Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
File: tXq3GLSss6Z5xduPzucpTta-K9A.mft (raw, json)
Hash identifier: ff+zh9+vkYamc4FA6qiqPaRiNXwe971clijqRO+Ebek=
Subject key identifier: 31:E7:E3:BD:83:ED:B8:05:AF:AE:90:48:BC:B9:B9:55:C2:8A:0C:FE
Authority key identifier: B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
Certificate issuer: /CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Certificate serial: 0197BA0F8922B23F7ABAC654CC1E2B3467E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 05:01:09 +0000
Manifest this update: Sun 29 Jun 2025 05:01:09 +0000
Manifest next update: Mon 30 Jun 2025 05:01:09 +0000
Files and hashes: 1: 7kCB1J_rNDVtgNFDQBz-ZFXo6aA.roa (hash: j6xn4MHIGZVJXA81hfabdadaay1xFRv4GfnwCa5VtAQ=)
2: tXq3GLSss6Z5xduPzucpTta-K9A.crl (hash: wdQ9Izgqwsaxkd7487k/NLqEh/UQN8iApjHdOdL9hQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:89:22:b2:3f:7a:ba:c6:54:cc:1e:2b:34:67:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57ab718b4acb3a679c5db8fcee7294ed6be2bd0
Validity
Not Before: Jun 29 05:01:09 2025 GMT
Not After : Jun 30 05:01:09 2025 GMT
Subject: CN=31e7e3bd83edb805afae9048bcb9b955c28a0cfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:04:00:c2:1b:85:c5:e2:03:4f:e6:c2:2b:0b:
c4:f2:9e:66:61:06:c7:1f:62:ab:85:25:a5:f9:73:
a0:f1:d3:3e:93:a8:4b:7b:89:79:44:ec:a9:f4:70:
ec:99:ce:6b:a3:52:72:06:e9:d1:ee:84:04:8b:a0:
8e:8b:78:8a:29:5b:32:a0:d2:9d:48:e8:8b:18:81:
e5:8a:4f:4b:83:6c:d3:d5:c4:eb:5d:51:79:fe:e4:
08:93:2f:a2:b1:44:3c:8b:7b:d4:19:ec:24:d4:1b:
8d:30:19:6a:b4:8d:46:32:01:a1:48:5b:66:b0:73:
ea:c1:33:0c:09:b8:86:24:de:9d:73:fa:b8:9b:14:
b2:49:33:9b:e1:92:87:3a:4a:99:81:30:85:2f:3a:
72:db:a4:b2:02:e3:c0:95:21:68:32:bf:9e:bd:d9:
9c:a7:b6:b9:64:eb:5e:90:7b:f2:43:70:63:6a:38:
e2:72:72:61:c4:92:aa:4a:4b:5a:a5:62:7a:fe:00:
96:25:6b:e4:46:5b:46:45:df:cd:14:e9:b2:db:45:
2c:25:6f:7b:58:c7:f8:32:e4:71:19:64:92:ee:e8:
f8:17:c7:ec:5a:b0:30:b1:de:a5:a8:b9:2a:a7:f2:
df:b9:76:7e:6a:c3:66:03:5a:48:d3:2b:a2:40:b6:
a6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:E7:E3:BD:83:ED:B8:05:AF:AE:90:48:BC:B9:B9:55:C2:8A:0C:FE
X509v3 Authority Key Identifier:
keyid:B5:7A:B7:18:B4:AC:B3:A6:79:C5:DB:8F:CE:E7:29:4E:D6:BE:2B:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXq3GLSss6Z5xduPzucpTta-K9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ba1be3-796e-45c8-8b76-c700ea03c227/1/tXq3GLSss6Z5xduPzucpTta-K9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b0:09:6e:44:61:aa:ae:3d:b9:66:f4:c8:fa:a0:55:99:0d:
e6:10:cc:c7:32:33:9a:bf:66:fe:63:c3:d9:a4:74:0c:b2:65:
fe:c2:1d:09:fb:d2:4d:ec:87:38:81:2d:28:76:c5:0e:f3:51:
bd:90:d4:84:a9:0d:14:1e:41:e2:f8:a1:ea:0f:3b:89:3b:1e:
1e:6f:11:79:0a:8c:1b:9e:67:03:ce:4e:1f:ee:a2:36:5a:ed:
66:d6:7b:72:5d:cd:02:97:e5:d0:8a:87:c2:8c:03:c1:0f:30:
8d:30:6a:e1:ca:f8:30:7a:6a:ad:a1:17:d2:77:5f:c3:a2:f2:
ae:c7:ff:64:68:7e:47:49:84:61:55:f2:82:33:42:88:42:cf:
0d:f0:f9:56:e3:d9:f4:31:45:9f:80:eb:96:f7:85:80:14:2a:
b7:d3:92:98:d3:81:a9:e7:a8:bd:79:e6:d8:60:ac:f8:9d:02:
0f:e9:fb:73:e5:75:b8:3c:85:1d:84:50:4d:57:8f:3a:99:38:
a6:d1:26:6e:8f:c2:54:53:e7:74:23:2a:73:0f:8b:df:01:68:
8c:55:dd:e9:0c:e0:e1:df:25:7f:30:22:33:75:56:30:e9:ef:
1c:25:b4:7a:c3:48:0e:44:64:6a:8e:28:0f:fe:36:8f:2c:2b:
b6:03:f1:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:29:44 2025 by rpki-client