Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
File: B5602MZfOntFTKKl5fZAlOnYi9M.mft (raw, json)
Hash identifier: Lmd83dlSm9dT3ITtiw0Uch7J1lQA/gkv2SUWX9t6Atw=
Subject key identifier: 02:49:8E:73:E8:C4:DC:B1:A8:6E:7B:0A:6B:69:BF:2A:F6:FD:1C:63
Authority key identifier: 07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
Certificate issuer: /CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Certificate serial: 0197B70EBD434D98D4791A818BBC4D4B5CA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 15:01:25 +0000
Manifest this update: Sat 28 Jun 2025 15:01:25 +0000
Manifest next update: Sun 29 Jun 2025 15:01:25 +0000
Files and hashes: 1: AY8RhKUHj2NodWuR-dwkYpgBEvk.roa (hash: 8sR3EhQJ4OZ7BluQZL72WnRYRz2pw1cIu2X1WaLS0DE=)
2: B5602MZfOntFTKKl5fZAlOnYi9M.crl (hash: YfU7XkG2OJEIbEJFDXDlMmZqnT32tYZSVbKcyHoCZh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bd:43:4d:98:d4:79:1a:81:8b:bc:4d:4b:5c:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079eb4d8c65f3a7b454ca2a5e5f64094e9d88bd3
Validity
Not Before: Jun 28 15:01:25 2025 GMT
Not After : Jun 29 15:01:25 2025 GMT
Subject: CN=02498e73e8c4dcb1a86e7b0a6b69bf2af6fd1c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:30:31:fb:cd:da:d9:52:07:05:ff:19:0c:
34:ea:f1:48:5b:8f:30:e6:c2:0d:44:2a:58:27:a1:
10:76:04:ae:ba:ef:c1:b2:05:63:3f:2a:30:45:dc:
12:cf:2f:48:5f:e6:10:5b:71:53:b4:8d:29:5e:e3:
8c:d4:cd:c9:86:01:a0:6e:28:50:c7:54:30:8a:4c:
59:de:a2:da:77:6b:81:6c:b6:2b:6a:00:e9:dd:73:
c9:f4:f0:95:93:f4:aa:e3:9d:c0:d4:da:d0:65:c1:
bf:6f:27:e1:64:96:22:dc:1d:f0:60:c4:fe:24:82:
1b:2d:3a:3e:04:dc:3a:b3:2d:6b:02:9a:bd:c6:4a:
0f:19:be:2e:ff:c5:30:4a:cf:9d:03:e8:21:12:c0:
69:d3:a5:85:19:5a:c8:b4:d4:5c:40:bb:e7:74:36:
bd:89:e8:d3:47:ff:e4:19:55:87:cc:10:e7:e4:59:
9b:a1:5f:3a:a4:99:e5:88:02:40:e9:60:c2:6b:7a:
dd:63:0f:aa:c8:21:96:cc:f5:72:05:2b:16:fd:70:
ec:27:f3:4c:7a:5b:88:91:a5:8d:81:57:9b:ec:d2:
ee:5b:11:3a:48:5b:0f:be:b0:a9:76:c4:02:7e:eb:
69:db:2d:cd:ac:2f:1b:d3:0e:8c:a0:89:62:43:bc:
08:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:49:8E:73:E8:C4:DC:B1:A8:6E:7B:0A:6B:69:BF:2A:F6:FD:1C:63
X509v3 Authority Key Identifier:
keyid:07:9E:B4:D8:C6:5F:3A:7B:45:4C:A2:A5:E5:F6:40:94:E9:D8:8B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B5602MZfOntFTKKl5fZAlOnYi9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/2fc007-361d-4f47-aaf7-484d843e6de3/1/B5602MZfOntFTKKl5fZAlOnYi9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:82:1a:d5:a6:e6:a2:9e:17:12:30:15:d9:05:e2:13:ed:95:
49:ef:1a:3a:01:ae:04:b2:4c:44:a9:d6:b3:da:fe:59:5f:93:
89:eb:6d:ce:69:10:f7:6f:b9:85:38:6c:4b:5d:fc:b0:76:f2:
cd:29:c6:8d:ca:fc:ea:aa:88:f1:7b:95:c0:1f:cb:f3:74:f5:
b0:db:9d:8a:bf:be:47:1e:35:f7:8b:87:c7:bf:4a:17:63:f7:
da:d0:8f:d7:1b:c2:79:40:a1:36:cb:f9:22:9f:3c:bb:60:fd:
ca:a1:46:c7:c5:e3:fb:cc:1b:0c:d1:bd:17:c9:9b:5e:17:4c:
db:ce:6f:46:d0:0b:a1:9e:08:28:66:62:64:13:19:1a:ae:9e:
be:05:76:b1:81:42:5f:12:9f:77:02:cc:ca:bb:f7:40:9f:d5:
19:92:a5:d3:34:67:88:61:d7:77:45:98:fa:56:02:0b:cd:87:
ca:f6:9f:98:42:82:b3:4a:06:67:90:02:96:5f:80:a3:ac:cd:
70:59:23:08:04:59:3e:c7:2a:a8:51:eb:88:3e:0d:93:3f:e3:
b6:28:53:68:ad:95:e8:17:23:30:71:7e:71:da:f5:aa:dc:35:
74:41:75:60:f7:b0:76:25:a9:c2:d1:2e:c4:9d:ac:1c:cb:56:
01:65:3e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:19:32 2025 by rpki-client