Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
File: d4DNTnTxhajxrUBSG2EbdNUWv3c.mft (raw, json)
Hash identifier: Ia9Y5JnCEh+FVvzO+6B/GP54Q9WB0csksh/zdn1DBmA=
Subject key identifier: 1C:2A:88:50:D0:E4:D6:24:50:12:07:50:22:CA:AF:DC:B0:18:A6:BC
Authority key identifier: 77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
Certificate issuer: /CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Certificate serial: 0197B7456C9DCC2C93748B761ECA84942924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 16:01:09 +0000
Manifest this update: Sat 28 Jun 2025 16:01:09 +0000
Manifest next update: Sun 29 Jun 2025 16:01:09 +0000
Files and hashes: 1: WntKpaBL0rwf0OHtGIxbqp43a48.roa (hash: RD+6zKliyi529qWw5SlqL86NJOiZz+f7ljpnnMAUmvo=)
2: d4DNTnTxhajxrUBSG2EbdNUWv3c.crl (hash: qQdeVoGQ4Z+PaWkBbwF2QZeHF0dsYPDQ2mlt/cDGbf0=)
3: wGTkAR_0sF92lgaxXY9nSUR4GIc.roa (hash: eDBRIXJLntwza/xwaubebQOnZv9qj50gWoqkIryMxT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6c:9d:cc:2c:93:74:8b:76:1e:ca:84:94:29:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7780cd4e74f185a8f1ad40521b611b74d516bf77
Validity
Not Before: Jun 28 16:01:09 2025 GMT
Not After : Jun 29 16:01:09 2025 GMT
Subject: CN=1c2a8850d0e4d6245012075022caafdcb018a6bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:48:d1:db:8b:2e:d1:c8:43:bb:12:18:1c:b7:
22:dc:8c:a2:2f:9a:6d:68:3c:cd:6c:08:d7:53:64:
ae:84:87:1c:55:3a:bf:33:c5:ed:44:eb:10:16:a4:
1b:93:e5:d7:80:39:70:39:23:ff:09:86:92:0c:8a:
d3:77:8a:a4:97:22:c5:a1:1f:c1:29:45:b0:3e:aa:
50:09:a9:23:ba:16:73:99:c2:6e:87:bf:b9:18:35:
30:fb:35:68:7a:aa:18:76:f5:96:77:63:ca:90:1e:
45:54:47:25:c7:23:82:24:46:b4:bd:5c:2d:3a:84:
0d:9a:c8:63:a1:f9:0e:5c:a9:82:2e:1d:fc:06:dc:
9c:0c:f0:89:c9:af:61:36:30:13:c1:79:8e:d6:9f:
74:a8:97:c4:94:2c:28:36:07:3e:66:6f:e0:3c:18:
be:68:ef:6b:2a:be:31:a1:db:bc:6d:63:7b:38:a0:
00:29:4d:46:f9:87:15:3b:0a:42:70:35:70:2a:6e:
cf:d7:1a:e1:74:1b:e1:52:91:ee:5c:89:c9:b3:ff:
cc:3a:6b:1c:e4:f1:86:f7:52:df:e0:45:10:04:ad:
87:69:67:75:bb:7b:cd:51:fb:7d:cd:d3:6f:60:04:
bf:66:c9:d5:9f:af:42:42:cc:25:9a:ff:a7:60:46:
76:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:2A:88:50:D0:E4:D6:24:50:12:07:50:22:CA:AF:DC:B0:18:A6:BC
X509v3 Authority Key Identifier:
keyid:77:80:CD:4E:74:F1:85:A8:F1:AD:40:52:1B:61:1B:74:D5:16:BF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4DNTnTxhajxrUBSG2EbdNUWv3c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/ff59f7-bfc3-4989-8b8d-e98d052cea7f/1/d4DNTnTxhajxrUBSG2EbdNUWv3c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0d:ac:8b:a4:5e:f7:59:03:88:3a:12:9d:b0:2d:d1:07:15:
3c:47:eb:31:7c:3c:e6:3d:76:f5:d5:93:a2:3a:f5:56:c3:65:
c0:26:20:6e:5c:96:5e:2e:62:0f:31:65:df:40:c2:c6:47:15:
08:ed:6a:35:b2:7c:b0:cc:69:27:db:ec:e6:c1:d6:0d:d6:9d:
2c:e3:71:0d:11:ca:92:7c:61:42:94:2a:58:20:04:76:53:bd:
ba:3e:66:63:fe:5f:84:84:c6:4d:14:42:63:47:ee:14:dd:43:
6c:1f:46:8a:d6:f7:f7:83:20:b6:ef:45:05:d0:28:e1:1f:ec:
56:ec:d9:99:f0:1c:23:26:bf:71:56:fe:17:2b:49:e2:a6:26:
8a:ca:90:ab:50:9a:be:6d:40:a1:e7:ce:cb:45:68:77:a0:67:
e9:cf:af:b9:0e:f7:3a:02:a6:f9:6b:40:b7:f0:d5:ba:3c:ca:
e2:ea:a4:52:00:15:36:63:eb:f6:ac:40:16:f6:a8:1f:90:67:
1a:ed:22:31:84:18:c6:ff:a1:d9:13:5f:e8:31:8e:b3:c6:32:
6f:f3:36:9b:61:d6:bb:1f:63:f5:ae:4a:55:7b:61:80:11:b3:
76:fd:8a:20:b7:b8:19:d0:89:c7:4f:e8:5d:0d:d4:f8:7f:e6:
38:ea:20:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:27 2025 by rpki-client