Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
File: dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft (raw, json)
Hash identifier: mm/x4I8WTkV2utpNBy3Vfv0zVYyGJrBqIYxfVciW/qQ=
Subject key identifier: 8D:9F:27:8F:29:04:D7:F8:63:E7:41:1B:CF:7D:3B:FA:37:DA:85:8C
Authority key identifier: 75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
Certificate issuer: /CN=75245438a2b6209c81675ef35783d89a19b707fa
Certificate serial: 0197B74510ECB29A9E6E1F28D0AF0B06F502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:00:46 +0000
Manifest this update: Sat 28 Jun 2025 16:00:46 +0000
Manifest next update: Sun 29 Jun 2025 16:00:46 +0000
Files and hashes: 1: dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl (hash: 9AoIFt02i8Hz/ejjHknU0BLOT2cNrq6Y0MG6hxYuU90=)
2: jGx8aW2LEckRP_yJXDJ-JUvPHNU.roa (hash: Cpkbk6OJ2s06uIsZfzhFbuhbYMskCR1nLsIwIJnwWa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:10:ec:b2:9a:9e:6e:1f:28:d0:af:0b:06:f5:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75245438a2b6209c81675ef35783d89a19b707fa
Validity
Not Before: Jun 28 16:00:46 2025 GMT
Not After : Jun 29 16:00:46 2025 GMT
Subject: CN=8d9f278f2904d7f863e7411bcf7d3bfa37da858c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e5:be:90:de:3c:16:05:29:c5:3c:19:e2:d3:
51:2c:f1:e8:d9:d4:e8:bb:12:d2:02:9e:f4:38:da:
f0:f5:e8:0d:c9:f0:da:aa:e6:1c:5c:7a:f3:31:52:
e6:15:a8:b9:74:bc:6d:e2:10:49:75:aa:09:1e:94:
4f:c5:a1:05:d6:71:b5:52:db:71:4b:e6:e9:8d:87:
8e:76:df:48:7a:9e:e8:66:ce:8f:d1:86:f4:1f:fd:
f1:21:dc:65:52:aa:3c:c2:44:d4:1d:a6:46:86:a9:
5c:95:ec:da:b4:7c:e0:0d:b5:91:a1:ce:84:8f:5b:
ef:47:c8:3c:b4:08:9a:e8:09:d6:c3:a3:90:ad:f1:
6e:ce:6e:d8:9c:65:57:1b:b1:07:e8:01:8e:c7:ff:
dc:30:15:78:e3:68:3c:2a:5d:a8:95:35:3f:80:1e:
a0:7e:05:c4:60:d4:c2:cf:20:96:06:0a:b4:dc:0b:
8f:ac:83:eb:fa:9f:1b:62:07:ec:7c:5e:c9:8d:0e:
71:32:9c:de:d5:82:53:9f:ef:9b:8c:00:4c:80:d9:
47:7e:77:90:52:84:7f:68:ff:90:47:d6:e2:0b:27:
b2:37:80:85:75:d4:92:c2:cb:fa:c0:47:3f:6c:3e:
60:ad:00:10:d6:ef:08:1f:ef:2d:c5:5c:3e:88:a2:
47:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9F:27:8F:29:04:D7:F8:63:E7:41:1B:CF:7D:3B:FA:37:DA:85:8C
X509v3 Authority Key Identifier:
keyid:75:24:54:38:A2:B6:20:9C:81:67:5E:F3:57:83:D8:9A:19:B7:07:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dSRUOKK2IJyBZ17zV4PYmhm3B_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0eed2b-2057-45e7-9f00-5ee18588df59/1/dSRUOKK2IJyBZ17zV4PYmhm3B_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:1f:1a:83:be:7c:5c:f5:44:8a:fd:d2:2d:4a:58:d2:f8:1f:
a3:3a:b7:c6:09:e4:62:d4:8e:8d:15:fc:a0:41:e1:99:2d:46:
2b:29:d5:6c:b5:21:9f:d1:01:7b:ea:d4:46:05:f2:2e:3c:9e:
56:8e:a0:63:fd:3d:e6:12:55:60:1b:a5:34:de:39:f0:e6:95:
af:26:2f:ac:9b:7c:00:36:6e:a3:24:48:8d:b0:1a:8c:3f:9f:
ef:86:3c:a4:b8:8c:39:13:4f:54:43:3e:9b:f0:82:ba:ad:17:
64:cf:00:a7:2c:c0:d7:af:20:d3:f7:f2:2a:41:29:04:36:1e:
c1:d9:f0:66:cf:15:33:ab:15:f5:54:73:98:d4:aa:44:78:d3:
31:6a:8b:ee:71:74:14:c8:15:d8:e9:93:e0:36:9a:7f:16:c7:
4f:cb:3a:a7:f7:bc:0c:f1:66:c8:f7:0c:3c:6a:b8:a6:74:46:
10:3d:71:f4:cf:85:22:04:e7:9b:cf:72:35:07:1c:0e:34:b9:
75:55:94:81:a2:60:7b:e8:f7:77:1e:4a:71:7a:56:57:7f:01:
3b:3e:6c:09:4d:cd:0e:92:82:2d:ed:8e:c9:74:9a:32:d6:51:
27:12:17:34:eb:95:6f:84:7e:6e:aa:f3:70:be:01:17:b3:0c:
89:f5:5a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:21:20 2025 by rpki-client