Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
File: itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json)
Hash identifier: 7P+i/ICseJ41R1zpvQH/+s881YDz6FBylDSAUlW/3sQ=
Subject key identifier: 0F:57:64:78:21:DE:01:92:88:CD:3E:84:BE:36:85:B4:B4:0D:69:A2
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 0197B7EA63A53882511386DA2FE89DFFF338
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
Manifest number: 0B4D
Signing time: Sat 28 Jun 2025 19:01:20 +0000
Manifest this update: Sat 28 Jun 2025 19:01:20 +0000
Manifest next update: Sun 29 Jun 2025 19:01:20 +0000
Files and hashes: 1: U9YffwceqXxTMUqyDWCzvXHoX1g.roa (hash: /csuQO3etFqd6uIjkI+HLHNXHWK6MILTkxxMM7ARd6Q=)
2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: UAA8fZDOQBnJun0cZtEw00nezwTFPx3XU/xFf9S2IN4=)
3: mogbma_RtoADQ0xZNuTva7SSLFU.roa (hash: rClnvodfou+7xsqC44z7GFztSAn0mdcV3oviTeI4b0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:63:a5:38:82:51:13:86:da:2f:e8:9d:ff:f3:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Jun 28 19:01:20 2025 GMT
Not After : Jun 29 19:01:20 2025 GMT
Subject: CN=0f57647821de019288cd3e84be3685b4b40d69a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:ce:1d:05:d6:64:95:24:c3:0c:25:45:36:8c:
ea:bd:5f:5d:89:a3:6e:3b:af:26:2c:67:25:6f:37:
fb:56:4d:b4:58:82:82:69:fb:08:7a:b7:48:01:10:
d3:75:16:ee:93:b3:82:24:75:f2:5a:01:7e:ee:45:
21:7d:08:73:e0:4b:a6:19:1f:07:34:d7:61:71:a9:
4d:8b:d7:46:f8:02:65:56:79:45:ef:bc:44:d2:94:
90:63:67:44:0a:06:8c:8f:e7:76:90:bf:1e:bc:15:
fb:ec:0e:7e:fd:56:a3:0b:27:e4:5b:53:85:0e:70:
e4:a9:06:ff:d2:67:b6:45:8f:74:e3:ff:9d:05:40:
b3:c1:71:ac:79:95:f7:a0:9c:e4:15:e7:3f:b1:91:
3e:a5:f1:ac:7f:a6:31:47:c8:b0:e7:ae:35:db:3a:
e4:c6:ca:c1:a9:7a:c0:d2:7d:ab:52:52:b3:6b:81:
6c:33:99:e6:59:7f:c3:d4:d3:37:4e:27:9e:62:7e:
b6:32:3c:33:56:65:e8:cf:9d:40:ec:b2:1e:cf:ae:
0e:2d:af:0c:8b:fa:2d:80:b2:6a:2f:35:98:d8:5d:
ae:19:2c:68:06:55:e5:c9:5a:44:bb:09:0a:78:c8:
10:40:ad:52:8f:6a:40:89:d6:9c:d1:a5:b3:32:3f:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:57:64:78:21:DE:01:92:88:CD:3E:84:BE:36:85:B4:B4:0D:69:A2
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:c6:57:c0:3b:fc:52:e4:3e:fc:65:9f:1f:3f:e5:54:ca:52:
1a:dc:c0:6a:b7:22:74:b3:64:58:21:ee:04:9f:35:6e:aa:f0:
88:f9:d1:36:ff:09:41:b0:79:ff:c4:43:60:08:97:b8:98:13:
1d:82:c1:c3:a6:77:b9:e4:7d:f9:83:3a:d6:20:a2:b3:71:3a:
80:4b:38:03:01:93:0f:82:3c:d9:00:70:48:16:eb:8c:ff:6e:
d1:c5:89:1c:e1:8f:34:ff:8f:c2:67:bc:ad:1d:8e:6d:f1:ab:
0c:98:f8:05:7c:9c:f1:c5:6a:69:db:0b:39:4e:27:68:1e:c8:
6a:ef:7a:fc:35:b5:54:03:43:84:d4:86:c7:7f:99:9d:c7:4f:
40:2d:2d:b4:0b:4c:35:ce:6c:0d:2b:5b:65:00:d5:b7:4d:ee:
cc:03:67:f2:d6:94:b4:9b:6d:57:33:7c:e5:90:ae:0f:2a:62:
fe:15:81:a4:04:2b:01:47:f6:83:06:f0:8a:6f:14:5d:02:57:
00:4d:f9:98:25:cd:a7:01:2d:1b:c0:62:27:6a:65:d2:52:fb:
20:87:a7:24:1d:dd:ff:f5:bb:29:e3:1a:20:7c:e4:ea:5c:e9:
f3:1e:c8:6f:e7:e6:44:ba:d8:68:7c:07:68:2c:9f:24:71:87:
41:44:48:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:19 2025 by rpki-client