Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
File: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft (raw, json)
Hash identifier: JEJWED3tsuh8arIb1stm1FGfjXm26RcO/WsO7Az9/Bo=
Subject key identifier: 54:01:E5:22:7E:14:1B:B9:0F:EC:47:F8:D9:63:37:9D:CB:0B:5C:6A
Authority key identifier: 0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
Certificate issuer: /CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Certificate serial: 0197B5FC0AB836EF8227EA827E4F09D6C050
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 10:01:23 +0000
Manifest this update: Sat 28 Jun 2025 10:01:23 +0000
Manifest next update: Sun 29 Jun 2025 10:01:23 +0000
Files and hashes: 1: 1-y1Ne5UH69xAclnQXN8UNFZ6fbA.roa (hash: DMlPQL5W5NIfofMivrzJcYQP+Q8OdiiG+2ZjJ0SbGWs=)
2: Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl (hash: ausHW7Sy199PdH75g8LrFEhz0bokiiNi3tFpjrCES4A=)
3: gP1adqpN3jFkt9OdAVoyA-6IhBE.roa (hash: LIhJSQT5pr5zAf/JFHVd3amDAMZCN7LCkj2NZQ4RFrE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:0a:b8:36:ef:82:27:ea:82:7e:4f:09:d6:c0:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0edda2c6074c56241f5c7e060caccb657f64e91c
Validity
Not Before: Jun 28 10:01:23 2025 GMT
Not After : Jun 29 10:01:23 2025 GMT
Subject: CN=5401e5227e141bb90fec47f8d963379dcb0b5c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:7b:13:61:f4:80:8e:49:ed:0f:23:e2:27:80:
c5:9d:42:06:77:41:b0:3c:a7:d6:33:01:f9:10:73:
5e:90:e3:55:11:d9:18:b6:33:78:7d:e8:ff:b6:58:
f7:75:6f:9f:65:2a:f2:f8:7e:95:e5:42:19:d8:69:
b0:83:da:63:b5:76:0f:41:d1:1a:27:c1:dc:24:09:
c4:d7:82:a2:75:2f:a4:50:f0:fc:a8:fa:2b:c4:e5:
1e:73:78:ca:8b:ca:eb:1e:5e:aa:cb:87:40:f8:8d:
d6:d6:54:f5:d9:15:63:75:13:b6:e8:fd:5a:47:cb:
ed:fc:38:73:38:ac:c0:11:11:bf:e0:48:65:20:86:
eb:f5:34:b4:60:18:ef:70:e5:3b:c9:d4:8d:bd:53:
ab:cd:3d:94:32:e5:79:ba:2f:45:27:e8:09:a3:c2:
f3:0a:de:cc:fb:96:4f:fe:5a:c1:cb:c3:a0:60:89:
9f:d2:c2:d6:d3:39:3f:93:65:b0:c8:18:32:ff:63:
3a:94:77:34:96:57:79:8c:3c:c9:5b:0b:e2:f3:9a:
b4:b4:36:e8:ec:5a:5f:f3:e2:93:e6:67:14:07:d8:
08:d8:42:f6:bb:d4:6d:71:cb:d3:c6:82:58:1a:bc:
32:89:c5:d7:30:12:8c:3f:3c:51:4b:85:85:1b:d7:
4a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:01:E5:22:7E:14:1B:B9:0F:EC:47:F8:D9:63:37:9D:CB:0B:5C:6A
X509v3 Authority Key Identifier:
keyid:0E:DD:A2:C6:07:4C:56:24:1F:5C:7E:06:0C:AC:CB:65:7F:64:E9:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ba459f-846f-47a9-a625-671158a63c23/1/Dt2ixgdMViQfXH4GDKzLZX9k6Rw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:35:ab:7d:80:dc:28:a5:00:11:e3:ab:6d:ef:b1:3c:10:a9:
d9:26:09:5b:48:f5:47:ec:c5:60:e4:53:bc:b3:ce:9d:7e:aa:
2d:d0:d9:c1:5e:6a:0b:eb:54:75:9e:78:91:17:f8:b9:14:42:
1e:9e:d0:84:a8:4a:46:63:9f:6c:45:3b:6e:bb:02:31:ff:3f:
90:1e:e1:a1:01:03:94:08:79:13:ee:35:2d:aa:dc:6b:3f:88:
fd:40:a5:ac:fd:e4:22:d3:d4:41:be:7b:8d:dd:fb:20:35:29:
69:f1:0e:9b:96:7e:05:b6:72:12:54:52:dc:5c:70:27:26:2d:
b2:2f:d7:6a:bb:47:9e:d4:da:d9:a5:d5:5f:a7:d6:b3:bf:17:
20:e0:5a:cc:6b:bc:b8:94:c4:94:2a:7c:8f:4e:28:3e:97:10:
46:d0:74:cc:b8:f1:f0:21:f6:5e:c5:52:55:fb:39:b5:c6:b6:
70:a1:c6:08:22:85:0b:c8:5c:3f:4e:77:15:20:04:b3:ad:00:
d7:df:d8:bf:39:80:34:ea:a3:b0:5b:62:e9:d5:5c:c7:d9:cc:
12:ec:0c:78:56:f3:38:f7:f1:b7:5e:fc:4f:24:c8:d6:e9:5c:
2b:25:b4:db:fe:97:dc:e0:9a:0c:a6:de:5e:f1:8b:55:24:b9:
0b:20:aa:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:59:26 2025 by rpki-client