Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
File: 15WKlFA6cEIXSd7wXv5joxfRisI.mft (raw, json)
Hash identifier: mHPGDluFVPnMprMdo+9bOQpp86rHg0m35gypo3+07fc=
Subject key identifier: 81:3E:05:3F:78:00:27:B0:7E:A2:6F:18:A6:3C:36:BD:EC:53:EB:43
Authority key identifier: D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
Certificate issuer: /CN=d7958a94503a70421749def05efe63a317d18ac2
Certificate serial: 0197B77BFB0DB2A0C552ECF1FA591D4E782B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
Manifest number: 06C4
Signing time: Sat 28 Jun 2025 17:00:45 +0000
Manifest this update: Sat 28 Jun 2025 17:00:45 +0000
Manifest next update: Sun 29 Jun 2025 17:00:45 +0000
Files and hashes: 1: 15WKlFA6cEIXSd7wXv5joxfRisI.crl (hash: VeIEhifDOKzjocBcH4gMJRW6GN9hISVumDzCFDUFMos=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:fb:0d:b2:a0:c5:52:ec:f1:fa:59:1d:4e:78:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7958a94503a70421749def05efe63a317d18ac2
Validity
Not Before: Jun 28 17:00:45 2025 GMT
Not After : Jun 29 17:00:45 2025 GMT
Subject: CN=813e053f780027b07ea26f18a63c36bdec53eb43
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:4e:8a:c4:5e:1e:93:f7:10:84:49:29:f1:d0:
58:3d:6d:7c:8f:ab:50:b9:2a:dc:92:7f:69:06:24:
43:47:ef:cc:08:69:23:1f:2f:6f:56:24:5a:9d:c6:
d8:b9:4c:86:72:ef:59:94:f2:01:be:b5:b0:fb:90:
96:9a:c2:f8:8c:a7:41:dc:9e:0e:fe:88:e0:44:33:
4c:1e:ff:74:22:13:f8:af:71:72:c3:11:84:ae:ab:
0a:c6:3d:ef:6c:cb:35:76:97:0e:82:6e:57:75:08:
f9:aa:2e:ad:cc:2c:95:1e:64:b2:96:19:a8:7a:4d:
b8:ea:01:3b:5d:a4:02:6d:32:e1:c9:cb:49:7b:36:
e7:54:66:f0:0e:06:7f:70:48:4a:49:a6:61:02:fa:
ee:eb:18:a5:0c:cb:d3:c0:d2:0a:b9:62:28:16:19:
a5:e7:25:66:be:21:14:26:87:cc:24:18:e3:e0:44:
56:ac:d3:3a:5d:34:fa:08:92:5f:74:9a:d9:e3:53:
42:de:cb:10:c9:bc:8e:a3:a3:1d:c8:22:85:68:ae:
a8:91:71:d3:cc:74:e9:66:bb:8b:39:93:67:e3:d7:
7d:30:43:70:5b:71:4f:d5:e6:da:41:f5:75:47:55:
1c:a6:c4:08:cb:19:87:a4:a3:e0:2e:15:b8:72:b1:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:3E:05:3F:78:00:27:B0:7E:A2:6F:18:A6:3C:36:BD:EC:53:EB:43
X509v3 Authority Key Identifier:
keyid:D7:95:8A:94:50:3A:70:42:17:49:DE:F0:5E:FE:63:A3:17:D1:8A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15WKlFA6cEIXSd7wXv5joxfRisI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/b77e55-9fa3-47a8-919a-ad4004aa76c3/1/15WKlFA6cEIXSd7wXv5joxfRisI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:3e:2c:f6:e0:4d:08:70:50:c3:a0:88:c3:bf:07:95:46:9a:
98:28:04:c0:ce:d6:aa:4b:a7:02:c3:76:dd:be:f2:88:71:3c:
c3:be:07:73:7d:8a:8c:a5:7c:09:f4:7e:3a:db:9c:08:a0:c8:
5a:17:8c:4f:97:5e:94:cb:5b:40:b2:2a:36:d3:5a:e7:20:74:
01:99:8e:a4:a6:52:f0:e3:73:34:ff:ad:99:06:9a:67:f4:1d:
f6:f7:21:a8:b9:90:05:3b:ad:5b:2b:af:d2:53:d6:6b:36:80:
4d:7f:a8:32:ba:ef:f3:c2:c0:88:d6:8a:a3:12:8c:45:34:73:
e3:df:22:0a:e9:bc:62:50:a3:70:14:6f:be:ff:a8:af:a3:a2:
13:47:90:37:89:3d:f3:49:3e:8f:07:dc:d2:6c:1b:d8:4b:3c:
e6:b8:f6:cc:1b:ff:ac:41:05:6e:a3:60:f5:c0:7c:ce:c3:e8:
b1:ef:2a:26:33:ca:f4:79:2e:ec:db:60:96:48:9b:cf:45:cf:
c0:fa:e1:d3:c7:ea:a5:c1:c0:17:ca:8c:a2:9e:e9:a7:1d:69:
3a:ca:9d:98:47:0c:b4:76:3a:c9:18:38:c9:77:23:e1:bc:bf:
86:a7:fd:2b:9a:9f:42:db:ed:c6:b7:d4:52:65:e0:02:bd:f2:
3d:96:e1:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:47 2025 by rpki-client