Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
File: diI5iTgH6wmEboKXJ9cakuljp8g.mft (raw, json)
Hash identifier: wM7uZWTePRyquhPObJzhd2eJ6m5xByFu6MTQckZVSog=
Subject key identifier: 34:F3:8A:21:49:43:4A:40:00:BA:06:BD:AE:E3:29:4D:33:68:C3:D2
Authority key identifier: 76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
Certificate issuer: /CN=762239893807eb09846e829727d71a92e963a7c8
Certificate serial: 0197B77C65F43840C9AA59D739867894B3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:12 +0000
Manifest this update: Sat 28 Jun 2025 17:01:12 +0000
Manifest next update: Sun 29 Jun 2025 17:01:12 +0000
Files and hashes: 1: diI5iTgH6wmEboKXJ9cakuljp8g.crl (hash: 5Or/o+8+xxxuN9XCljtesYOsEkewd2imEOGKiVxvlKw=)
2: w5adTJ6rpx7GFh9HwrpqPSVPdiU.roa (hash: yu6wu1UqofZpvT45d3HGEkgUxnnIlkItksil5PiCcao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:65:f4:38:40:c9:aa:59:d7:39:86:78:94:b3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=762239893807eb09846e829727d71a92e963a7c8
Validity
Not Before: Jun 28 17:01:12 2025 GMT
Not After : Jun 29 17:01:12 2025 GMT
Subject: CN=34f38a2149434a4000ba06bdaee3294d3368c3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:c8:29:2d:4c:7a:49:9d:89:a2:c1:d1:75:8e:
39:58:cb:1a:55:3a:4f:45:de:1d:d4:93:b6:f7:98:
2d:fb:57:91:cd:9e:91:b3:1e:2c:ad:31:93:54:b7:
cf:bf:6a:46:68:ea:43:24:cb:93:d0:44:8a:02:ed:
99:7d:d7:22:9d:d3:d4:63:0a:ae:35:2f:51:93:8e:
4d:06:31:9d:71:eb:5d:3a:b8:84:5b:19:d1:d1:b3:
c6:7d:23:e3:d8:27:8a:52:c3:fd:ae:e2:74:f5:25:
b0:d2:21:f3:94:9f:30:4a:f2:a0:2c:80:d9:72:a8:
41:4f:97:b8:70:a2:7b:64:48:d3:2a:ab:61:15:3e:
81:e9:73:d8:5c:d1:be:43:22:d3:53:a5:9d:9f:0a:
9c:79:b1:dc:eb:d1:33:47:61:db:09:5a:5d:c6:52:
89:2b:ff:2c:1a:6c:b8:32:92:71:b1:fb:eb:91:41:
e4:72:f8:5d:67:54:83:dc:d6:d2:39:dc:ca:1f:c8:
26:a0:fd:02:14:1b:75:6c:38:ba:92:f7:d0:c9:f8:
de:0d:45:1b:37:42:0a:fb:9d:9d:e8:2d:bf:45:9b:
36:45:f6:5a:10:f0:04:38:77:4e:56:0b:78:cc:2f:
9f:91:0a:0f:16:b8:c8:9a:80:ba:bb:14:1e:1a:bb:
25:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F3:8A:21:49:43:4A:40:00:BA:06:BD:AE:E3:29:4D:33:68:C3:D2
X509v3 Authority Key Identifier:
keyid:76:22:39:89:38:07:EB:09:84:6E:82:97:27:D7:1A:92:E9:63:A7:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/diI5iTgH6wmEboKXJ9cakuljp8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/94c2ce-9f7b-4ca7-abbc-ca67fd64d34c/1/diI5iTgH6wmEboKXJ9cakuljp8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:a6:42:de:87:76:f7:44:d6:e5:54:a2:20:db:ed:42:c2:4b:
df:57:1b:24:dd:00:8c:66:a5:3b:d1:5b:07:0a:f8:ec:ae:41:
33:43:7e:92:3b:33:34:e5:f8:db:f3:ac:e2:fb:19:0b:5f:7f:
0c:e7:7a:8d:23:33:a6:ef:9e:63:c0:b2:92:eb:bc:15:d8:e1:
66:03:4c:f9:f6:3b:44:23:28:e6:58:e1:ee:db:5c:9b:f1:1b:
d2:87:78:3f:b8:9c:3f:4f:c3:5b:e7:5d:a7:7f:2a:1f:a3:ce:
4b:d4:98:40:5b:e1:bf:0e:88:e2:5e:0c:5e:e7:b5:15:2c:a0:
ab:cb:73:54:50:0f:d9:ef:4b:64:66:bf:d4:6c:11:41:da:45:
66:82:ff:19:28:ce:7d:d1:5d:8f:b0:70:65:40:f4:19:34:50:
4f:bf:28:d3:f7:1c:47:f7:73:0f:e7:b3:af:b3:86:aa:c0:4c:
1f:84:c8:23:71:7b:f5:fe:a7:b4:c7:03:fe:a2:7e:e1:3e:e0:
9c:42:a0:0c:1e:bb:60:bd:07:28:83:f7:c5:c2:ec:de:f4:16:
57:ed:7c:d7:da:d8:13:f0:aa:a4:48:f7:43:37:14:ad:a9:8b:
4a:12:fe:8d:66:e5:cc:4c:b5:16:e8:10:9d:22:aa:1d:62:9b:
85:3a:8d:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:11:09 2025 by rpki-client