Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
File: 21m85hup0qDjVb4B8TQbjfdq69s.mft (raw, json)
Hash identifier: aPww//QwBFK/fTKfRV9oi+335buYhYK2gdPUXIzjyUQ=
Subject key identifier: 96:6B:3E:0C:A1:18:DC:00:1B:D9:F4:C1:B5:C6:54:73:4F:51:5C:D2
Authority key identifier: DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
Certificate issuer: /CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Certificate serial: 0197B7EA885F3BEB57701CBD32EB81844F9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:30 +0000
Manifest this update: Sat 28 Jun 2025 19:01:30 +0000
Manifest next update: Sun 29 Jun 2025 19:01:30 +0000
Files and hashes: 1: 21m85hup0qDjVb4B8TQbjfdq69s.crl (hash: 3hM8iVblQyHRq0wH8YnNN38qTb35uYi4Qrhz+7Cl8sI=)
2: y6zUASqLMYC9vOre4NE5oaCGRIY.roa (hash: nU1xlMhFlcEyY9/vfWFwqCMNEfoKNvZKlYNQ0axw4og=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:88:5f:3b:eb:57:70:1c:bd:32:eb:81:84:4f:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db59bce61ba9d2a0e355be01f1341b8df76aebdb
Validity
Not Before: Jun 28 19:01:30 2025 GMT
Not After : Jun 29 19:01:30 2025 GMT
Subject: CN=966b3e0ca118dc001bd9f4c1b5c654734f515cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:30:07:2e:27:ea:cd:1e:62:09:ab:f4:c7:79:
d1:3f:a2:8a:7b:ed:d4:d3:e6:2a:74:8e:bb:13:d1:
a7:0f:e3:fe:8a:44:31:2a:18:9e:ed:67:c4:cc:b4:
9d:d9:8f:c4:b5:f5:32:ec:92:27:b2:06:ca:69:62:
d4:c9:42:51:d8:27:b4:39:47:d0:25:0c:bf:b3:47:
bb:ac:60:6e:2e:31:00:9d:ca:63:a5:74:16:fe:79:
79:90:28:df:9f:17:75:d2:c7:4f:fb:fb:f2:90:74:
2f:61:c3:c0:23:8c:36:a4:8e:8d:81:a2:48:92:70:
ca:8c:f7:c6:51:c6:9e:cd:f9:af:07:bc:30:57:a3:
b6:23:0f:00:8d:e9:78:33:ed:18:ad:95:d1:34:98:
fc:b6:89:c2:84:52:13:7b:fd:58:2b:ef:dd:24:28:
3c:ef:be:f3:be:ad:5d:85:64:05:ce:0d:4b:38:3f:
32:8b:4e:66:ec:9d:a0:8c:8f:c6:3b:d3:ae:62:3d:
a5:bb:e9:a3:6c:2c:90:07:55:48:e6:1d:cd:1e:8e:
e6:58:8a:e9:04:71:ba:65:42:c0:33:06:34:03:41:
6f:9c:07:a1:c1:90:62:88:28:b2:18:83:89:7a:20:
8a:01:fb:f0:03:15:4e:72:4c:cd:f7:45:b8:39:e7:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:6B:3E:0C:A1:18:DC:00:1B:D9:F4:C1:B5:C6:54:73:4F:51:5C:D2
X509v3 Authority Key Identifier:
keyid:DB:59:BC:E6:1B:A9:D2:A0:E3:55:BE:01:F1:34:1B:8D:F7:6A:EB:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/21m85hup0qDjVb4B8TQbjfdq69s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9209ed-4b98-4897-8e9b-3a042f77b738/1/21m85hup0qDjVb4B8TQbjfdq69s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:b0:6c:01:09:ce:ac:f9:b8:43:29:17:2e:4b:77:2b:10:07:
9e:0b:c9:9b:dc:7c:83:13:89:2f:cf:18:34:b5:06:d4:6b:1e:
76:89:63:83:ba:62:42:5d:cf:31:c4:e8:11:38:65:3f:a9:2d:
ba:07:48:4f:95:e1:f8:6e:ca:a8:f4:b8:f5:6a:f6:6e:a8:51:
f5:03:bd:15:e8:f6:30:0f:36:ad:fa:7b:e6:8c:e9:28:76:83:
9b:eb:d2:ae:a9:5b:54:18:0e:34:cc:4f:e8:d6:ae:b3:ed:80:
2f:ce:e3:ce:f0:f4:ce:94:b9:a9:04:62:b6:73:8a:0c:c0:cb:
c0:84:7f:c0:3c:3b:b4:c6:8b:d4:25:97:9d:60:96:e1:b5:b9:
72:ed:21:ed:09:d4:7c:c2:d3:3c:85:da:78:1b:cb:0d:50:73:
8a:92:cd:2e:49:0f:b3:7f:40:d9:6e:a4:62:2a:7b:65:01:b7:
a5:b8:e1:3e:55:e0:b1:3c:3b:34:7e:00:81:70:f2:cc:44:5a:
46:47:db:cb:d5:1f:66:59:cb:84:d6:d2:d8:a1:f6:22:d6:a3:
ea:94:d9:79:fd:be:cd:d8:b2:33:42:f1:1f:7b:b0:52:ee:59:
3f:09:3f:2b:7f:c5:15:ac:e1:c5:8e:57:2e:42:c7:72:e9:bc:
b1:ba:63:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:46 2025 by rpki-client