Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
File: praJ3e9Y8KM4Pi71qjonxP5FMY4.mft (raw, json)
Hash identifier: nNX30/+mmSusr1u3ryIewGqvqWdNqgMGQFoQIqWMsZo=
Subject key identifier: 28:6C:4A:10:66:DE:16:C2:1C:1C:A7:99:82:33:9F:D0:F2:B5:27:E8
Authority key identifier: A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
Certificate issuer: /CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Certificate serial: 0197B8213248B82DBAC2717C3839152FF9D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:01:12 +0000
Manifest this update: Sat 28 Jun 2025 20:01:12 +0000
Manifest next update: Sun 29 Jun 2025 20:01:12 +0000
Files and hashes: 1: 1-hqyEGwonCGY9K2L38Pw7_zJV_k.roa (hash: a3BoJ3dncPr176aD5ziB0Bh5202joOPjBl2mIqn/r/0=)
2: praJ3e9Y8KM4Pi71qjonxP5FMY4.crl (hash: rXb7T+cPTEb467WHapKGYpHkP/qmXDssaCOtyv6X7KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:32:48:b8:2d:ba:c2:71:7c:38:39:15:2f:f9:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b689ddef58f0a3383e2ef5aa3a27c4fe45318e
Validity
Not Before: Jun 28 20:01:12 2025 GMT
Not After : Jun 29 20:01:12 2025 GMT
Subject: CN=286c4a1066de16c21c1ca79982339fd0f2b527e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:c6:45:1c:9a:e3:3f:73:36:ec:95:41:4f:18:
c2:bc:88:db:b9:10:c7:ea:a7:05:2e:f4:c7:fc:52:
43:86:9d:e1:5f:7b:8e:de:25:81:74:3d:79:ae:b8:
88:91:69:5f:75:06:fe:13:93:97:69:f7:a7:42:de:
00:e5:30:8a:72:db:22:0e:82:21:91:70:0f:46:6b:
5e:20:f0:68:f8:6b:d9:d5:1b:ef:ee:7b:a7:fe:ae:
67:f7:68:60:4a:2e:01:79:fa:31:36:f8:50:12:b1:
bc:10:ed:62:fc:40:ed:d7:62:b1:03:a9:0f:53:61:
15:fc:ea:f8:14:8d:72:a8:d4:8a:c7:12:cb:2f:ab:
56:3b:ff:ee:39:63:d2:91:8f:c6:14:0b:4f:be:55:
03:c9:7a:b5:04:a0:68:16:7e:89:88:04:af:92:1f:
e8:59:ef:94:eb:84:93:c2:8c:29:f2:71:37:c7:24:
2f:3f:9f:cc:f7:a0:c8:df:13:6e:07:76:d7:4e:b6:
24:e4:ce:c9:29:a7:e1:b7:25:37:1b:3e:f1:3f:c3:
83:50:28:57:21:08:fd:85:81:ca:0d:0a:f4:86:9e:
cd:3e:83:1e:f9:fe:2a:ef:41:9f:ac:2e:1e:05:43:
16:8a:a2:65:ce:78:68:38:08:e2:a6:f8:6c:2d:08:
74:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:6C:4A:10:66:DE:16:C2:1C:1C:A7:99:82:33:9F:D0:F2:B5:27:E8
X509v3 Authority Key Identifier:
keyid:A6:B6:89:DD:EF:58:F0:A3:38:3E:2E:F5:AA:3A:27:C4:FE:45:31:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/praJ3e9Y8KM4Pi71qjonxP5FMY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8fef7f-d011-4cdb-ac0a-31700f0e1a61/1/praJ3e9Y8KM4Pi71qjonxP5FMY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:5e:47:9c:f5:e3:1a:f8:d1:ad:a2:1d:82:b1:4f:b8:7c:0e:
2c:df:03:e4:97:26:af:1d:12:35:0b:1b:6a:3e:ee:8a:68:94:
07:28:1d:30:be:d5:1e:ff:e1:8b:26:f5:ba:b3:b0:91:dd:40:
16:65:ad:97:97:c5:88:1c:dc:ae:c2:2b:47:60:b7:fb:f0:b4:
db:8c:7f:a7:44:30:13:29:8f:8c:18:db:ed:e5:41:08:f7:91:
8e:77:5a:a8:d1:cb:fa:74:6d:ac:a6:d8:b5:f2:1a:5e:47:8e:
d5:56:61:b3:2d:38:24:ee:84:8e:6b:76:06:76:cd:ff:65:67:
be:52:80:03:ca:b8:21:c7:b9:b9:91:ad:1b:d6:ba:2f:71:af:
ed:7a:4f:97:22:70:89:11:c8:5c:62:4c:55:6f:fc:bb:5c:5f:
15:ca:46:05:e0:15:ea:f7:18:f6:4c:63:02:a7:92:5f:33:38:
e3:c1:29:61:de:8b:9f:8a:08:fe:7c:40:70:94:7a:6f:9a:1e:
a3:1d:1b:0f:82:44:c6:53:50:8b:3a:e5:a5:57:d6:d3:22:3e:
6b:2d:f8:cd:ac:89:75:53:7a:96:83:98:dd:42:63:ab:0c:c4:
22:b7:bf:4c:31:7f:68:5e:c3:6b:f6:ae:6d:e1:fa:ec:e1:36:
1e:b4:20:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:27:41 2025 by rpki-client