Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
File: 7hsImeOKlrVPxMvNEO9TnFTtTTg.mft (raw, json)
Hash identifier: DiI8pHWQu5Y+hbPespOYRwWIupYMIGORz2LiXaAVaIY=
Subject key identifier: 97:60:72:B5:19:F4:D0:10:06:A1:94:47:76:96:78:F2:B3:B0:FF:7F
Authority key identifier: EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
Certificate issuer: /CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Certificate serial: 0197B820E20933983554DD2E58F076148EAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 20:00:52 +0000
Manifest this update: Sat 28 Jun 2025 20:00:52 +0000
Manifest next update: Sun 29 Jun 2025 20:00:52 +0000
Files and hashes: 1: 7hsImeOKlrVPxMvNEO9TnFTtTTg.crl (hash: ufzKD2hhqLZaKnyI1RoeSGFjIsmadPqbFTKZRWS+H24=)
2: D0b1nmB_L5VEWf6cceZCeBQxCQo.roa (hash: 5aiQU00dPQtZA6c9t9iAvI3R/XjZbywVf6L+3WprENk=)
3: aayTQzRiJq9tAMzk8swFje4kTOA.roa (hash: sZC16XAD3EcE1zhIDvKbW1It71XSPS2OvJcF/8voOKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:e2:09:33:98:35:54:dd:2e:58:f0:76:14:8e:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1b0899e38a96b54fc4cbcd10ef539c54ed4d38
Validity
Not Before: Jun 28 20:00:52 2025 GMT
Not After : Jun 29 20:00:52 2025 GMT
Subject: CN=976072b519f4d01006a19447769678f2b3b0ff7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:83:60:8a:6f:f0:54:ef:f5:e5:c2:1c:9e:f3:
bc:7e:ed:8a:cb:62:94:ef:29:14:5d:a4:e9:db:b6:
99:96:ec:20:6c:11:69:f2:78:60:83:04:c8:26:c2:
6f:1f:ef:1d:f4:3b:61:29:19:84:cc:c7:31:64:4f:
5c:a1:39:44:fa:39:4b:d5:da:5b:62:f9:34:09:e1:
bd:b4:86:a4:00:d9:74:2d:24:8f:99:1c:de:bb:93:
0b:ef:d7:9e:d7:73:07:66:10:35:f0:f0:18:e3:5a:
bf:ac:08:e2:7c:fc:e4:7d:2e:50:3b:f0:83:dc:2e:
92:19:52:24:0a:3e:e5:5b:3b:43:4c:7a:53:d0:c7:
18:e7:27:01:23:7c:62:24:c5:01:04:6f:31:81:01:
ab:30:b0:2a:16:65:4a:93:3f:16:df:af:30:28:f1:
71:cc:0d:66:7d:9c:ba:10:c0:b6:30:09:a3:2e:91:
4a:20:fa:d7:90:c6:93:7e:45:3b:4e:83:66:a5:8a:
34:95:b3:e5:78:73:3e:e5:ec:bc:e5:a0:e8:76:dc:
16:4f:54:60:e3:68:ea:b4:89:8a:0a:1f:2e:a4:fb:
54:a6:d4:6f:45:00:9f:8f:8d:c8:86:30:62:f1:5c:
3f:9a:a2:d0:ba:22:48:d3:53:34:04:73:39:cc:e1:
c0:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:60:72:B5:19:F4:D0:10:06:A1:94:47:76:96:78:F2:B3:B0:FF:7F
X509v3 Authority Key Identifier:
keyid:EE:1B:08:99:E3:8A:96:B5:4F:C4:CB:CD:10:EF:53:9C:54:ED:4D:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hsImeOKlrVPxMvNEO9TnFTtTTg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/fb5a43-817b-449b-bcfc-adf6dab88c84/1/7hsImeOKlrVPxMvNEO9TnFTtTTg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:c9:e8:1f:4c:7c:07:39:ef:bc:f5:9e:f0:5c:ad:9d:20:58:
79:4c:2c:06:24:bf:38:21:79:d6:b9:ef:b7:58:08:6d:4d:30:
41:f0:2d:d2:99:aa:0f:23:23:5c:26:e2:28:37:ee:82:8a:6e:
bd:30:93:a3:73:29:8f:76:ff:35:88:ed:d1:bb:ac:75:5f:32:
31:8f:04:75:89:1c:7c:31:82:98:5d:23:58:02:5a:da:ea:6d:
a6:a5:4e:75:71:e1:38:11:d7:9c:e1:a2:94:0c:38:1c:a3:dd:
e9:c8:3c:64:26:ae:f2:48:bf:02:70:a2:ab:0f:07:d2:e2:fe:
ce:59:c0:11:25:b4:5b:1c:4d:66:0b:24:6f:95:19:ab:82:07:
bd:59:c4:e1:7e:61:fe:0e:8b:ab:f7:4b:07:29:31:24:00:2c:
ee:1e:91:c4:ad:a0:51:a3:86:cc:ec:b1:39:9d:42:11:0a:3d:
76:6d:b2:56:be:0e:63:ff:fa:7c:46:34:76:8b:a4:63:72:81:
ea:6f:be:6f:75:45:67:98:55:63:3a:0d:6f:73:64:3f:2b:23:
4e:a0:73:05:96:91:40:99:e5:42:ad:8e:6d:75:ac:6b:a3:da:
b5:10:11:ca:68:45:6e:bb:11:46:6f:7a:e4:ce:0b:4d:75:e2:
87:7d:e6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:47 2025 by rpki-client