Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
File: bN7Hsun4ZurDa8McpMT_YtU90WY.mft (raw, json)
Hash identifier: dHA84+5msR7wZTGNMklywoJNNfyHAGNxZPBebunRc30=
Subject key identifier: E4:8B:DF:A2:44:2B:D6:3F:97:0D:3F:2C:5D:90:A4:B1:D6:A2:E4:55
Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
Certificate issuer: /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Certificate serial: 0197C1C8C3373A863D8D283F0C68DF9AFC46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
Manifest number: 15BB
Signing time: Mon 30 Jun 2025 17:00:49 +0000
Manifest this update: Mon 30 Jun 2025 17:00:49 +0000
Manifest next update: Tue 01 Jul 2025 17:00:49 +0000
Files and hashes: 1: Z4ohMPF1WbOgY7NPLu3yhyFt6Mc.roa (hash: wjvtvacmB4OpgR5kZvFLo2El4XLARx+8D9159reAQW4=)
2: bN7Hsun4ZurDa8McpMT_YtU90WY.crl (hash: ZOnjbB6SRYd/LSUwpothRw6x2oJlHIdJEko2vzSognk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:23:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:c8:c3:37:3a:86:3d:8d:28:3f:0c:68:df:9a:fc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Validity
Not Before: Jun 30 17:00:49 2025 GMT
Not After : Jul 1 17:00:49 2025 GMT
Subject: CN=e48bdfa2442bd63f970d3f2c5d90a4b1d6a2e455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e7:33:72:d9:7c:17:4e:f3:ea:95:87:80:9b:
6f:71:e8:fe:80:f5:c6:15:db:28:8e:d7:22:e6:58:
83:75:b2:e8:1b:9b:d3:08:1e:cc:99:b9:e2:a6:d8:
61:1d:00:49:eb:3b:d4:29:1d:45:4f:f4:10:67:c8:
98:9f:c5:6e:2d:8d:94:17:02:f0:78:0b:d6:a1:16:
b3:d4:0a:c8:a3:d9:1a:b1:c2:c1:94:5d:2d:14:c4:
1d:25:54:77:d1:d4:e6:f2:64:b3:49:8a:51:5c:0d:
a7:9c:6a:4a:59:1f:15:d4:2b:89:3f:39:77:19:a4:
ef:07:5e:37:ca:4b:75:aa:62:44:e1:88:a8:fd:b3:
eb:50:bf:75:9f:c1:ec:39:6e:35:f1:a2:68:14:28:
f3:0b:6d:df:83:0b:bb:4a:b4:68:76:6c:7b:0a:83:
fa:77:23:fb:1f:aa:56:bc:54:97:79:b0:cd:75:45:
3a:4b:9d:68:9c:6b:bd:89:94:0a:18:0c:21:1d:99:
7c:72:3e:a7:04:99:22:a5:ca:02:22:32:0a:7f:7f:
94:7e:49:e9:e0:39:6b:4f:79:ce:59:bb:6b:ec:05:
47:cb:22:85:23:8b:07:45:d2:63:b5:b6:7a:b5:3b:
97:10:dd:e1:04:e5:ce:cf:4b:41:30:24:54:dd:50:
c6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:8B:DF:A2:44:2B:D6:3F:97:0D:3F:2C:5D:90:A4:B1:D6:A2:E4:55
X509v3 Authority Key Identifier:
keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:81:b8:b4:5f:d6:aa:11:57:03:8a:ec:4d:7c:cb:51:ff:53:
27:fd:e8:4f:b3:d8:0c:eb:0d:f7:f8:f9:20:64:95:a6:1a:31:
c4:ff:74:3e:26:ac:7e:96:63:d2:c6:2d:3d:73:3b:9e:47:57:
77:2b:15:46:45:8a:76:01:16:0d:45:dd:5b:04:a1:01:30:c6:
40:52:e1:88:da:00:72:6c:06:18:7f:32:e0:6a:dd:35:91:e7:
0e:67:f4:da:6e:7d:d9:bd:78:e2:e9:a0:81:01:fc:f7:20:8b:
2d:6f:92:06:26:bb:51:df:a4:5c:04:37:52:15:16:8c:99:1d:
43:f9:16:a8:8f:82:0e:b6:07:a4:fb:3b:c0:85:a1:db:66:d4:
74:84:6d:da:c2:3d:9e:8f:16:34:c6:d1:c1:64:2d:33:5a:f0:
f0:27:7e:f2:ac:1b:73:33:48:d0:9c:23:65:dc:22:2b:d9:26:
2e:39:84:29:06:0a:cd:03:70:05:af:9d:44:d5:58:fd:97:de:
a4:a1:8a:9d:05:12:79:d9:b0:a9:23:ea:70:68:8b:d4:34:d9:
db:3a:e8:32:73:4e:ac:47:d3:6e:56:6f:db:87:12:e9:65:d8:
dd:1a:04:bf:6c:97:16:b8:50:f2:2c:59:b9:5f:a5:c5:f6:6d:
e3:90:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 22:52:02 2025 by rpki-client