Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
File: b61qcd7-VgoOXCH_u0A4-0EJEpU.mft (raw, json)
Hash identifier: QKbrXh5A8TTZIMhoueKp18J791QJ8RhZ5d9wQafdGsw=
Subject key identifier: CB:99:CE:10:04:8D:11:D3:32:75:9D:D0:63:F0:92:4C:B4:C6:3D:1A
Authority key identifier: 6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
Certificate issuer: /CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Certificate serial: 0197DA0829C58EDA9371C2D24ECD38117FB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
Manifest number: 15C7
Signing time: Sat 05 Jul 2025 10:00:57 +0000
Manifest this update: Sat 05 Jul 2025 10:00:57 +0000
Manifest next update: Sun 06 Jul 2025 10:00:57 +0000
Files and hashes: 1: b61qcd7-VgoOXCH_u0A4-0EJEpU.crl (hash: dOYQFK+IDnJrS61hz1EX150jW0WlAMmfriqDdQ0w1uA=)
2: o-uxsmeV-GDLlYueP7RtZNtRLkY.roa (hash: xd5QoXbqzMFg+YyYmPM0+ODCfAWCU2/7fETeFx+AjCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:da:08:29:c5:8e:da:93:71:c2:d2:4e:cd:38:11:7f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fad6a71defe560a0e5c21ffbb4038fb41091295
Validity
Not Before: Jul 5 10:00:57 2025 GMT
Not After : Jul 6 10:00:57 2025 GMT
Subject: CN=cb99ce10048d11d332759dd063f0924cb4c63d1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d7:19:c0:64:d0:cc:8b:2b:b9:3e:14:4b:4f:
d2:67:79:4c:1c:90:f7:af:74:9b:4e:51:1c:48:e2:
6e:df:ae:8c:ee:f0:3f:c0:40:ee:35:c8:ea:24:71:
87:d5:25:60:54:fe:21:cd:b7:6d:43:29:a8:db:15:
e1:6a:c7:bb:92:61:2e:b2:ed:57:46:af:26:a0:92:
9c:06:72:83:92:06:d0:a6:b9:5a:13:e5:74:c0:c8:
12:1b:78:86:88:83:f6:6d:c4:a7:a6:d6:5e:b2:b3:
27:22:89:66:10:9b:4b:fe:c2:36:90:f6:0c:09:ad:
51:ca:1a:97:74:4a:6b:eb:7a:30:0e:d9:0c:c9:37:
3f:fc:10:20:82:cc:a3:1a:12:b9:04:83:56:f7:ae:
68:fc:30:b0:9b:cc:3c:dd:a7:68:f1:ba:39:52:25:
dd:a1:15:f7:3a:46:14:68:2a:a3:10:72:7a:c6:56:
27:cf:c2:a5:6e:fa:d9:68:b1:b8:4a:16:16:4f:ff:
54:56:e7:ed:22:e3:be:40:a3:8b:4b:92:27:d5:6b:
13:35:06:ab:b3:53:c7:7f:c2:07:fb:0d:f1:be:5d:
5c:75:6d:4d:e1:30:e1:3a:17:06:30:dd:66:bb:a8:
b5:85:85:fe:e3:5d:4f:84:20:89:99:1d:15:ee:f0:
ed:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:99:CE:10:04:8D:11:D3:32:75:9D:D0:63:F0:92:4C:B4:C6:3D:1A
X509v3 Authority Key Identifier:
keyid:6F:AD:6A:71:DE:FE:56:0A:0E:5C:21:FF:BB:40:38:FB:41:09:12:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b61qcd7-VgoOXCH_u0A4-0EJEpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/293698-949d-4665-ba07-8cb4e253f175/1/b61qcd7-VgoOXCH_u0A4-0EJEpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:dd:68:24:37:ac:7d:cf:ae:c7:3f:a6:4f:37:50:ab:f2:96:
4a:ea:35:36:82:45:3e:33:12:a2:63:e2:4d:8f:41:09:3d:da:
71:dd:26:f6:f8:64:af:40:4b:46:eb:a8:b7:15:bb:04:93:62:
a8:a2:fc:f3:47:84:22:e1:ec:32:c9:72:d2:3a:c8:7a:43:84:
c2:34:db:22:77:cf:ce:0b:c4:d6:dc:5c:38:51:0a:b8:30:07:
70:40:89:70:5a:e8:06:7f:b8:6d:ff:d3:0a:ee:f4:ef:5f:17:
3b:9c:8b:ba:de:e0:bf:25:3c:79:4b:98:1d:c7:78:fd:9c:86:
ef:8c:be:28:d0:68:b7:5b:67:2e:f4:da:8e:b4:50:22:6b:bc:
87:50:52:4e:12:4f:70:ba:2f:88:3b:f5:b6:66:96:84:b3:cd:
dc:62:bb:be:de:e8:4b:fd:45:5b:ae:98:23:f1:04:1e:40:af:
e9:ae:90:cb:11:2c:98:31:2e:b9:e7:dd:54:23:9a:83:6a:2a:
83:5d:8b:47:7f:10:4d:e3:8c:58:89:f8:8e:58:49:df:c1:a1:
76:d3:36:e8:c6:52:5c:60:a5:02:1d:8c:bc:fe:6d:5d:05:44:
3e:15:ce:4c:af:2f:e8:0f:bc:be:8b:bd:d3:2b:c7:75:05:e3:
ea:1d:f9:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 11:51:05 2025 by rpki-client