Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
File: 15dPQ3RodlWDV_H7kcOFKlg6FFM.mft (raw, json)
Hash identifier: GbKixmZBLwA7+K9YixYmGcRmtrF0npEUmmBgHVwkONI=
Subject key identifier: 50:76:74:37:83:36:9D:AE:A7:2B:71:74:BC:DB:3B:6F:22:7C:B7:06
Authority key identifier: D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53
Certificate issuer: /CN=d7974f43746876558357f1fb91c3852a583a1453
Certificate serial: 0197B77C2F8D8BD2D3B03738A741CA266EB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
Manifest number: 096B
Signing time: Sat 28 Jun 2025 17:00:58 +0000
Manifest this update: Sat 28 Jun 2025 17:00:58 +0000
Manifest next update: Sun 29 Jun 2025 17:00:58 +0000
Files and hashes: 1: 15dPQ3RodlWDV_H7kcOFKlg6FFM.crl (hash: Gi+BspXajS6WxC2hVwYxbaH+MBh5ZAeCG9eaN6JO7+s=)
2: eTKtoFWz_Mx4YanJDAi3s36ZTD0.roa (hash: /F4jtOytXs7E/d+FweZOPefzhGOW8m0ae7Vd5vmb9SU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:2f:8d:8b:d2:d3:b0:37:38:a7:41:ca:26:6e:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7974f43746876558357f1fb91c3852a583a1453
Validity
Not Before: Jun 28 17:00:58 2025 GMT
Not After : Jun 29 17:00:58 2025 GMT
Subject: CN=5076743783369daea72b7174bcdb3b6f227cb706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:58:b6:27:ed:84:0a:82:d5:9f:49:5f:29:12:
05:6c:5e:32:0b:73:d9:29:f4:61:26:4d:cb:61:90:
43:6d:9e:62:bb:14:53:e3:c5:ac:dd:a6:e6:58:9b:
5e:55:07:bd:ad:f1:e4:3d:a8:d8:15:fa:a7:e9:01:
9f:f0:4d:bd:48:09:a7:f8:0b:32:dc:db:7c:9f:2b:
e1:0b:e7:ad:fd:80:58:42:37:4e:8e:37:13:bc:f7:
b9:bd:de:5d:5d:9d:76:61:4f:dc:61:87:29:e1:88:
ca:d7:66:20:a3:db:1f:2d:87:d6:90:ce:53:9c:12:
ac:42:d1:83:cd:ef:ea:05:0e:dc:2d:73:d0:23:cc:
9c:f8:4c:2b:db:85:4b:ca:44:f4:c1:ca:72:4d:77:
58:86:60:f6:0b:b8:22:a5:42:19:f5:aa:07:f6:5c:
6b:c8:ec:b2:c7:aa:48:ce:d4:b9:97:22:bd:0e:ab:
e4:11:bc:85:b0:8c:9d:ac:6a:bb:dd:b6:5d:41:bc:
d7:c6:05:71:4b:a0:ad:22:19:2a:5f:57:08:51:d6:
28:3c:8f:c2:cd:06:b2:47:5f:3e:a0:bc:1e:3d:7b:
91:12:41:a0:5b:a1:e9:b0:d9:5a:4f:c7:18:67:ef:
c7:7c:f9:ee:05:1c:3d:7d:b8:e0:30:5c:c7:6b:bb:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:76:74:37:83:36:9D:AE:A7:2B:71:74:BC:DB:3B:6F:22:7C:B7:06
X509v3 Authority Key Identifier:
keyid:D7:97:4F:43:74:68:76:55:83:57:F1:FB:91:C3:85:2A:58:3A:14:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15dPQ3RodlWDV_H7kcOFKlg6FFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/6069c2-9625-4fff-b737-cc265b0461c2/1/15dPQ3RodlWDV_H7kcOFKlg6FFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:da:cc:48:b1:81:1f:48:4b:a1:66:04:ee:0f:19:66:fb:15:
2c:69:44:f8:f7:ab:51:f1:79:4e:d7:b2:f1:01:3b:5a:22:7c:
f0:6b:83:0b:88:1d:76:ab:24:33:e0:21:69:14:d4:9c:3f:2c:
1e:ef:6a:58:37:24:94:0f:76:d9:a9:d4:06:8e:ff:fe:9d:0b:
61:37:cc:f7:89:fc:22:8b:39:82:2a:e0:db:40:be:b1:fe:2a:
0e:3a:de:45:5f:9a:10:16:70:39:8c:ec:7b:a4:eb:1c:96:79:
ed:bb:a3:63:73:ea:d4:78:b2:98:3c:8d:4e:15:41:b9:62:17:
df:44:06:85:77:11:24:ed:02:7a:e9:fc:c4:9d:50:c2:82:f3:
0d:24:f3:65:16:71:60:2b:38:c5:ae:92:35:96:ff:e3:61:53:
4b:59:f5:34:83:60:5f:55:f5:15:13:ae:09:78:fe:ed:42:04:
ef:f1:4f:8e:ca:d8:1f:86:6b:72:db:d4:21:76:8e:ae:28:94:
a8:d3:be:ef:e5:5f:c3:71:15:a1:33:85:df:c2:5b:97:1d:11:
54:d5:7a:b2:28:c8:00:ea:2e:31:d7:95:bd:70:37:6d:ea:81:
21:19:58:45:a2:09:5d:ba:d9:91:35:56:52:5f:33:3b:2b:4f:
68:b0:93:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:46:26 2025 by rpki-client