Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
File: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft (raw, json)
Hash identifier: mPAxN3LwVdkR/6AJlCiSxDmZfvWmYDgLSaJWEG6ahWA=
Subject key identifier: 93:F9:CD:7A:0B:3D:68:D6:14:A3:6F:62:39:E4:E1:92:CC:B5:59:59
Authority key identifier: 6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
Certificate issuer: /CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Certificate serial: 0197C7943C5137FD5656D0A0213ABFB31C5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
Manifest number: 15F2
Signing time: Tue 01 Jul 2025 20:01:10 +0000
Manifest this update: Tue 01 Jul 2025 20:01:10 +0000
Manifest next update: Wed 02 Jul 2025 20:01:10 +0000
Files and hashes: 1: 4GFLNoudKsxo0lKJ1-DlrH13jnQ.roa (hash: HUsEZcDE4OcjX3j8qjU3YIB7IUQvhWtNObC5QxLBOjI=)
2: HABzsmEXoTX-9F80tlefBrIojpE.roa (hash: 52kUggTy9NYk2U3Bjz9hs7uyoLjfvw/NlnF/Z95I8C4=)
3: JJI-C-9oBtcYV-r3BsX5tLItXlM.roa (hash: zjcnzqo9avDuhv+fzgrvfrwSKuXtAwZT2xHNcRH+6B8=)
4: QePjCCFm1FINIQleulFli9B8Eok.roa (hash: /guHrTHyVfudxkCaMQP2S3B+Z/m09hjKdZNM8RCBhu8=)
5: RvvULY1y4xBfF8ZuGzWFY0OKEEg.roa (hash: NY71LOvBCM5qGOh91dHK/WKKwDoM07O+dhz3A0gNPUc=)
6: bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl (hash: 5JoqK3thqX17MDfkCmItTVraPsYd+miSKb0l7UYKKtA=)
7: gjLZ8xPb1tsKV2vJR4IOeOvDkLQ.roa (hash: xoIQZnhZzbbmusOiJUznTII6cc6W+LUSKGBLQbZkQx8=)
8: t8J6z3tO2f2jI-WXfX5Z7ghB42Y.roa (hash: CJg1Zg1dR2GxxLuD5y1ebgKx9+kGLch5/dW0dbkm29Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:94:3c:51:37:fd:56:56:d0:a0:21:3a:bf:b3:1c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c03a2caf298019fbd668621516c8c6e1d10e83c
Validity
Not Before: Jul 1 20:01:10 2025 GMT
Not After : Jul 2 20:01:10 2025 GMT
Subject: CN=93f9cd7a0b3d68d614a36f6239e4e192ccb55959
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ae:21:da:cb:0b:a3:ef:ff:f0:43:b8:2f:4e:
0c:26:a2:6f:4f:63:9e:c8:34:ec:f4:23:4d:f5:a0:
cf:12:82:27:91:5f:0f:ff:02:44:ec:93:8b:2a:9f:
30:10:1c:48:e0:9d:da:52:58:83:f8:7c:8b:19:00:
fc:7c:2b:c9:33:ec:c3:cc:f2:73:b9:0b:33:de:39:
ec:6b:4b:c9:80:d6:f2:c8:6b:a4:57:72:e1:89:aa:
61:30:36:86:45:da:9d:61:bc:a2:d6:77:c2:45:73:
4f:a6:03:86:cb:d6:82:5f:eb:d3:cf:5c:2d:94:2a:
50:fb:14:a6:8c:a7:14:4d:62:4e:8c:8d:a8:ba:74:
4b:e0:3b:61:0e:79:36:2e:77:39:bf:42:72:3a:95:
2c:24:ff:e6:81:f7:1f:18:51:85:99:58:f2:1d:d7:
54:ff:b0:5e:9e:8c:fd:e7:95:95:db:fc:4e:d9:47:
e5:cb:33:22:5c:de:54:de:9c:5a:27:ab:5d:1a:1c:
7a:98:d4:5e:1a:28:c1:02:ad:0a:e3:5c:28:6d:72:
bd:23:93:6c:aa:1d:06:82:a5:74:b8:83:b1:b8:ed:
26:c4:0c:9f:59:4c:5e:37:76:d6:89:b1:8d:78:f7:
4d:be:77:a7:05:86:d2:4b:93:b8:72:55:a3:20:fe:
72:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:F9:CD:7A:0B:3D:68:D6:14:A3:6F:62:39:E4:E1:92:CC:B5:59:59
X509v3 Authority Key Identifier:
keyid:6C:03:A2:CA:F2:98:01:9F:BD:66:86:21:51:6C:8C:6E:1D:10:E8:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/16b8e4-1253-4d9e-bd49-fc37fb0cd43b/1/bAOiyvKYAZ-9ZoYhUWyMbh0Q6Dw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:b5:a9:ba:a4:9f:a7:a5:11:df:6a:66:96:59:98:28:f7:51:
03:31:11:e0:11:17:ea:60:c4:0d:7e:6f:d3:27:84:ba:14:02:
6f:0a:a8:be:5a:2b:2a:53:9e:ce:24:33:4d:c3:78:91:ef:45:
e8:71:41:5d:dd:4a:f9:b5:c3:8b:20:d7:4f:f9:3d:4c:fd:65:
88:37:f2:80:e5:72:bf:9c:43:46:b0:a0:bc:c7:af:c4:cb:06:
b7:a9:e5:7f:fb:f2:fa:46:a8:a3:04:df:24:b1:dc:02:43:82:
af:cf:7e:22:c7:00:fa:a1:17:0a:ba:e6:98:9b:ab:e0:0f:a3:
df:9d:e7:6c:14:1c:7d:28:33:4c:8a:59:e7:4b:96:40:5d:8a:
7d:b7:f1:80:d6:7c:4f:a7:5b:12:94:13:24:11:4b:80:ce:e1:
09:f6:cb:77:aa:05:21:76:e4:1b:2d:4f:12:4a:5a:ed:36:2c:
e0:2f:f4:68:cc:f1:65:8f:63:4f:9f:23:0f:7f:b0:c9:2d:32:
dd:52:59:39:24:db:a0:32:ea:ca:c6:b9:99:07:a9:36:fd:0d:
dc:cc:74:b4:8f:e4:2c:ad:eb:4f:f3:93:3d:66:18:c4:d9:86:
dc:b1:2a:94:0e:36:e7:0f:b9:33:41:47:2c:af:92:c3:19:b2:
3b:84:e3:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:15:07 2025 by rpki-client