Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
File: 8d15W-NuS1swnryOBOpzlBNccUw.mft (raw, json)
Hash identifier: vL6cnYY7h0FW80wGLbiKxPUz2m9+9wUqjLiER4Y0dFk=
Subject key identifier: E3:07:22:2A:7F:3E:36:FE:B1:57:52:F2:C5:A1:A4:17:5F:48:B3:A5
Authority key identifier: F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
Certificate issuer: /CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Certificate serial: 0197C75D1A864C11B515CE5D2CB6807F93D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
Manifest number: 15BF
Signing time: Tue 01 Jul 2025 19:00:56 +0000
Manifest this update: Tue 01 Jul 2025 19:00:56 +0000
Manifest next update: Wed 02 Jul 2025 19:00:56 +0000
Files and hashes: 1: 4ghkRfOquB-e7Fok48kTrT0aVAU.roa (hash: 6SkfRPpDusU3pdgmnRmAtb8LYqLwuaj5aFdgg7X05Uw=)
2: 8d15W-NuS1swnryOBOpzlBNccUw.crl (hash: rDigtUaVPhjyFBIfLrXLBcONX5iXZ0FLNSijN3z+Cuw=)
3: k86L2r6PyseZfyszmOgSsSpazQk.roa (hash: IsdULHTb1wucLEEG+EnermzxJ4zmYkO1E7qf8JXpI3M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:5d:1a:86:4c:11:b5:15:ce:5d:2c:b6:80:7f:93:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1dd795be36e4b5b309ebc8e04ea7394135c714c
Validity
Not Before: Jul 1 19:00:56 2025 GMT
Not After : Jul 2 19:00:56 2025 GMT
Subject: CN=e307222a7f3e36feb15752f2c5a1a4175f48b3a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:8d:3c:2b:72:9e:57:de:97:ca:23:ed:bf:6c:
8f:db:df:7a:93:6f:7c:1e:55:4b:68:b2:0b:f1:44:
d3:b0:ca:60:b9:12:5b:c7:6c:ae:31:74:3f:75:5d:
c7:82:03:37:43:98:82:4d:41:83:f0:fc:d4:71:62:
a2:35:7b:38:00:a4:2c:f4:a0:23:47:e1:7c:b1:52:
c2:a6:a4:d4:af:68:2f:93:25:f7:a8:71:b6:85:80:
b1:fb:ca:35:d2:41:c9:e5:cd:25:00:89:77:c8:80:
43:94:bf:36:dc:2d:f6:7a:38:b8:86:41:5d:a2:46:
68:da:ec:2f:75:c0:6c:15:54:16:2c:6c:62:0d:f8:
02:58:3d:b0:11:4d:69:b1:57:4e:91:91:20:17:b9:
8b:b7:7b:e4:bd:58:a8:a4:f6:7b:5e:49:85:df:37:
d9:91:74:d7:27:a3:e7:92:2f:a6:9a:86:a8:36:a1:
41:40:8e:fb:91:35:5a:a4:e7:1f:53:66:21:40:2c:
e4:1b:e0:6b:51:d7:3b:ba:7b:bd:ec:c1:5a:6b:6b:
35:fd:7b:3e:1e:37:90:39:d6:f5:53:48:1c:f7:c6:
ff:29:82:81:9c:91:c1:4b:41:33:b1:e7:a8:bd:11:
96:9b:80:fd:ee:f4:8c:80:ff:b0:88:96:10:01:a8:
8a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:07:22:2A:7F:3E:36:FE:B1:57:52:F2:C5:A1:A4:17:5F:48:B3:A5
X509v3 Authority Key Identifier:
keyid:F1:DD:79:5B:E3:6E:4B:5B:30:9E:BC:8E:04:EA:73:94:13:5C:71:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d15W-NuS1swnryOBOpzlBNccUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/8d15W-NuS1swnryOBOpzlBNccUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:7d:cf:42:75:82:ac:80:21:ed:87:f6:f5:1b:08:83:82:3a:
fa:cb:32:b6:93:85:00:a1:eb:21:63:20:68:b8:38:d9:08:3d:
07:f5:a4:67:9d:61:08:2f:41:b3:8e:ae:d2:0a:57:38:b2:10:
4d:c1:c5:db:0f:53:8e:cb:90:c4:f2:89:8a:b5:8a:3b:3b:bb:
5a:d1:1c:3b:7f:b4:b0:ce:ea:e4:ca:0e:d3:fd:a8:5c:1e:84:
21:2b:e4:c8:57:8e:9a:61:b0:b5:ce:ab:89:b3:06:7f:4c:52:
10:d9:07:72:d3:89:97:39:8b:ab:41:4b:d8:91:c6:61:0d:ed:
b0:41:06:93:b2:3e:d6:f7:8a:2b:9f:33:c5:31:92:0d:b0:15:
b4:dd:7f:4a:0e:e7:5e:d1:fb:22:ed:46:9d:bf:8e:e4:0c:61:
94:01:19:ad:16:e0:28:ac:ef:f7:31:f7:37:bd:74:12:b0:d5:
ad:42:96:e0:1c:b4:0d:cb:b2:bc:f0:98:03:d9:d2:12:f1:e5:
bd:27:6c:58:9e:f8:f1:cf:5c:d1:71:b2:68:b4:ce:49:a9:73:
e1:07:c5:05:64:cc:30:0b:f3:55:91:69:ac:38:b7:4f:49:e9:
c8:09:8b:c1:13:d8:74:36:88:12:ce:f9:90:d5:09:fc:b3:5e:
57:d2:ea:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:52:52 2025 by rpki-client