Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
File: 84LLE93hJljNrBjKyukfu_XFgJA.mft (raw, json)
Hash identifier: INVXrovW9tNxgolWwCtL2NMlIirk2dmdptsROqldhgg=
Subject key identifier: 9C:2E:05:C6:6B:E9:86:11:07:38:09:0F:64:13:9C:FF:DD:B9:18:90
Authority key identifier: F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
Certificate issuer: /CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Certificate serial: 0197B745859C51BB6401A8DC33A0A9B5C247
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:01:15 +0000
Manifest this update: Sat 28 Jun 2025 16:01:15 +0000
Manifest next update: Sun 29 Jun 2025 16:01:15 +0000
Files and hashes: 1: 84LLE93hJljNrBjKyukfu_XFgJA.crl (hash: yLC8z/2DcdR8Y5zKAp+qSd4oPXNJTXVX7UjG2uWnedQ=)
2: 9p3RysO-CtOjkTkrDq-1QR8iEt8.roa (hash: 7EEdwfYjIsLQLyh8n9mT3oh8OfyTFAKQe+oB+lllHm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:85:9c:51:bb:64:01:a8:dc:33:a0:a9:b5:c2:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f382cb13dde12658cdac18cacae91fbbf5c58090
Validity
Not Before: Jun 28 16:01:15 2025 GMT
Not After : Jun 29 16:01:15 2025 GMT
Subject: CN=9c2e05c66be986110738090f64139cffddb91890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:b8:15:be:60:03:14:45:24:8a:c5:60:85:89:
ab:6a:50:0e:b1:53:7a:9f:cd:3a:cc:75:fc:c2:6c:
45:41:d6:bf:e4:e6:9c:46:bd:37:05:63:de:67:e0:
f4:f1:bb:24:18:8d:0a:0d:0e:e2:18:cc:dc:cf:23:
d0:8d:ec:cb:4c:d4:bd:a8:30:bf:c0:75:b4:99:b5:
57:1a:f1:be:90:0c:31:29:1c:de:27:85:87:ec:5d:
f9:c1:33:b1:e8:95:6f:1e:47:69:64:98:02:89:63:
a7:75:84:62:46:ac:c9:42:05:b9:f4:8b:74:61:56:
1d:70:fc:f6:55:44:19:37:7d:5c:54:d5:11:de:fc:
d4:cd:68:0f:85:54:d9:5e:50:ce:44:04:62:45:c8:
d8:9a:0d:c8:b1:63:24:6c:1c:98:a9:33:7c:f9:31:
d2:4d:20:92:45:5b:ba:df:49:bc:ac:63:16:cf:b2:
f9:94:08:a5:dc:13:99:95:4e:19:3b:b0:18:42:ca:
b8:cc:64:7e:ed:a4:56:a7:de:ea:3a:52:2c:b7:00:
21:04:bc:6f:cd:c0:b1:6b:ef:02:7a:0c:d8:5a:57:
e0:ac:4d:a5:3b:46:8e:41:f7:f5:04:39:34:a9:43:
f4:6d:40:4e:37:f3:c6:53:60:52:d7:27:f8:2f:d4:
ef:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:2E:05:C6:6B:E9:86:11:07:38:09:0F:64:13:9C:FF:DD:B9:18:90
X509v3 Authority Key Identifier:
keyid:F3:82:CB:13:DD:E1:26:58:CD:AC:18:CA:CA:E9:1F:BB:F5:C5:80:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84LLE93hJljNrBjKyukfu_XFgJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e7da9a-932a-467b-b2d2-97042891eb99/1/84LLE93hJljNrBjKyukfu_XFgJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:33:20:6f:ff:28:02:dc:20:25:9d:63:13:32:1b:4a:38:c3:
cd:f0:81:f8:fa:a4:27:0b:ab:b4:ff:2b:2f:37:f8:bd:0f:a0:
84:32:fd:50:ab:f0:5b:81:b0:03:86:57:45:1f:d0:1e:c5:84:
5c:4c:5a:41:e9:e6:32:6d:b3:b4:56:2f:9a:2f:d1:c1:3f:29:
9e:73:32:40:68:cb:ce:0e:8e:4c:75:e9:b3:d0:72:09:05:db:
50:22:44:d2:ec:15:42:2f:c1:cf:2a:0c:de:97:a7:4a:15:46:
c7:e5:26:73:85:5d:09:d3:fe:66:9f:20:7d:0f:c0:50:d9:e2:
e0:68:71:55:88:2f:3a:7a:6f:1f:34:1f:d8:26:4e:b6:a2:5e:
e1:32:90:86:39:62:63:d5:c6:00:f8:54:67:81:58:af:ae:36:
56:9b:85:87:aa:1f:11:cb:8b:2f:28:39:f5:58:11:44:d9:64:
ee:7b:6c:a6:e3:ed:68:f0:ba:a4:a5:79:78:d4:ae:b1:24:45:
1a:fd:d1:bb:0d:39:ea:30:e2:a7:e1:4a:27:49:3a:99:c2:04:
58:ce:8e:ec:a4:c2:b0:11:c3:46:8e:ec:00:9c:d6:83:34:06:
79:91:f1:fb:41:7b:c3:b6:27:f7:51:05:51:d0:b4:e9:dc:48:
11:80:1e:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:21 2025 by rpki-client