Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
File: rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft (raw, json)
Hash identifier: xbtOHZSCaymZGgkayAOMQQWicKXNCY+0lZLuRDjcUvw=
Subject key identifier: 30:E5:C9:E1:7D:24:36:C5:35:A5:4E:42:E0:C5:DA:EC:DA:CF:17:00
Authority key identifier: AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
Certificate issuer: /CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Certificate serial: 0197C56EA7B7E7249F0331CDC90E03B2510F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 10:00:52 +0000
Manifest this update: Tue 01 Jul 2025 10:00:52 +0000
Manifest next update: Wed 02 Jul 2025 10:00:52 +0000
Files and hashes: 1: 7a4UPx06lYNEEu_8hOujHiCjI3I.roa (hash: KGEycmI2h25GEHvIQbSwQGJ1oU96GoNn5z0Fg/wO3lQ=)
2: fEfLOGBVJeUecVVlEjapZ06Oj8U.roa (hash: OleUOgz+9pFvUxQajAS7ULw6aOZyzyIU0DZD60L7Tws=)
3: kM5CulzBTgjqTdxC0kA20nIBInM.roa (hash: 4mPvZr8lZjvljhR4YU0MwI6WkG6rsEag6Ecnz4z85HY=)
4: rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl (hash: xhbqVWjXDOy/e+DwlTIx2qtE9RzskPO8gnpwrL0d++Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:6e:a7:b7:e7:24:9f:03:31:cd:c9:0e:03:b2:51:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acbe212a2f1a119ef64ab62e1a96d711524c8bc7
Validity
Not Before: Jul 1 10:00:52 2025 GMT
Not After : Jul 2 10:00:52 2025 GMT
Subject: CN=30e5c9e17d2436c535a54e42e0c5daecdacf1700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f5:0a:fc:69:a4:74:da:a9:ec:69:eb:4b:f5:
4b:8c:96:da:5f:68:48:78:84:ec:3f:41:5c:cf:10:
ca:dc:69:9e:25:c1:e4:e3:9f:9e:73:67:e0:ac:1f:
d3:09:ef:4b:50:39:49:63:68:b4:9c:11:59:bb:7a:
13:df:f6:15:db:7a:e3:5f:dd:ff:9c:06:55:c3:0f:
15:81:b1:22:e5:1e:64:9e:5b:41:08:ac:9a:76:1f:
44:ed:2e:b7:34:b5:a9:06:9e:7c:01:3a:51:e2:79:
e2:fe:81:4b:42:a7:31:66:c1:f3:71:f5:96:6d:e0:
45:96:17:d6:9f:f8:56:66:61:ab:f5:6c:12:e8:9f:
28:fc:c6:90:59:d6:50:15:dc:b2:2b:60:5b:44:75:
5f:6e:e1:49:45:cb:c0:68:ac:45:b6:88:88:d2:8f:
9b:8e:67:2e:a3:b1:42:16:3e:b6:f4:c4:26:dd:f9:
42:49:6c:2a:ee:e8:16:0a:4b:fb:1e:bb:df:1c:74:
d7:4e:a7:73:3d:18:ac:26:d1:cc:5c:ec:7e:73:ed:
53:31:6e:76:4c:f3:87:9a:e4:af:6c:ff:af:5f:fa:
5c:a2:fe:0e:f1:fe:ad:90:ee:fe:28:41:17:a9:c7:
a8:a9:51:a5:27:f9:38:17:d7:59:3d:ed:ed:b9:b0:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E5:C9:E1:7D:24:36:C5:35:A5:4E:42:E0:C5:DA:EC:DA:CF:17:00
X509v3 Authority Key Identifier:
keyid:AC:BE:21:2A:2F:1A:11:9E:F6:4A:B6:2E:1A:96:D7:11:52:4C:8B:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rL4hKi8aEZ72SrYuGpbXEVJMi8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/c5a159-8568-4945-8026-23c338680771/1/rL4hKi8aEZ72SrYuGpbXEVJMi8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d2:07:54:67:ee:39:fe:12:a3:2d:f1:8a:20:e2:05:e8:52:
0d:7e:d6:16:3a:0e:9d:88:5e:8d:cd:cd:2a:ca:67:fb:dd:c5:
b4:30:f1:d8:2e:49:cc:df:8d:b5:41:fe:fc:85:a5:33:7b:0f:
4c:8d:09:10:d4:d2:59:a1:9b:b9:08:d0:f2:1f:a7:10:e9:6c:
1d:71:ea:f9:f0:5d:5e:46:9f:bd:ac:28:1f:c3:63:6c:02:b5:
5e:e7:83:92:fc:5d:12:63:cd:fb:55:94:fe:72:26:46:4f:9e:
c8:6a:2a:20:57:23:98:78:76:50:58:74:1d:6e:77:ee:ba:1e:
de:37:5b:d1:13:b9:1b:64:11:31:8e:06:29:93:f6:c6:bf:22:
76:90:17:fd:d9:9a:ad:b3:fd:c4:b8:b1:3a:a8:a5:0c:2b:b2:
c6:47:fa:f9:7d:0b:5e:86:48:f4:76:03:a0:26:68:0c:72:f1:
fd:a4:f6:ca:a6:2d:39:14:65:4b:63:de:9d:7b:8b:fe:fb:5e:
e3:88:a8:6b:ec:c2:bd:41:ca:d3:e0:31:e6:82:e7:6e:40:09:
4f:21:dd:b7:e5:97:b1:7c:f7:6f:30:a5:9f:0f:30:92:72:4f:
63:9a:c1:d5:bd:33:2d:80:b7:ca:11:a6:b5:f6:85:25:8f:6f:
c6:6c:af:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:19:02 2025 by rpki-client