Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
File: _z7T1NR7joJfv9B5SC96DCHcke8.mft (raw, json)
Hash identifier: xslgLh4UxmAjZRhb0OGYI0L+hoSBqhIL0OhXBPKkKO4=
Subject key identifier: 2D:CE:5A:DF:F1:28:90:20:63:DE:8B:00:66:03:95:DC:A1:4A:90:8D
Authority key identifier: FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
Certificate issuer: /CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Certificate serial: 0197B6A1FEE7FB0C5662D74122458FC1B501
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:02:39 +0000
Manifest this update: Sat 28 Jun 2025 13:02:39 +0000
Manifest next update: Sun 29 Jun 2025 13:02:39 +0000
Files and hashes: 1: _z7T1NR7joJfv9B5SC96DCHcke8.crl (hash: i+NevkRJ1jrflzKHm4UwBPDSm3pAeDO5w2+w++/1GD0=)
2: l-W1P1FXUZq5Rom6HiLNeHjPeZk.roa (hash: JZU81XbPivNOV4ANlQqRFiS9x8fNQ6LSZbTjlzXEnFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fe:e7:fb:0c:56:62:d7:41:22:45:8f:c1:b5:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3ed3d4d47b8e825fbfd079482f7a0c21dc91ef
Validity
Not Before: Jun 28 13:02:39 2025 GMT
Not After : Jun 29 13:02:39 2025 GMT
Subject: CN=2dce5adff128902063de8b00660395dca14a908d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e7:da:6d:ae:bc:28:94:a5:5d:3d:76:9b:22:
11:7f:43:d8:b6:27:4a:51:60:6a:f7:6e:59:09:c8:
13:44:d4:08:28:79:f1:85:5e:5a:89:5a:56:58:70:
8c:5e:e8:72:7d:2e:4e:39:ef:7e:b0:6f:b0:a8:a2:
f0:53:c4:5f:ed:a1:37:22:56:92:83:ff:89:65:5d:
cf:22:e9:2b:55:87:3c:93:6b:27:08:1e:c4:11:8c:
bc:fc:9a:36:bf:17:db:0c:ad:83:41:22:9f:5f:3a:
ed:78:0f:35:b1:4b:cb:2c:ea:cd:3d:b4:67:a2:9c:
66:51:18:c7:b7:d8:fb:0e:3c:6d:be:68:10:f2:6d:
a0:06:00:e9:e1:fd:b2:fa:0f:be:2e:8a:b1:c5:74:
10:73:76:ac:1c:d8:36:a2:22:ca:5b:3a:db:3b:f1:
1a:2a:4a:e9:64:76:ac:c4:18:71:d2:d4:a5:68:0d:
48:29:94:b2:25:31:d5:e1:2f:cd:88:7a:0b:fc:ff:
05:1b:5a:ac:76:84:5c:e8:66:1b:0f:c4:ee:da:09:
71:3e:84:45:f1:d3:01:69:cd:8c:ae:dd:93:32:07:
fb:c2:c0:af:0a:4f:88:f9:1b:36:18:13:11:61:63:
c9:9c:62:2a:a6:f1:75:cb:f3:78:b3:86:60:25:bf:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:CE:5A:DF:F1:28:90:20:63:DE:8B:00:66:03:95:DC:A1:4A:90:8D
X509v3 Authority Key Identifier:
keyid:FF:3E:D3:D4:D4:7B:8E:82:5F:BF:D0:79:48:2F:7A:0C:21:DC:91:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z7T1NR7joJfv9B5SC96DCHcke8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/61ec7d-8df6-4ffe-b637-5b09a6743375/1/_z7T1NR7joJfv9B5SC96DCHcke8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:30:b7:d2:ec:7e:98:ee:ca:09:2b:d8:16:8f:26:cb:a7:17:
41:44:a6:0d:f2:d3:96:fe:60:91:ab:80:82:b6:c9:90:dc:49:
18:f0:b6:a6:62:93:56:fd:87:d2:fb:73:e7:0c:30:1f:4f:54:
97:8c:ef:15:89:3f:b0:79:b1:08:ae:a5:90:1f:85:48:49:76:
7a:f6:9d:cf:8d:c8:7b:d6:19:e6:3f:bb:59:7d:02:a0:b1:36:
24:6e:c6:44:cf:f5:7f:6a:85:8c:6c:50:ac:27:0d:3e:5d:e3:
e3:93:4d:42:ee:4d:16:b6:17:ca:15:89:60:fa:07:27:66:0c:
19:d1:df:52:5b:d7:ce:fb:2d:d3:06:cd:ce:d6:4a:99:7b:89:
94:1d:2a:9d:75:50:aa:ff:98:e6:a4:9c:c8:d4:66:b6:cd:d4:
5f:02:e5:41:1e:51:96:7e:a7:23:0d:c5:66:e7:8d:09:55:70:
02:81:c8:84:9d:54:05:06:2f:e2:a8:1d:bd:1d:fc:8b:e0:77:
58:af:06:b8:05:66:7f:00:4c:52:47:f2:e8:92:7e:9a:7e:ff:
16:5c:ca:04:99:2f:cd:e9:95:4c:39:dd:f7:ec:76:51:63:09:
e1:c1:bb:34:68:90:59:25:d2:71:76:e5:cb:92:ef:9a:b8:8c:
e2:81:86:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:34 2025 by rpki-client