Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
File: sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft (raw, json)
Hash identifier: dq9aNarkMZPTUxfH+mPyXcnn7PK2r7gvZlqlteb+lEM=
Subject key identifier: 84:26:9A:B4:4D:50:05:B0:7C:37:B9:63:D5:C9:87:38:5F:20:65:A3
Authority key identifier: B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
Certificate issuer: /CN=b025bac132e479a28df33573dd1096a9b7b78d32
Certificate serial: 0197B7B376327C75B3B3AB44CD5CCF99F8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 18:01:20 +0000
Manifest this update: Sat 28 Jun 2025 18:01:20 +0000
Manifest next update: Sun 29 Jun 2025 18:01:20 +0000
Files and hashes: 1: 2nyXOUnq8HwO4oLCvfJ-Ox7H8mw.roa (hash: NuZHCaEAk+qkjfN7phn7HKdi7yOnn+ng8AEUE8vglQE=)
2: GKEiCiXD51YV54o_AXW0cf5rHVo.roa (hash: /4UzjNRUyHHeTjZCH+5v/WfPwcjPfXkUUwUC0eRZ12c=)
3: sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl (hash: wZNhFmxq3QAeJCPDKKh/oi27Gnlpe7YSVW6Wxo+GSvk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:76:32:7c:75:b3:b3:ab:44:cd:5c:cf:99:f8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b025bac132e479a28df33573dd1096a9b7b78d32
Validity
Not Before: Jun 28 18:01:20 2025 GMT
Not After : Jun 29 18:01:20 2025 GMT
Subject: CN=84269ab44d5005b07c37b963d5c987385f2065a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:23:cb:de:d3:75:2f:9a:f2:94:1d:92:10:bd:
67:01:a1:7a:af:b0:bb:2b:a3:0d:f1:ca:fe:93:6c:
d7:41:a7:dc:c9:df:9b:b2:83:da:a2:91:16:6d:b1:
ff:7e:01:8f:f7:f9:e4:80:1f:02:77:9c:0d:15:0e:
0e:2a:bb:52:0f:73:66:32:b2:e3:5b:22:40:f6:97:
83:53:cd:51:8a:e7:7c:e5:f5:b7:de:61:cc:d1:83:
21:79:05:38:a7:a4:77:96:06:fc:fa:96:1f:e5:52:
73:67:a7:97:3d:c3:f6:f9:b3:e6:4f:60:94:2b:f5:
dc:c0:10:ae:50:63:8a:d8:4f:f1:fb:76:36:33:ae:
db:d2:f3:08:3f:fa:cc:82:88:a9:3d:b3:0b:dc:04:
d2:c2:f3:d0:2d:e5:59:39:10:50:bc:61:64:b3:46:
ef:c9:a1:e1:51:ec:a4:bb:39:06:d3:11:3b:7c:b1:
db:bd:42:01:11:7d:76:4a:db:9c:87:c5:57:9f:b0:
2e:e2:c5:0a:e0:52:e6:bb:71:de:25:01:ef:4a:5f:
e5:2a:d9:9d:f2:21:69:6e:da:f2:8f:35:0e:f3:47:
6f:a7:2d:c7:af:21:d4:37:a5:2d:68:0a:44:08:27:
74:27:8f:70:c6:47:bc:58:76:d9:60:06:77:0c:97:
14:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:26:9A:B4:4D:50:05:B0:7C:37:B9:63:D5:C9:87:38:5F:20:65:A3
X509v3 Authority Key Identifier:
keyid:B0:25:BA:C1:32:E4:79:A2:8D:F3:35:73:DD:10:96:A9:B7:B7:8D:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCW6wTLkeaKN8zVz3RCWqbe3jTI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/d2d9f3-8d56-481c-8bc4-7c8f3fecdb2c/1/sCW6wTLkeaKN8zVz3RCWqbe3jTI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:12:e6:f6:03:06:b0:dd:28:09:ad:53:28:90:67:d5:c4:20:
d6:b3:e5:f7:fa:a5:bd:0d:65:3f:a1:21:d1:83:30:61:6e:40:
db:c0:05:eb:00:0f:fb:fd:e2:28:72:ba:20:e4:b7:8c:7f:71:
10:4e:86:00:f7:86:05:a6:94:8c:a2:e3:21:55:c3:42:93:10:
16:07:17:3c:f2:22:8d:e3:b0:d7:28:1c:52:92:23:88:28:ca:
ad:bf:12:e6:4b:f0:1f:d3:d0:7d:f5:62:5b:7f:ab:62:ea:06:
a6:a7:42:e9:dd:3e:b2:91:33:86:c0:a9:7a:1b:1a:02:a4:16:
95:90:a5:b7:2e:11:d4:52:7e:40:ac:35:dc:af:fb:c4:ac:4e:
7d:a1:8f:f2:84:e2:78:2f:67:0a:f7:75:7a:60:74:64:c7:5e:
d0:7c:5c:c7:d9:5d:74:3f:2e:59:5c:48:ce:7a:75:c9:d2:44:
f8:0f:4c:1d:d7:7c:59:d3:a2:6c:5b:22:6d:2e:e2:80:c7:8e:
20:52:5b:53:7c:4c:ba:2c:62:58:cb:e5:ef:46:db:b9:8c:9c:
ec:06:f0:64:27:45:1b:1f:d8:b6:d4:43:bb:ee:c3:a4:a0:95:
32:c8:15:4a:d1:0e:03:dd:33:a0:38:f3:96:9f:80:92:38:d1:
f9:a3:d6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:58 2025 by rpki-client