Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
File: frRWWjLbPJyLiw97TBG9EVTiDek.mft (raw, json)
Hash identifier: GLWIzc9nfDpka4BEyHOXpT68/Y1wDAmxlftpa/7HbRc=
Subject key identifier: EB:27:D2:89:B0:23:46:61:75:11:78:41:6E:DF:47:6E:2B:48:55:A4
Authority key identifier: 7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
Certificate issuer: /CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Certificate serial: 0197B7EA896DF90CF0E164046C0876BB924D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 19:01:30 +0000
Manifest this update: Sat 28 Jun 2025 19:01:30 +0000
Manifest next update: Sun 29 Jun 2025 19:01:30 +0000
Files and hashes: 1: 4BcmRfIKbtyHA5W50P0xfaSluTc.roa (hash: EUIfaPrgoy0kpcCTAuIPs2vRwCWnSayvJLiSWEhojBk=)
2: frRWWjLbPJyLiw97TBG9EVTiDek.crl (hash: tQ1Il10XtRQNL1BXQbKbtS7MIGqygJBjR2FeEWqqVrs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:89:6d:f9:0c:f0:e1:64:04:6c:08:76:bb:92:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eb4565a32db3c9c8b8b0f7b4c11bd1154e20de9
Validity
Not Before: Jun 28 19:01:30 2025 GMT
Not After : Jun 29 19:01:30 2025 GMT
Subject: CN=eb27d289b0234661751178416edf476e2b4855a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:99:a2:cc:15:f5:a1:80:2e:82:98:79:a7:91:
e4:8d:42:6f:12:02:81:19:25:7f:d3:00:25:78:55:
83:fc:93:77:fd:9e:7f:ab:15:46:65:9c:2b:b2:fc:
d5:cf:f9:84:33:b6:da:73:7e:6c:4f:66:c0:76:35:
df:dd:8d:a8:07:79:7b:c1:c3:84:ae:2a:bd:b9:19:
92:ac:b4:b9:4c:9e:39:b4:1c:a3:45:88:88:76:84:
a4:cc:3d:0c:16:86:7f:8c:82:f3:19:0f:d7:5d:75:
47:f6:4d:ac:70:82:e4:54:79:d5:51:2a:c5:50:c1:
8b:a9:0e:66:2f:ae:e9:48:e0:3b:c1:79:8a:5a:a9:
8d:47:49:ad:e3:d0:21:36:a7:2b:f0:54:08:4b:5c:
7e:09:e7:62:ba:3d:4e:01:b8:6d:62:5c:c7:1d:5a:
30:57:b5:fb:5f:8c:24:bc:a7:79:06:c7:c2:6e:ec:
d9:94:4b:d8:a4:65:2e:4b:09:bc:8c:71:b6:24:d1:
21:49:90:1a:80:7d:6b:8a:f2:04:a3:58:de:dd:45:
c8:ea:33:15:d3:cb:f4:fb:df:05:a1:48:84:0b:44:
ec:c9:40:19:a6:ab:95:47:f6:ff:44:1c:fb:71:31:
65:20:6d:aa:09:7b:fd:07:5a:5a:d3:e3:b9:38:eb:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:27:D2:89:B0:23:46:61:75:11:78:41:6E:DF:47:6E:2B:48:55:A4
X509v3 Authority Key Identifier:
keyid:7E:B4:56:5A:32:DB:3C:9C:8B:8B:0F:7B:4C:11:BD:11:54:E2:0D:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/frRWWjLbPJyLiw97TBG9EVTiDek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/5b535e-b143-4b4a-90e8-0e7949935d81/1/frRWWjLbPJyLiw97TBG9EVTiDek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:76:8a:74:d1:ef:76:bb:03:ed:49:23:20:8b:bc:b0:75:80:
f6:e9:b3:08:f6:ea:c5:82:d5:49:8c:b6:c7:cc:44:ec:44:98:
03:0f:b8:96:35:d8:93:50:2d:5c:03:a4:90:ac:e5:8f:cb:fe:
37:bd:0c:81:96:05:56:f0:43:da:27:25:5b:d1:bc:80:7a:72:
a3:42:83:83:b7:bf:2b:1e:ef:84:f8:18:f8:74:d1:bf:4f:df:
d2:06:68:15:31:ed:9b:72:90:ef:a3:35:8d:5b:4a:7c:ed:7d:
f6:26:d9:39:75:4c:ea:d3:09:ea:f4:74:69:8b:66:ce:3d:96:
2a:dd:cd:78:31:d5:12:ed:7c:66:5b:75:34:d9:e6:29:95:4e:
5a:1b:bf:1c:76:87:fa:3b:a3:3b:f9:3a:b2:0c:5e:29:d0:12:
7b:64:10:d3:12:92:76:f4:63:b8:cb:d0:9b:52:1e:b6:72:9c:
72:a6:77:f5:ac:c8:43:7d:de:d7:b6:da:53:4e:f6:9d:1c:6c:
d8:9b:d5:0f:2f:be:35:bb:f7:57:83:64:44:d6:59:6b:3b:e2:
84:6a:25:a5:41:53:de:27:c4:cc:9b:02:d4:30:b9:df:db:5d:
ef:a9:5f:e6:2a:88:e7:34:dc:d6:34:f4:9f:c6:62:f3:4c:c9:
c4:fb:60:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:14 2025 by rpki-client