Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
File: V7J1ubzEXc6LPvAXLJZzeACUek4.mft (raw, json)
Hash identifier: kToWgNBRqaUF95dasbxsDqbwSu6viDumRpE38R1dXHQ=
Subject key identifier: 0E:7D:CB:B6:00:61:06:80:EE:FA:20:50:1E:07:1D:41:BD:82:35:C9
Authority key identifier: 57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
Certificate issuer: /CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Certificate serial: 0197B5C5272832EBDB95A40C07B043C6813A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 09:01:26 +0000
Manifest this update: Sat 28 Jun 2025 09:01:26 +0000
Manifest next update: Sun 29 Jun 2025 09:01:26 +0000
Files and hashes: 1: ABuElM6_NHXhhyjrbNO7-7-4-tw.roa (hash: RB6lZGDNmRmLvQ7wPbU3Ifx1OhDqRcQW8eOAw1dgZcE=)
2: V7J1ubzEXc6LPvAXLJZzeACUek4.crl (hash: NLO33ZdZUD9sUsuoczOhlNuRQgJ/v2NMmeM5o3KBOUo=)
3: sIxOdNT6bFxHKmNN0CZFI4DmR-8.roa (hash: 5J0fAmw/YI6nG5pD9p8YdD7k7oyOLgeH2PS70uMH6I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c5:27:28:32:eb:db:95:a4:0c:07:b0:43:c6:81:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b275b9bcc45dce8b3ef0172c96737800947a4e
Validity
Not Before: Jun 28 09:01:26 2025 GMT
Not After : Jun 29 09:01:26 2025 GMT
Subject: CN=0e7dcbb600610680eefa20501e071d41bd8235c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:49:9c:4f:a3:6a:15:11:dd:14:3e:7e:25:cf:
1d:7c:c3:0f:f2:a3:ca:c1:c9:75:fc:0d:4c:a3:27:
4a:96:19:f1:bc:d1:ce:63:bc:89:d9:e4:78:ac:08:
b9:8d:d0:51:70:53:29:a0:7b:56:24:7a:bb:20:91:
0c:94:f3:9f:af:30:ca:83:87:9b:f8:21:01:59:54:
d7:6b:c1:76:8e:23:53:83:97:d1:cc:1e:87:37:be:
39:79:2a:b2:b6:3d:1a:70:b6:06:c3:45:eb:c8:18:
44:35:33:3a:3d:00:75:4f:d8:ae:ae:dd:83:af:33:
7c:8a:37:8a:20:48:ce:26:03:36:19:96:e6:a8:16:
0a:77:6a:35:af:70:bd:f5:57:4a:41:05:b7:69:49:
a7:12:d8:2a:12:11:c1:57:41:0c:fe:f1:59:bd:bd:
ea:87:3d:f9:25:64:41:84:e0:fb:0f:d2:f8:ad:ad:
18:3c:f4:b5:6c:cb:ab:10:77:b8:00:dd:85:73:51:
bb:c8:a7:ed:09:09:8e:fe:f3:c1:73:e6:a7:c4:33:
03:86:8f:c7:4a:69:5f:40:70:d1:27:6d:d6:ef:b8:
b0:bd:d1:9d:a0:bd:40:07:0a:f5:de:02:45:1a:7c:
44:92:fd:80:1d:95:25:99:97:b5:f3:df:29:6a:d3:
75:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:7D:CB:B6:00:61:06:80:EE:FA:20:50:1E:07:1D:41:BD:82:35:C9
X509v3 Authority Key Identifier:
keyid:57:B2:75:B9:BC:C4:5D:CE:8B:3E:F0:17:2C:96:73:78:00:94:7A:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7J1ubzEXc6LPvAXLJZzeACUek4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/a35052-7336-425f-a7ba-87f68b71e44d/1/V7J1ubzEXc6LPvAXLJZzeACUek4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:69:69:03:41:12:74:c6:7a:67:cb:5b:54:19:68:dc:8a:df:
47:b7:af:56:b3:ba:a9:aa:90:5b:e7:42:6d:c6:3f:0c:c9:58:
ab:e1:78:e6:81:19:68:80:1d:c3:4f:3d:bb:6e:c5:02:68:f4:
c5:e3:37:37:7f:63:54:cc:5e:3c:7a:e3:e4:ff:77:bc:fa:06:
48:b2:7a:b7:bf:ed:5e:4a:ae:1d:c8:49:f5:04:e8:33:c8:bd:
b3:be:fa:8b:10:06:46:4a:0a:59:8d:f6:e9:39:89:41:cd:c0:
60:f0:ae:ec:62:87:f4:03:52:f7:30:7c:41:3e:28:d1:fa:76:
23:ca:3e:f0:35:8b:8e:d0:5e:96:a7:65:07:43:b8:9c:b0:70:
d1:8d:29:81:17:6c:c8:d0:7b:d1:1f:55:cc:5a:93:33:08:27:
6f:62:23:be:a0:17:d4:77:77:99:91:ed:c2:43:3f:7d:12:9c:
90:37:f9:d1:27:fd:f0:6c:fb:bd:5a:6c:d8:cd:38:ef:c9:af:
a0:5c:87:45:5f:08:a7:41:be:ca:a1:50:29:b7:18:ce:dc:a2:
28:85:1d:1c:68:a9:63:3f:15:80:1a:54:2d:b9:e3:65:e7:26:
76:22:1c:b3:4a:c1:94:47:dc:07:5c:1c:87:97:57:93:41:a2:
82:f6:d0:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:27 2025 by rpki-client