Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
File: rGzIYDNT1zLkscy6fqygts7kxM8.mft (raw, json)
Hash identifier: 2Giqi3ZEfDby/5rNbE55vk9xl2KHWJRjBSwNz/CQPz4=
Subject key identifier: 35:C3:73:63:B7:80:F0:11:D5:5F:7F:C5:B0:BF:B7:E9:EA:95:EF:7E
Authority key identifier: AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
Certificate issuer: /CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Certificate serial: 0197BAB3FF1970FC45C81088B68C5EFCA104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
Manifest number: 15B8
Signing time: Sun 29 Jun 2025 08:00:47 +0000
Manifest this update: Sun 29 Jun 2025 08:00:47 +0000
Manifest next update: Mon 30 Jun 2025 08:00:47 +0000
Files and hashes: 1: DTYyZuafFj4qXWfudssAoo7YyUc.roa (hash: XFaAmLI0e2ldAKL+t4MvCZW7ieWrsLzA21ljUa5d0Uc=)
2: rGzIYDNT1zLkscy6fqygts7kxM8.crl (hash: iYeBzR1FPpFuN9UFO0D0Vh63t3ANW22LdEDZZkNpry4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b3:ff:19:70:fc:45:c8:10:88:b6:8c:5e:fc:a1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac6cc8603353d732e4b1ccba7eaca0b6cee4c4cf
Validity
Not Before: Jun 29 08:00:47 2025 GMT
Not After : Jun 30 08:00:47 2025 GMT
Subject: CN=35c37363b780f011d55f7fc5b0bfb7e9ea95ef7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:98:62:4c:c1:f0:23:b9:ce:54:25:a6:95:42:
a7:43:88:a8:02:d7:6d:eb:3b:5b:e0:ac:75:c0:1c:
ca:11:f6:ac:33:27:03:9e:5b:57:90:6a:48:17:c9:
bb:3c:23:fd:f2:4f:93:81:02:13:5b:2a:a9:5b:f7:
12:0e:66:2a:b7:f5:60:e7:5b:27:77:0a:f1:1c:d5:
3f:f8:f7:7e:0e:20:67:41:c7:76:db:b4:30:e5:77:
c0:a8:04:b2:b3:91:a3:62:79:71:c2:a5:2b:69:ed:
12:ef:c5:af:1a:b3:cc:d5:ac:6f:17:54:41:3a:b0:
fe:ef:24:1e:c6:68:2e:eb:64:a2:f3:af:a9:41:a2:
f1:86:ab:bd:81:9e:e8:88:e6:b9:24:ee:6a:90:9e:
fa:80:f3:00:01:12:13:eb:92:72:4b:e9:c3:1e:8b:
92:b1:8c:09:94:e6:1e:16:73:de:ce:50:86:b8:a5:
ad:3b:c4:80:da:b8:76:7d:6d:49:3d:cd:c4:79:31:
96:e7:bb:55:56:91:7f:f2:1d:9b:6f:e0:ec:bc:b5:
a9:85:11:4a:90:57:71:ba:4c:17:34:46:63:90:b6:
93:51:d0:d4:0a:ba:63:74:74:07:67:fc:af:76:a9:
53:55:9f:01:ac:73:0d:d3:24:3f:b9:af:ad:c6:ac:
c4:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:C3:73:63:B7:80:F0:11:D5:5F:7F:C5:B0:BF:B7:E9:EA:95:EF:7E
X509v3 Authority Key Identifier:
keyid:AC:6C:C8:60:33:53:D7:32:E4:B1:CC:BA:7E:AC:A0:B6:CE:E4:C4:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGzIYDNT1zLkscy6fqygts7kxM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/rGzIYDNT1zLkscy6fqygts7kxM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:7c:b0:3a:79:4b:ed:54:30:1c:b4:03:46:92:1e:19:e9:68:
b1:60:8a:9d:4c:9f:e0:3f:86:f0:ee:82:61:76:0d:b8:09:cb:
ab:ba:34:c6:fa:23:16:1e:c4:77:5d:9f:cf:8f:79:08:ab:ca:
d9:a9:8d:25:ab:ef:75:99:07:14:0c:5a:ce:02:10:4e:53:dc:
35:a1:98:02:81:88:3d:a6:f8:0c:1e:a8:c7:85:66:60:8e:c2:
d0:2f:c0:97:06:47:f9:46:6b:f5:1b:7b:8c:88:d9:9a:0a:7e:
71:1a:21:ac:a5:99:57:77:80:6c:94:bb:d1:e6:d0:fc:5c:e0:
2a:d2:3d:00:60:45:68:73:d2:8e:6e:f0:fb:37:1d:e9:1a:d3:
01:b3:a6:57:01:ee:bb:de:00:7c:c9:34:a4:be:7a:bd:1f:77:
7d:1f:5d:20:a6:11:1c:4e:07:de:7f:28:2b:ad:ee:85:0d:49:
d7:ad:89:5b:67:cb:9a:78:7b:7e:2c:3e:e8:34:8a:e2:d0:9c:
21:16:04:72:38:a9:f8:2f:ff:6b:94:b6:00:95:b5:bc:fd:2e:
f6:af:9e:0a:d8:9b:51:4b:d4:32:0d:52:26:f5:fb:26:ef:e4:
96:d5:47:be:48:87:db:c1:fb:3a:ba:2a:ae:7a:62:2e:3c:2f:
4d:80:ee:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:54:24 2025 by rpki-client