Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
File: 24gOLcNLroD0K7HjhFf-GXqH1LM.mft (raw, json)
Hash identifier: Kh7sexm8LVirKxVLiSAsG4oylY1CN3uY4bVlIwo6SuM=
Subject key identifier: BC:00:71:FA:BD:50:74:E6:1E:22:9E:26:82:7A:43:4A:5A:A6:1F:0F
Authority key identifier: DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
Certificate issuer: /CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Certificate serial: 0197BA7DBB7B7D70DC9FD3E5EEAA2A727DBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
Manifest number: 14E7
Signing time: Sun 29 Jun 2025 07:01:31 +0000
Manifest this update: Sun 29 Jun 2025 07:01:31 +0000
Manifest next update: Mon 30 Jun 2025 07:01:31 +0000
Files and hashes: 1: 24gOLcNLroD0K7HjhFf-GXqH1LM.crl (hash: wp4zaHsO/D+P2ayBZpB+XTgwoPLpTqKw7WIFHQU4J0U=)
2: 4PwJxAwKax5Reljdgs0YL3qX31Q.roa (hash: UYp5AvhZKwwfeYa3iRTnePJRJNovfCx7buPjdCyUR7I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:bb:7b:7d:70:dc:9f:d3:e5:ee:aa:2a:72:7d:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db880e2dc34bae80f42bb1e38457fe197a87d4b3
Validity
Not Before: Jun 29 07:01:31 2025 GMT
Not After : Jun 30 07:01:31 2025 GMT
Subject: CN=bc0071fabd5074e61e229e26827a434a5aa61f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5e:fe:34:30:e9:30:2b:af:ff:33:b0:ec:69:
85:e8:59:4e:ea:83:8a:55:0a:28:ac:45:96:2e:48:
96:17:9e:9b:eb:3a:51:74:29:96:55:6e:e1:71:90:
92:bc:cb:19:90:63:7a:5b:25:78:00:ba:a5:92:4f:
4b:00:bf:91:dd:be:c9:c1:d6:a5:a3:67:98:02:27:
0f:57:eb:55:6e:a9:6b:c0:eb:4b:c3:bf:27:8e:61:
e7:d4:e3:4e:ae:20:03:50:ea:4e:36:91:10:c1:26:
65:f4:99:21:6c:95:f8:05:86:47:ed:fb:1f:d9:3e:
2e:13:4a:aa:fc:21:6a:42:8a:e4:f7:aa:c5:d0:28:
d2:8c:5b:8a:1d:ab:bd:50:55:48:73:75:17:66:fa:
2b:15:0c:7e:bf:60:4e:36:12:0b:82:55:97:df:33:
7b:fe:9b:6d:85:2a:88:71:cd:0c:cd:c7:0d:9e:5f:
fc:0f:9b:44:92:24:d5:b2:e0:99:35:18:cd:bb:1d:
3b:df:ec:42:b9:cd:07:29:db:9d:2b:b8:b0:1b:df:
95:4d:e0:67:89:19:3d:5d:85:9b:c9:fd:d8:12:6b:
bd:2f:9c:da:17:87:05:c8:dd:c5:de:8e:fd:1a:fb:
e9:a1:ae:64:17:df:45:d0:13:37:50:2f:c1:78:9d:
a3:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:00:71:FA:BD:50:74:E6:1E:22:9E:26:82:7A:43:4A:5A:A6:1F:0F
X509v3 Authority Key Identifier:
keyid:DB:88:0E:2D:C3:4B:AE:80:F4:2B:B1:E3:84:57:FE:19:7A:87:D4:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24gOLcNLroD0K7HjhFf-GXqH1LM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/41a51d-4269-41a0-92df-4d29a5e2985d/1/24gOLcNLroD0K7HjhFf-GXqH1LM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:64:3b:fd:63:6d:07:16:9b:0b:f4:20:22:7e:83:03:92:83:
50:b7:62:0e:44:66:cb:d8:20:89:ef:82:3f:86:12:8f:3c:a0:
d7:dc:e6:27:94:27:86:56:c0:ee:1a:73:62:7b:ee:0a:ca:ff:
e3:00:65:e3:a8:d7:a8:16:ea:d7:47:21:aa:1f:b9:ec:42:31:
4d:88:2f:1e:5b:b7:72:2f:b7:b0:ee:cc:ef:3c:24:de:7e:cc:
43:bf:29:4d:a5:44:22:07:fb:d5:7c:81:51:4c:6e:2d:1c:1b:
a8:e4:a8:02:7e:df:0e:5c:54:f8:75:44:b7:0a:ac:3f:e8:dc:
55:95:17:9e:ac:0f:92:e8:37:82:e6:81:48:62:eb:a8:60:d1:
ff:dc:fa:40:6c:e6:97:55:b6:79:9b:a5:81:3c:fe:f0:f0:08:
67:9b:44:30:50:50:b8:cd:a8:d8:94:cb:60:65:3b:7e:be:68:
49:b6:f7:58:71:e3:a7:fb:5c:b0:47:d6:d1:1c:1b:96:82:16:
93:61:65:d7:3a:67:15:57:57:a4:1c:31:fb:61:eb:dd:6e:4a:
eb:2b:5b:5f:c4:99:d2:59:a3:da:b8:2c:0a:d7:a1:5c:fa:00:
b1:14:93:2b:57:a4:c9:c0:3e:0d:79:80:52:3d:a6:89:1c:53:
ce:4f:2b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:28:39 2025 by rpki-client