Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
File: p72rJYCrs79ii11PidSXzZ2SpOM.mft (raw, json)
Hash identifier: 4wk7e19RK1rmYwvmi9k9r/5r3NZSkz0br5EPFZqWrsI=
Subject key identifier: 4B:EF:2E:3A:50:E9:53:98:95:3A:56:C4:A0:5C:54:50:B4:C2:44:85
Authority key identifier: A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
Certificate issuer: /CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Certificate serial: 0197B7B34FD464B2CFB61F87C8B40EB6ACB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:01:11 +0000
Manifest this update: Sat 28 Jun 2025 18:01:11 +0000
Manifest next update: Sun 29 Jun 2025 18:01:11 +0000
Files and hashes: 1: GdFZWMri9TOgFT_NeIYkh_SHlw0.roa (hash: NbWz1qM9hdBHH2+QMgdXpTZoVY8ecNxlY44TCKHTwLo=)
2: p72rJYCrs79ii11PidSXzZ2SpOM.crl (hash: Z+eDhDtqdVIFSZhB34L6vKKh3OkOKs9an5rfnw4HmhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4f:d4:64:b2:cf:b6:1f:87:c8:b4:0e:b6:ac:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdab2580abb3bf628b5d4f89d497cd9d92a4e3
Validity
Not Before: Jun 28 18:01:11 2025 GMT
Not After : Jun 29 18:01:11 2025 GMT
Subject: CN=4bef2e3a50e95398953a56c4a05c5450b4c24485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b2:37:8a:50:6a:b1:41:73:26:96:a5:16:05:
1a:ac:2e:30:9f:1a:66:06:62:97:cb:84:02:37:34:
0a:10:68:7b:ad:fc:28:21:a1:6f:d7:bc:99:41:23:
cf:86:6c:4c:11:13:f5:24:8a:c3:51:86:1c:65:f4:
d7:91:4c:3c:70:7f:81:c1:b2:e1:56:47:17:a5:83:
7b:aa:63:8e:ae:3f:f4:eb:be:e8:14:54:37:1b:81:
18:4b:17:87:4a:d2:db:eb:49:65:22:f3:2f:26:91:
ff:57:4c:2f:91:e4:9b:86:d0:78:c4:f8:14:d5:cf:
3b:ab:71:df:37:49:93:60:13:7e:d1:49:06:9b:97:
a8:f5:1e:7b:b0:c2:10:e3:ec:f9:47:e7:ae:fd:9b:
c0:04:b7:5b:0c:ae:d4:c8:7d:fc:b0:30:29:63:fe:
35:60:9a:43:c7:3d:90:3e:14:7e:af:32:d2:0d:25:
e4:e9:0c:d9:d1:bd:46:41:c7:3a:b7:d1:40:58:41:
d9:f5:9a:5f:38:17:48:2b:8a:fe:80:94:f9:8e:af:
db:b5:55:17:33:11:23:08:fb:8a:a7:49:5f:a7:72:
14:b5:b9:59:db:52:12:72:01:e8:8e:db:61:6a:ec:
fa:77:1f:a8:1f:b3:03:c6:12:3c:a4:f9:28:51:dd:
0f:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:EF:2E:3A:50:E9:53:98:95:3A:56:C4:A0:5C:54:50:B4:C2:44:85
X509v3 Authority Key Identifier:
keyid:A7:BD:AB:25:80:AB:B3:BF:62:8B:5D:4F:89:D4:97:CD:9D:92:A4:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72rJYCrs79ii11PidSXzZ2SpOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/8f1b46-a4b1-4ff2-bbec-1d709a5c616b/1/p72rJYCrs79ii11PidSXzZ2SpOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:ff:9d:9a:bc:61:9f:b3:64:d6:39:72:cb:aa:cf:ab:46:42:
6a:29:b0:02:8c:07:d3:24:72:65:14:33:00:d5:9b:7c:86:74:
73:8a:ad:8a:79:cb:c5:d3:c6:7d:31:6d:be:0c:75:28:ac:87:
61:77:eb:30:f9:31:09:4d:01:42:47:88:4f:a6:c6:ed:10:c2:
21:de:94:35:44:82:93:f6:31:ae:b2:f5:91:c2:e9:0c:ef:f1:
45:da:5c:22:a5:43:fb:0d:da:2a:37:6b:0d:85:80:05:5e:a6:
a7:e5:51:c5:35:85:4a:2a:40:54:4b:f6:10:ae:eb:02:75:d7:
3c:86:7c:f7:7f:0b:0f:94:5c:b9:b7:72:ba:60:56:dc:71:f5:
2c:82:72:ed:02:01:7a:67:cf:d4:e6:c5:91:27:37:09:9b:9c:
7f:ae:1f:94:5d:99:f7:6e:09:b3:01:75:83:57:5a:80:38:64:
db:47:26:2a:4d:92:d8:9c:72:83:a9:8d:db:e1:75:c9:4a:1f:
bb:d0:fc:a7:10:41:65:56:29:c7:8b:33:ff:40:c8:73:01:ab:
0a:e2:41:97:70:2d:1c:85:35:7d:a3:27:cd:99:f6:c1:a2:b0:
c9:75:88:40:e5:84:7d:20:f0:57:26:64:20:31:19:db:d4:c5:
35:5e:74:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:18:50 2025 by rpki-client