Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
File: h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft (raw, json)
Hash identifier: Oe70FJg8FietbgcfK5+1pLnVBLcnftWqLEopoRYVk28=
Subject key identifier: D1:8A:5D:7D:E0:9D:79:54:8E:C6:E3:82:63:9A:10:01:52:3B:F1:66
Authority key identifier: 87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
Certificate issuer: /CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Certificate serial: 0197B70F4CA68F5AEEF54EC63AA684DD8994
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:02:02 +0000
Manifest this update: Sat 28 Jun 2025 15:02:02 +0000
Manifest next update: Sun 29 Jun 2025 15:02:02 +0000
Files and hashes: 1: h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl (hash: dJiUd5Rsw3x1BQGjUFXUFcZrQ7LZ5pOEFAiWzAM2JjM=)
2: rWmXzuPVAuMc61ALuQe-2WhbT9s.roa (hash: OUZXq6sIvQV4mWZYFrhWWMjn+vbRxUs/Ip4xXPXay4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:4c:a6:8f:5a:ee:f5:4e:c6:3a:a6:84:dd:89:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878eca3bccd4e5c2efb3608ee83a57f9ae821be6
Validity
Not Before: Jun 28 15:02:02 2025 GMT
Not After : Jun 29 15:02:02 2025 GMT
Subject: CN=d18a5d7de09d79548ec6e382639a1001523bf166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e6:1d:ee:54:17:6d:26:62:ad:f8:e3:56:90:
45:89:32:20:30:47:c6:54:e2:b4:c2:ef:43:b4:c9:
f5:07:8c:09:92:18:88:52:63:4c:dd:8a:47:67:6b:
02:3c:d4:a6:04:a9:ae:d8:5c:1c:74:36:9b:dd:d4:
44:22:86:04:60:7e:d1:f0:7b:01:06:a3:0a:04:d0:
9f:ea:95:bb:c3:d0:7a:4e:c5:d2:6e:3f:93:3f:d7:
9c:2c:49:6a:a4:1b:49:04:09:27:1b:aa:f7:8f:49:
98:6b:21:47:3d:c4:8e:5b:7c:6d:32:41:c5:7e:5c:
eb:c4:7f:f9:7e:82:1b:1a:8c:c0:ae:b7:4e:e9:17:
73:5e:5e:b8:f3:db:fc:0e:dc:a2:75:6e:2f:86:67:
a8:b9:20:67:64:b9:4f:3e:2c:e2:51:53:9d:66:fc:
03:f7:4a:30:91:a7:a2:96:a2:38:ac:87:91:35:da:
d7:a4:43:a9:2e:60:a5:61:9a:d5:1f:b7:f2:65:fe:
b3:c1:40:02:53:f4:e1:e3:81:2d:73:d3:ca:f0:de:
46:0c:c5:3a:9b:40:22:e6:45:e6:68:7d:c9:51:ae:
2c:54:25:6e:da:16:67:ba:ea:39:87:21:f3:37:1e:
a4:6c:f6:40:f9:d8:d8:6e:09:d9:68:43:21:6d:00:
52:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:8A:5D:7D:E0:9D:79:54:8E:C6:E3:82:63:9A:10:01:52:3B:F1:66
X509v3 Authority Key Identifier:
keyid:87:8E:CA:3B:CC:D4:E5:C2:EF:B3:60:8E:E8:3A:57:F9:AE:82:1B:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h47KO8zU5cLvs2CO6DpX-a6CG-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/ab2b10-5e87-4624-9776-59a0c5ff6505/1/h47KO8zU5cLvs2CO6DpX-a6CG-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:1b:db:e8:3c:26:5a:7a:70:91:80:06:af:bb:9e:3e:3c:ef:
03:6e:4d:38:df:4d:4e:fa:7c:83:14:aa:05:ce:ae:8f:30:96:
c9:19:63:3e:21:f7:e5:42:70:ae:ae:ba:5e:3f:03:94:16:d7:
f7:0e:93:f7:7a:9a:6a:6a:5e:68:67:d4:ab:75:38:78:4a:ae:
49:c1:0d:61:ed:a1:ff:bc:49:17:ae:e8:d5:12:57:b6:ad:70:
86:e8:f4:83:9d:83:ee:6f:e1:71:09:f8:82:be:4c:3f:87:a7:
ef:c3:11:68:1c:b9:bb:87:74:11:92:88:09:65:b6:f5:86:66:
0d:f6:ec:82:d2:00:b7:ce:2c:fc:28:3d:85:dd:ce:53:95:ea:
d6:63:aa:ad:f2:50:1f:bf:02:ee:73:04:60:a5:f8:b7:73:e5:
bf:a5:f5:bb:d9:b4:e1:34:9e:ab:e1:e5:d5:90:f7:5c:ab:af:
66:02:de:12:06:87:7c:2c:2d:42:a0:f9:42:74:f1:db:be:6b:
75:8f:97:79:89:6d:b0:2b:fb:42:9c:1b:71:5f:f0:66:28:b2:
12:6c:34:c0:8d:02:73:24:0a:04:6a:49:71:84:60:3b:07:ad:
bb:fe:5e:2e:3b:63:e7:bc:ac:09:e3:31:53:ed:1c:98:61:d4:
05:ce:6d:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:25 2025 by rpki-client