Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
File: j7YTPVwhCdim-bvKpJbb6uNHl1w.mft (raw, json)
Hash identifier: 454JHArxPr5/LSTOSlrCX5whrhOIIijjVqIiO3WF4+g=
Subject key identifier: 04:3B:79:CD:53:92:F8:7A:4D:D8:CF:3C:A5:1F:7B:DB:4A:9F:BC:5C
Authority key identifier: 8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
Certificate issuer: /CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Certificate serial: 0197C123DD716B7FBCDB4157674A82DCEDCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
Manifest number: 15BE
Signing time: Mon 30 Jun 2025 14:00:42 +0000
Manifest this update: Mon 30 Jun 2025 14:00:42 +0000
Manifest next update: Tue 01 Jul 2025 14:00:42 +0000
Files and hashes: 1: Y7eKY9L9f9B1QlpP7Px14Uk4KN0.roa (hash: Ti8fjG26nfzvszXNq8D1c3nuNhyRNxvinzWzoAh4fqQ=)
2: j7YTPVwhCdim-bvKpJbb6uNHl1w.crl (hash: BPjLg0D6OsJ6YrzbTsqV7Ffzj4QTsGxOnAxiVnl/Cno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:23:dd:71:6b:7f:bc:db:41:57:67:4a:82:dc:ed:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fb6133d5c2109d8a6f9bbcaa496dbeae347975c
Validity
Not Before: Jun 30 14:00:42 2025 GMT
Not After : Jul 1 14:00:42 2025 GMT
Subject: CN=043b79cd5392f87a4dd8cf3ca51f7bdb4a9fbc5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:33:b5:3b:e9:36:e0:cc:63:72:9c:59:06:a7:
d3:73:96:c1:ba:76:42:fd:7f:04:4e:28:cb:e6:39:
ce:92:02:a0:1d:d5:41:1d:d6:7c:84:9c:51:46:e9:
10:18:1e:10:a3:34:e2:a7:97:40:c7:0a:14:bd:5e:
49:19:a4:ac:0a:ab:ff:8c:a4:06:4d:09:c0:44:21:
38:1c:81:54:c2:da:95:e2:3f:a7:a6:bc:87:c4:26:
f7:da:56:ab:6c:55:3c:d5:f6:8c:97:b2:fe:86:69:
ab:f9:e1:c2:f5:24:d1:1a:5a:a7:ca:8a:cd:0a:91:
6b:3b:e8:12:fe:ea:38:de:fa:8e:7f:89:6a:00:ef:
33:81:a4:8a:ca:f5:48:09:54:56:be:75:e7:ac:74:
ea:cf:64:06:67:be:de:59:0f:0f:f7:bb:68:6f:e7:
8a:4e:6c:36:d6:62:2e:67:e6:dc:86:78:b1:12:08:
82:c1:89:c8:c1:56:1e:1b:c3:a3:93:15:c3:c2:0d:
be:98:b5:36:3a:a1:2a:1c:c5:39:66:b2:df:a4:eb:
d0:a4:89:2c:0e:65:07:18:b6:4b:7e:74:61:f1:e0:
d8:a2:a6:29:c5:e1:55:a5:ad:4a:81:5b:91:91:6e:
f1:fa:51:10:f9:42:53:7c:3b:d9:53:f1:e9:2b:26:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:3B:79:CD:53:92:F8:7A:4D:D8:CF:3C:A5:1F:7B:DB:4A:9F:BC:5C
X509v3 Authority Key Identifier:
keyid:8F:B6:13:3D:5C:21:09:D8:A6:F9:BB:CA:A4:96:DB:EA:E3:47:97:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j7YTPVwhCdim-bvKpJbb6uNHl1w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ade410-4e8c-412e-9754-451a9ae4ce51/1/j7YTPVwhCdim-bvKpJbb6uNHl1w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:6c:27:ac:92:46:ca:1e:ed:db:0e:77:7b:fd:cf:52:c6:ed:
5d:e1:f8:30:cb:82:cc:a2:4f:01:0d:36:89:0c:4c:7b:a2:3d:
f0:d3:07:5a:be:a1:c3:7b:b4:2e:be:bc:69:65:36:ad:b6:61:
83:98:3a:a9:9a:81:93:2a:ba:d0:a4:21:0b:11:4a:bc:41:b2:
80:c2:ed:75:c9:f1:e5:66:61:b0:ad:38:41:79:a2:cf:94:31:
0b:8c:27:89:da:e9:08:c1:a3:ce:f5:54:6f:59:d2:ab:70:63:
1d:a1:c1:7c:0f:15:e4:0b:28:61:0b:e8:53:b9:79:b5:42:af:
ff:1f:b3:8c:62:d2:cf:ab:3d:52:69:14:a2:98:c3:26:57:b1:
b7:4e:63:d9:ff:f9:6c:8f:c3:4b:9d:bf:6c:b7:8d:b6:ff:df:
e3:14:4b:73:cf:40:c0:86:cb:ec:e6:a0:51:31:8b:e0:a7:87:
7e:ca:8c:eb:62:6a:e4:64:52:b6:04:50:a6:e0:06:a9:43:03:
45:81:1d:77:fc:37:3a:f3:86:a3:b8:12:fb:69:34:1d:11:60:
aa:e4:b8:2c:95:ea:cc:2e:c3:31:70:15:81:4b:2e:e8:82:c8:
47:5c:fb:0d:6e:2c:79:14:13:b1:57:0d:f2:e1:b6:d6:b9:88:
88:c3:2f:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:17:51 2025 by rpki-client