Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
File: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft (raw, json)
Hash identifier: PQsfuWClnNPqJxSNoNz5EEFFGbHmoFftYD2uyQLIZTA=
Subject key identifier: 23:63:99:3F:96:6E:AE:56:B3:A8:A7:C5:8F:85:AE:E2:AD:A8:3C:CE
Authority key identifier: 07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
Certificate issuer: /CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Certificate serial: 0197B77CAA733FCDE9D2AEF33324FAF7C2EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:29 +0000
Manifest this update: Sat 28 Jun 2025 17:01:29 +0000
Manifest next update: Sun 29 Jun 2025 17:01:29 +0000
Files and hashes: 1: B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl (hash: wkdSx7sbs++HblaISXepmKMApzD+3yI3Z3j/tl96j0Y=)
2: NU7LpjX_c-YRDnvo18YVHXBujbY.roa (hash: odut5lYelTDd0ROdgEZa5uhbKyC1bMMR57mT+YqgUgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:aa:73:3f:cd:e9:d2:ae:f3:33:24:fa:f7:c2:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079889d9de4f07014beb2c0a312cd73652a3fc38
Validity
Not Before: Jun 28 17:01:29 2025 GMT
Not After : Jun 29 17:01:29 2025 GMT
Subject: CN=2363993f966eae56b3a8a7c58f85aee2ada83cce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:b4:4e:f6:aa:a8:1a:2a:b0:bf:55:df:d0:
37:67:18:b1:c1:16:44:c5:cc:47:c6:32:39:ae:53:
d8:fc:b3:c2:fa:ab:cb:db:3e:a1:38:1c:c9:b6:84:
6b:78:4d:4f:99:0e:dd:b8:97:d9:c4:ea:72:02:03:
b3:8f:f7:15:6c:e6:59:a6:03:eb:d4:37:c7:e8:19:
68:a4:cb:b5:e0:ed:3e:e6:11:45:d2:e1:e7:2c:6c:
6e:a9:99:4e:aa:a2:14:65:22:6d:56:25:e9:c1:a5:
58:c1:30:38:82:13:02:ef:89:d0:71:10:4d:3a:61:
0e:dd:17:10:54:cc:a1:cb:45:8d:c8:d4:38:52:8c:
36:15:bd:91:65:b8:93:40:cb:64:3d:5c:ac:28:36:
e5:66:f5:f9:ca:2b:04:1d:82:d8:b4:b6:75:68:c4:
b4:7a:ec:08:b1:ea:fe:f1:02:2c:6d:0c:ff:e5:04:
e2:44:ae:6f:92:7f:cd:db:a5:24:58:e7:e1:c1:29:
cf:2e:4d:b5:a2:6f:f5:2c:cc:fb:73:a1:ee:bc:d0:
88:46:c3:9f:ef:0b:93:af:a9:5a:49:af:1d:fe:15:
d6:71:27:35:d8:2e:e8:93:ac:88:94:50:12:f3:27:
53:33:73:a5:23:1b:21:0b:3c:36:99:21:e2:60:92:
a8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:63:99:3F:96:6E:AE:56:B3:A8:A7:C5:8F:85:AE:E2:AD:A8:3C:CE
X509v3 Authority Key Identifier:
keyid:07:98:89:D9:DE:4F:07:01:4B:EB:2C:0A:31:2C:D7:36:52:A3:FC:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/dd3940-ffd6-4b69-9f01-fd8d25a263d2/1/B5iJ2d5PBwFL6ywKMSzXNlKj_Dg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:8e:dc:7d:06:8a:77:34:f6:77:34:b8:66:52:17:22:78:32:
cb:43:f2:7f:0d:ed:32:52:e9:d2:8b:f3:65:41:ce:1b:e6:96:
98:67:a1:ee:57:b6:9b:4d:c5:7a:01:89:fc:db:0e:1d:67:fa:
e7:6d:e2:7d:24:fa:dd:b6:5a:22:b8:77:0d:b4:77:56:6d:08:
61:40:b8:b2:d4:8d:3b:31:b6:29:50:b6:ff:02:e2:96:68:22:
3a:2b:79:cc:ce:f3:fe:ae:7c:8d:17:e4:4e:46:c3:ba:87:dc:
41:aa:2b:f6:f6:2a:7f:b9:94:4e:86:da:80:99:ac:36:db:5f:
95:22:23:90:2e:2c:2f:ae:ae:f3:7e:48:03:86:d0:ce:03:aa:
28:67:9b:22:58:41:a6:51:9c:0f:26:71:e6:43:08:3e:58:69:
a3:7a:c9:7f:d8:b2:96:59:28:33:1d:6e:82:d0:5d:01:e6:4f:
20:76:6d:6f:69:2f:e4:2e:46:65:dc:26:e2:f2:4e:03:ed:d9:
f3:b3:35:32:55:67:98:84:49:fa:f6:54:a4:f0:9c:93:0c:0c:
84:3c:99:ea:33:5b:dc:92:e5:5e:d8:a6:6a:ba:eb:e9:81:a4:
eb:5b:21:b0:75:c2:10:6b:02:4d:e5:05:01:dd:92:ed:81:4a:
45:9d:6d:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:26 2025 by rpki-client