Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
File: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft (raw, json)
Hash identifier: 5s/Jg00ijynjzvYT9R05SAT1qBdsAiVKKsKZPMvwxsU=
Subject key identifier: A3:07:2F:9E:4E:65:67:7C:C3:1F:24:56:8F:1A:7E:2F:03:3B:92:10
Authority key identifier: EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
Certificate issuer: /CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Certificate serial: 0197B77CB148B91D4615683AC39CDB579485
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:01:31 +0000
Manifest this update: Sat 28 Jun 2025 17:01:31 +0000
Manifest next update: Sun 29 Jun 2025 17:01:31 +0000
Files and hashes: 1: 7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl (hash: U9zojMxwhVQxPJTeA6IKNXenDBdOHNPgi1IT9Y40sdE=)
2: pWjzKwcY2D4VzPoP5dA0NiOjP1E.roa (hash: COXcfdNp3EzT11F9o1Nm0eGFt9uQRA5Y8hfNNYTi82c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:b1:48:b9:1d:46:15:68:3a:c3:9c:db:57:94:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecd6bdacc521edca4c076048da86fed5dcd61220
Validity
Not Before: Jun 28 17:01:31 2025 GMT
Not After : Jun 29 17:01:31 2025 GMT
Subject: CN=a3072f9e4e65677cc31f24568f1a7e2f033b9210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:4e:56:6f:25:a5:94:8d:a0:a1:dc:c6:97:
85:35:96:55:84:0a:46:ad:f5:cf:66:9d:04:f0:aa:
d7:0f:ef:92:db:92:a0:f2:fb:59:51:ee:e4:cc:46:
76:01:90:1e:a6:e5:6c:3f:ef:80:19:c0:cb:53:10:
28:67:eb:5f:0f:fc:0b:89:34:e1:4b:f6:a6:f2:7b:
d9:db:05:cb:c3:6c:33:17:c5:3c:0d:b1:bd:a5:69:
46:00:bd:87:e6:a5:ea:b4:45:6f:5a:0b:08:d6:18:
fe:eb:2d:16:55:3d:ab:28:ac:da:24:04:24:1a:b4:
ff:68:80:8e:cd:ed:7f:ed:58:39:1b:a6:26:06:c2:
6c:7e:6e:58:fe:4b:5c:3d:cc:c4:fa:a9:d7:1a:0e:
09:32:47:8c:0f:ce:ad:61:3d:0c:65:0c:7d:0a:6a:
d4:cf:e8:66:b4:b9:23:7b:b0:2e:c4:ec:3a:2c:e4:
82:0c:5f:75:5f:8c:78:19:61:62:31:a5:40:ec:0f:
7f:39:ea:7b:b8:b8:21:dd:33:46:90:ee:81:a4:d2:
41:86:2c:59:c3:bc:ed:27:c9:09:bf:e1:b6:a3:32:
14:65:1c:9d:db:a2:da:8b:25:45:a8:00:bc:f6:88:
e0:13:c6:39:97:3b:10:ba:34:8e:8a:6e:23:df:6c:
b9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:07:2F:9E:4E:65:67:7C:C3:1F:24:56:8F:1A:7E:2F:03:3B:92:10
X509v3 Authority Key Identifier:
keyid:EC:D6:BD:AC:C5:21:ED:CA:4C:07:60:48:DA:86:FE:D5:DC:D6:12:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7Na9rMUh7cpMB2BI2ob-1dzWEiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/b9f29b-ee3d-4bde-adc6-43e91e5ef145/1/7Na9rMUh7cpMB2BI2ob-1dzWEiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:38:2e:7d:9e:94:d2:2a:25:bb:77:99:25:ec:5f:ef:fa:df:
c0:5f:53:a7:f1:0a:6e:9b:a6:2d:96:ff:df:0f:f8:67:fc:f8:
f7:72:38:1f:a3:83:64:54:61:12:8c:46:3c:be:80:e8:bc:d2:
df:91:30:74:12:5e:2f:da:fc:90:5f:8b:03:8f:8d:41:39:18:
48:d9:3d:73:34:c8:71:10:c2:a9:7c:5f:33:27:0e:9b:6e:8e:
8d:be:78:d2:f7:ab:17:c6:53:34:ab:54:3b:8a:27:95:70:89:
9f:58:d4:06:5f:16:4d:dc:ff:a1:61:9d:8c:ee:21:6f:c1:49:
c8:71:a6:90:2d:05:d7:4e:d3:6d:2f:ec:bb:0b:86:4e:2f:8b:
54:89:89:d2:17:b8:74:ef:25:e1:2a:f3:bf:87:f0:86:9b:51:
ae:10:af:e0:97:de:09:2b:a2:6e:be:1d:a3:0c:70:0e:da:92:
2a:f3:d2:f9:35:0a:4b:0a:af:2e:db:a4:36:b4:48:09:f2:7a:
68:34:48:17:86:94:42:99:db:cb:4e:75:c5:10:10:93:a3:1c:
61:ac:6a:48:63:0d:77:59:2d:1d:36:21:42:9d:9c:51:4e:ad:
2a:21:84:3f:f8:9a:4e:ea:cf:80:bb:b2:22:57:14:48:5e:97:
71:71:63:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:06:06 2025 by rpki-client