:15:d8:87:b7:b2:4a:9f:8e:81:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab38dab90c61450dc8ad66b485d536cbaf9e0f9
Validity
Not Before: Jun 28 18:01:14 2025 GMT
Not After : Jun 29 18:01:14 2025 GMT
Subject: CN=1b99ed0c2085e89723007c9e12a0cedc1d643929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:cc:bb:75:08:30:5d:50:41:c0:dc:ff:2b:e3:
9d:ef:54:19:80:d9:93:93:0e:18:c4:34:eb:5d:bb:
4b:64:ca:b4:a1:90:8b:84:e8:7a:79:4f:b0:01:ef:
bb:5c:a5:a1:63:54:43:58:b2:be:80:63:aa:7a:c9:
e0:9f:b9:f4:5f:51:4e:4f:77:8b:ba:01:b6:71:8e:
92:2d:6a:a3:02:81:a3:d9:36:84:e9:16:2e:21:32:
a0:86:e1:4f:67:5e:b5:52:38:f7:67:23:0c:b1:60:
a7:f3:24:d9:d0:9b:f8:c1:56:90:72:08:29:c9:e4:
81:42:2b:9c:66:f0:72:88:48:fb:a5:27:40:6b:9c:
e0:85:16:c0:59:d8:82:dd:13:dd:90:fa:cb:9b:fd:
3d:d0:a3:64:8c:8a:68:29:14:f8:af:60:13:af:88:
1a:ca:e9:49:d4:3f:ee:56:c5:e9:07:bb:fb:c4:fd:
a5:ee:07:95:18:53:d9:a2:70:ac:63:a4:be:45:48:
c7:68:c4:47:84:9c:80:d3:2f:3b:3e:16:3b:ef:0b:
ff:d7:ba:6b:0a:f9:39:8c:03:d6:93:cd:83:dc:41:
77:dd:10:84:bd:2f:a9:46:a9:38:81:68:b8:f0:18:
d7:60:f1:f5:16:8b:5a:56:b2:fe:2b:3b:f6:46:16:
17:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:99:ED:0C:20:85:E8:97:23:00:7C:9E:12:A0:CE:DC:1D:64:39:29
X509v3 Authority Key Identifier:
keyid:0A:B3:8D:AB:90:C6:14:50:DC:8A:D6:6B:48:5D:53:6C:BA:F9:E0:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CrONq5DGFFDcitZrSF1TbLr54Pk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/da27ed-3cc3-4937-8583-43e811f77681/1/CrONq5DGFFDcitZrSF1TbLr54Pk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:2a:2d:90:8c:95:b6:f2:b8:d2:7c:bb:af:ac:72:f1:de:ba:
f1:ba:e8:d9:ea:c5:27:cd:4b:ef:0f:64:ed:8a:20:b4:98:dd:
71:8a:bc:a4:2b:d1:7d:61:a3:1f:f7:8c:ac:e4:d5:d8:ff:18:
b1:f4:1a:64:e7:9b:75:e6:c5:a7:81:6f:dd:75:40:f9:6d:0f:
c9:9a:7a:95:6e:c9:e4:38:87:b2:ed:4d:10:de:0b:8b:00:77:
3e:1f:2d:dc:2f:77:27:2a:a1:41:56:7f:7f:75:f8:1a:de:32:
5d:89:b7:9a:06:7b:40:37:5b:ac:71:15:09:b3:71:c5:a8:00:
34:2e:67:76:e4:23:c4:4b:aa:c6:79:c5:6f:e3:be:38:71:a2:
46:a1:04:b0:b3:99:6f:a1:22:b9:4c:22:a5:e1:35:75:9f:74:
0b:8a:b3:68:64:f6:6c:0e:08:21:79:85:3d:d7:09:98:37:aa:
b4:cf:8b:a1:f4:2f:92:a2:55:e3:39:e1:e6:e1:a4:14:db:c9:
91:28:3d:bf:e9:0b:ef:3d:51:f9:17:7c:81:ce:56:b5:66:0f:
6f:3b:c1:65:2a:86:0a:0a:cc:47:bb:43:d1:2a:fe:11:76:cc:
a1:10:62:58:12:ca:a8:7b:88:8e:d7:74:5f:b0:ce:2f:57:d9:
6e:b3:91:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:34 2025 by rpki-client