Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
File: rIpp7LeHzOmJLcZUgEY_sIi2E98.mft (raw, json)
Hash identifier: uHtYj7RbYnVhakSL+J/KjVmx2DidZ/HpByp+nqac5co=
Subject key identifier: 61:C9:3C:D4:11:E1:56:A0:FD:1E:60:F3:6C:61:FE:66:D1:FE:9C:A0
Authority key identifier: AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
Certificate issuer: /CN=ac8a69ecb787cce9892dc65480463fb088b613df
Certificate serial: 0197B6D76D629E7FDA7C6554E978CED40F87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 14:01:00 +0000
Manifest this update: Sat 28 Jun 2025 14:01:00 +0000
Manifest next update: Sun 29 Jun 2025 14:01:00 +0000
Files and hashes: 1: 697cAJc5ww3rq8-l1VuLwBpxIdc.roa (hash: btaRkUjrugna/WWsgPD4k728P+M+Z1FNlrq9vxtZCME=)
2: DaeyFZIVOpaKJnrrdp8I8XkKfsw.roa (hash: K2abCfRZZHcX+YntqkfA1f/D7lChaJuQZeWDdJ7QE9s=)
3: rIpp7LeHzOmJLcZUgEY_sIi2E98.crl (hash: /FmSA8YC3RRFPqv7CBr/6CNFA95s9dkb/+zSYvhHe9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:6d:62:9e:7f:da:7c:65:54:e9:78:ce:d4:0f:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac8a69ecb787cce9892dc65480463fb088b613df
Validity
Not Before: Jun 28 14:01:00 2025 GMT
Not After : Jun 29 14:01:00 2025 GMT
Subject: CN=61c93cd411e156a0fd1e60f36c61fe66d1fe9ca0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:fe:8a:b3:b1:55:9a:50:12:83:41:77:dd:
80:78:49:02:5d:44:50:ae:b5:f0:ef:e3:c8:c2:34:
75:a7:21:c6:77:6d:ca:d3:80:e3:70:a8:fe:5b:e7:
10:81:2e:e6:78:55:7a:03:51:62:6a:67:ff:5a:92:
84:60:73:bc:25:4c:d5:de:14:74:ea:8d:4d:9b:fe:
2c:01:6c:1b:82:dc:36:b2:28:5a:fe:45:d0:60:cd:
4d:e4:b5:4d:cf:b6:28:d7:7b:ec:1e:48:55:7a:2f:
a1:73:8d:4d:b3:df:d7:d0:51:bc:6b:49:21:55:9f:
94:06:ab:6b:0b:c1:2a:02:c2:fe:77:29:77:67:79:
08:13:4a:4e:98:06:11:7e:02:6b:8d:c5:d1:f1:73:
9b:79:a4:f0:90:d2:ae:0e:b4:69:7e:88:c0:63:5f:
45:eb:da:f5:70:51:15:89:93:5f:8a:9c:01:b0:a1:
be:4a:50:b9:bb:13:20:66:b9:6d:98:ca:f9:55:25:
35:0b:d8:4a:2a:aa:01:69:6a:90:78:f8:f2:8a:a5:
2d:04:a8:50:55:a6:c4:aa:b4:e8:cb:1d:24:42:bc:
fb:2c:00:bc:1c:83:0b:0d:bb:fd:33:6b:97:4d:e3:
e7:30:48:4b:06:6b:8a:7d:dd:f2:08:a7:28:79:f0:
d4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C9:3C:D4:11:E1:56:A0:FD:1E:60:F3:6C:61:FE:66:D1:FE:9C:A0
X509v3 Authority Key Identifier:
keyid:AC:8A:69:EC:B7:87:CC:E9:89:2D:C6:54:80:46:3F:B0:88:B6:13:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rIpp7LeHzOmJLcZUgEY_sIi2E98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/87dadf-29d9-49d3-8ac6-4cc40ffd796d/1/rIpp7LeHzOmJLcZUgEY_sIi2E98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:ff:32:e9:78:69:06:13:6e:85:4c:2a:13:60:ac:52:12:cc:
69:8a:58:1b:10:2b:c9:34:e8:6c:04:bb:fd:b5:a0:c5:de:b7:
f6:32:a7:d9:6f:e2:2c:b7:1f:33:e9:de:48:38:d2:05:3a:3e:
93:88:3a:bc:75:c0:09:6f:d6:5b:3b:2a:e7:5d:d4:ad:6d:11:
02:c5:9b:c0:fa:39:e5:ec:ac:68:c1:3f:c5:68:b9:92:56:96:
37:1f:8f:66:1e:76:b1:cb:cd:da:fe:d7:97:64:22:83:4e:b4:
93:4b:26:3c:4f:2b:e9:1c:a1:a2:9f:56:83:74:25:61:73:9d:
06:31:82:6c:70:67:d2:27:47:ad:45:d8:ea:94:46:2a:5d:ea:
93:d4:5c:e6:c8:f3:36:10:3c:0c:22:ed:09:bb:76:e6:c1:5e:
a0:7a:e5:2b:a9:70:7e:4c:6a:30:12:58:a0:97:4a:85:bb:fa:
c8:1a:25:53:00:69:bc:14:fe:b2:c7:1e:35:14:ca:02:3f:cd:
7a:2a:68:2d:ed:64:73:df:2a:fc:63:dd:c4:80:1b:c7:e6:79:
9a:79:4b:9b:cd:55:9e:bd:79:ee:7c:12:e1:93:bd:56:0c:be:
5a:f6:da:6d:a0:7f:ad:48:56:af:7a:3c:81:96:13:b4:f6:89:
39:ca:a6:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:51 2025 by rpki-client