Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
File: SU0Or4AlCrgkiYm-caQDlxjWk1o.mft (raw, json)
Hash identifier: PLcAeNInpuAhIGwLJa4TU70YWYKN48+/LDDFw8HYG60=
Subject key identifier: 92:70:27:3E:67:97:E6:7C:2A:B2:03:DA:B3:F6:26:BF:0A:E2:83:B9
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial: 0197B6A0658E39673168E8D8CE841A7F5577
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:00:54 +0000
Manifest this update: Sat 28 Jun 2025 13:00:54 +0000
Manifest next update: Sun 29 Jun 2025 13:00:54 +0000
Files and hashes: 1: Ad7sRIt_14WqsoXSVJnhtt5pR6I.roa (hash: d1H2UkdaZjL8z/VCs5Y8T9oYvq5D7T8CQrV9qDD8uXE=)
2: SU0Or4AlCrgkiYm-caQDlxjWk1o.crl (hash: IPDbjcXzgFxnrLd925/n78R+8oTb0TPQiEgs9T4uoAY=)
3: fbnqy98yfE_Lzn_9R-s84dMZn3s.roa (hash: RB1a5+/ABy4Ucs2InLVoqKGALjdVGmuLcFN8wD1kPqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:65:8e:39:67:31:68:e8:d8:ce:84:1a:7f:55:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
Validity
Not Before: Jun 28 13:00:54 2025 GMT
Not After : Jun 29 13:00:54 2025 GMT
Subject: CN=9270273e6797e67c2ab203dab3f626bf0ae283b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d5:be:4b:16:3a:3a:3e:3a:2d:43:f5:e5:16:
92:94:b8:32:a2:7f:3a:bd:20:86:f7:9c:b9:bb:16:
86:4c:de:93:23:a2:6d:21:f0:b2:1f:fc:14:f9:11:
22:cf:c6:f4:87:0a:60:07:d9:26:fd:2b:17:46:3c:
4b:19:37:33:0c:1e:0d:a7:4a:a5:d0:28:fb:c7:9f:
0b:d2:b4:08:6b:30:38:5b:74:34:e6:d3:97:7e:de:
d6:84:ce:9a:1c:61:96:79:60:23:80:04:ad:c3:36:
0d:e8:56:21:56:66:e3:60:01:7b:98:35:5d:ff:d7:
c3:bd:47:2c:35:3d:73:c4:72:48:cc:d0:0a:0a:5d:
c2:ae:19:6c:5d:5c:aa:26:76:41:22:21:4c:53:39:
61:a8:90:dc:4d:ec:e4:fd:84:26:65:22:98:98:c0:
6e:17:f2:ea:a4:04:71:95:2f:cc:8b:ff:15:88:e8:
de:69:4e:2a:2f:ea:46:1c:76:d4:b4:55:65:8a:5a:
89:39:9a:ad:9e:2d:bb:27:3f:90:08:d0:1b:3b:a7:
82:6c:b1:da:17:0e:d3:ba:77:96:1a:19:92:83:41:
a2:dd:33:96:e4:c5:1e:72:fe:55:23:ac:fc:6b:f3:
bd:d3:a2:7a:72:a8:58:43:00:6a:66:28:82:03:02:
21:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:70:27:3E:67:97:E6:7C:2A:B2:03:DA:B3:F6:26:BF:0A:E2:83:B9
X509v3 Authority Key Identifier:
keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f1:4b:1f:59:36:04:e7:48:b8:f0:e8:d9:f9:e6:04:70:a1:
c0:b6:6b:2b:38:15:ab:e1:d4:ee:88:eb:b7:18:e2:41:4d:5c:
2b:96:23:d1:4b:5a:18:95:1b:78:68:66:6b:db:7e:66:b7:17:
24:f8:7a:6a:3c:71:16:2f:9a:cf:7f:87:a5:db:7a:08:57:66:
3b:4a:ff:1a:71:24:04:02:f4:52:b6:4b:70:5e:27:32:50:b0:
48:9f:23:86:30:e6:09:5c:61:dd:de:ab:4a:7f:6f:4c:d2:c0:
eb:e1:1e:b1:86:50:80:07:0f:39:a9:37:2c:36:1d:51:c2:21:
c8:83:82:61:c6:b8:5e:da:2a:49:df:e8:3a:62:87:0d:0b:b4:
52:cc:a0:38:b3:35:5b:b3:a8:1f:6d:62:bc:d4:e7:4d:6f:3f:
02:9f:52:1a:2b:2b:2b:6a:b2:f5:82:3a:46:51:c4:10:80:06:
f2:51:d5:95:d1:91:a5:12:f0:fe:ea:2f:30:da:ca:3d:57:43:
93:69:69:51:2b:93:97:bb:a5:b5:b1:6c:7d:95:3e:95:c4:d3:
61:7e:3f:11:f6:df:b8:c5:1a:15:91:3f:be:08:43:d3:45:8c:
c6:65:5f:87:49:a0:7f:a5:19:f4:77:b4:6c:95:6f:7b:c2:47:
02:36:7d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:38 2025 by rpki-client