Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
File: k7dqyfeoSteQrVfIgLyfhirUyec.mft (raw, json)
Hash identifier: ZW/2T3P0sLhZbL5C9il4cF+NczE8EkUTxH6EVP7c0qs=
Subject key identifier: B8:A5:FF:0C:9F:47:6F:77:EA:22:21:62:A9:8F:74:EC:D4:CF:71:77
Authority key identifier: 93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
Certificate issuer: /CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Certificate serial: 0197B6D7BED9E64C3130F013133387A1CD52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
Manifest number: 15D3
Signing time: Sat 28 Jun 2025 14:01:21 +0000
Manifest this update: Sat 28 Jun 2025 14:01:21 +0000
Manifest next update: Sun 29 Jun 2025 14:01:21 +0000
Files and hashes: 1: 8F0Ve4qemfIe74knbJ2BWzh49o4.roa (hash: Z4/lQ0XEn+vbvsuIA+z8T81D+e9ljwjUFKwHut4Xj9k=)
2: YzH9FpM8Eg_tqz_L3y3mlHb7ZbY.roa (hash: KjnbFS24f0U0fBm1mqed6e/EL7zir4AQYBp9zdgcLZI=)
3: k7dqyfeoSteQrVfIgLyfhirUyec.crl (hash: TfS8ACIMhAZYB+GAopIgRJVYfcxJgjeRr3J8Ry3xjLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:be:d9:e6:4c:31:30:f0:13:13:33:87:a1:cd:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b76ac9f7a84ad790ad57c880bc9f862ad4c9e7
Validity
Not Before: Jun 28 14:01:21 2025 GMT
Not After : Jun 29 14:01:21 2025 GMT
Subject: CN=b8a5ff0c9f476f77ea222162a98f74ecd4cf7177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:10:4d:76:ac:db:02:48:c4:7e:90:2d:1b:27:
0d:46:42:56:36:4d:e3:35:b7:23:e7:2f:85:35:69:
ee:6c:b4:2c:1c:71:88:6f:ec:e9:8a:2d:92:2b:52:
4c:4e:10:b0:39:06:bc:94:ce:e0:fe:83:1b:c8:ca:
d4:3b:03:7c:7f:18:f9:22:0f:01:51:e4:03:36:8d:
c5:f2:df:c1:38:a2:e1:a1:6f:ea:32:31:7a:de:89:
e4:f9:3a:77:35:9a:63:d4:b0:53:41:53:cc:bd:ed:
3f:95:aa:d9:f7:8f:11:0d:3d:d8:da:a8:d8:d5:50:
fd:55:c9:ce:c9:cd:27:3c:d6:ab:e4:20:eb:3d:36:
7a:ee:b7:c5:39:af:21:05:6a:70:81:dc:87:fe:c8:
07:05:6d:63:4f:05:dd:af:7c:c6:7c:54:78:63:2f:
f4:7f:c8:5e:60:be:a0:b6:ce:fb:19:60:82:81:cc:
84:db:73:0c:28:f9:f5:d2:bc:f4:77:27:ee:24:c9:
4f:81:97:af:8f:e5:d2:85:ba:0d:5a:cf:06:67:b9:
a8:62:c4:5b:ec:cd:96:9b:c4:87:9c:20:10:60:4c:
fc:ac:1f:52:72:24:c8:e6:c6:37:af:e7:f0:72:f6:
97:bd:97:0e:4e:c4:86:82:98:11:9a:50:75:04:97:
6d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:A5:FF:0C:9F:47:6F:77:EA:22:21:62:A9:8F:74:EC:D4:CF:71:77
X509v3 Authority Key Identifier:
keyid:93:B7:6A:C9:F7:A8:4A:D7:90:AD:57:C8:80:BC:9F:86:2A:D4:C9:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7dqyfeoSteQrVfIgLyfhirUyec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/d33ce0-69a0-4ba3-b3c9-998278f4fbb2/1/k7dqyfeoSteQrVfIgLyfhirUyec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:99:e8:49:50:f9:cc:52:3a:ef:3d:c2:f4:b8:33:7d:94:84:
24:af:21:05:6d:27:73:84:7d:7e:f5:70:bf:23:9c:76:5a:87:
36:da:1c:09:6c:26:6b:0b:81:e5:89:be:4b:60:66:92:2b:bb:
e8:a4:f6:43:ae:03:be:6d:bc:6f:2e:d0:0f:1e:f8:8b:d6:50:
c1:cf:b1:3d:03:85:d4:ad:14:e9:07:2f:78:0c:55:f2:1a:c5:
ff:f8:71:69:35:da:07:c6:f6:3d:f5:0c:4e:74:51:f8:1d:de:
05:af:f8:ee:f5:f6:a5:f2:9e:af:50:04:5c:6d:0d:22:dc:3b:
f6:1c:c0:c9:0d:63:5d:95:e9:a3:9c:f9:8e:af:52:b6:92:e5:
ed:c3:8e:61:e1:b2:7e:f3:c7:22:0c:9a:43:07:78:09:d7:d5:
dd:02:94:ba:40:57:fd:15:12:6e:32:1d:0a:72:ba:9f:68:3c:
33:30:7c:8c:ed:d6:42:b0:18:84:ac:5c:35:d6:8a:75:50:cc:
b4:ae:53:5a:8c:c9:89:47:5a:aa:15:6d:50:35:01:c9:66:41:
b3:6f:cd:46:42:d8:03:f0:91:c5:dd:c8:55:3d:58:e3:f2:71:
71:ca:57:02:d7:be:76:34:65:8b:b2:53:f2:1b:ab:2b:86:61:
09:37:be:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:27:11 2025 by rpki-client