
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
File: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft (raw, json)
Hash identifier: Z+ziqTpWVnsxrcmEYpywdzT0FVP5lCco5lfSpzvjz5A=
Subject key identifier: D0:7C:EB:75:62:0E:06:98:68:59:28:0C:8C:70:66:B5:BE:2C:EE:81
Authority key identifier: FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
Certificate issuer: /CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Certificate serial: 0197B6A14175C726E1DA50A63A7AF4ED2E97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:01:50 +0000
Manifest this update: Sat 28 Jun 2025 13:01:50 +0000
Manifest next update: Sun 29 Jun 2025 13:01:50 +0000
Files and hashes: 1: 2x8hugS4Ui9KaT-LaqdbUf0gqfo.roa (hash: gyN6UkhIgLwcwZrGZA7Bh/uxosleTdxZNErSNAXGOno=)
2: _sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl (hash: o30bQcAxpnZq/fuJvVHYPgacxxecFbc9zTL4q3/1WI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:41:75:c7:26:e1:da:50:a6:3a:7a:f4:ed:2e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec35d4f2f2d247ea08c4a0117d328e4e8edf152
Validity
Not Before: Jun 28 13:01:50 2025 GMT
Not After : Jun 29 13:01:50 2025 GMT
Subject: CN=d07ceb75620e06986859280c8c7066b5be2cee81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:14:36:e7:cb:7b:c7:31:92:b4:d3:dd:b3:c2:
ff:a0:81:0e:e2:64:43:40:80:45:d7:4d:69:62:ac:
b9:9f:37:49:10:c2:29:59:33:82:f3:bd:20:a6:f2:
6f:a7:0e:e0:a4:14:2a:d5:1d:d1:38:8d:1c:88:e5:
4a:d3:6e:a6:27:b2:90:b9:e7:af:2d:11:46:96:bd:
ef:4f:44:1d:a2:71:7d:e0:cb:94:4e:f4:99:43:8d:
26:13:25:05:b3:1c:aa:d4:c3:75:5d:84:63:33:2f:
7b:9f:42:29:a1:97:0f:9f:63:cc:2c:82:02:51:ed:
af:08:4f:a2:c3:f7:16:40:13:bb:07:71:a1:57:52:
38:2e:c4:3e:61:ae:55:9a:84:9c:88:29:2d:98:d3:
84:64:18:27:9c:87:9e:72:6c:eb:60:90:2c:03:23:
c2:b8:af:89:31:b0:3c:87:d5:a1:f2:58:74:a2:bf:
8c:d4:fa:95:3e:9a:15:f3:a2:fe:8a:1f:2b:26:19:
bc:a4:aa:3e:12:5c:59:03:48:06:6f:54:5b:42:58:
51:10:1b:89:57:ea:d3:d6:86:2c:7c:bf:fb:fc:6c:
0e:5c:34:52:25:36:a2:3d:6e:81:d5:13:17:78:94:
c5:c5:5d:0d:84:5d:8a:e2:a7:c3:08:c1:88:f1:08:
6f:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7C:EB:75:62:0E:06:98:68:59:28:0C:8C:70:66:B5:BE:2C:EE:81
X509v3 Authority Key Identifier:
keyid:FE:C3:5D:4F:2F:2D:24:7E:A0:8C:4A:01:17:D3:28:E4:E8:ED:F1:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d003ae-35a6-44f2-aad8-f8b12f982fe2/1/_sNdTy8tJH6gjEoBF9Mo5Ojt8VI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:69:56:d3:19:a7:a7:ac:1b:d3:42:25:2c:83:ed:fb:4c:1f:
a7:eb:b3:ab:1e:c5:6a:f6:34:d0:19:82:ec:7d:ab:26:5c:ef:
93:f1:c3:a1:6f:7a:df:20:8a:ce:69:c5:dc:26:5a:a8:0d:1f:
c2:84:3d:c2:4a:ad:75:d6:33:d9:9d:8d:61:4c:18:b7:39:93:
56:d3:04:ac:aa:6e:80:04:94:42:bf:db:25:af:b4:03:50:67:
e0:61:48:12:12:fe:2c:cb:c1:a3:b1:1c:62:6e:71:87:b5:f4:
a0:50:c8:ab:a9:6f:23:ed:a4:07:f3:bb:2b:ec:f7:50:33:2d:
fe:9f:57:ce:23:16:2c:eb:25:9f:f0:13:df:d0:60:c0:38:c3:
b8:f7:33:cf:3a:52:d9:71:6f:6e:64:db:a2:d7:f9:d7:25:21:
79:0f:a5:06:8c:83:4b:7e:2e:c3:ea:15:be:bf:c4:d5:af:f0:
bc:58:ac:3d:4e:f0:a0:22:8e:f8:6e:be:0a:a4:4b:5c:51:30:
74:7c:8c:57:96:de:16:63:5c:41:93:67:c6:9e:68:3c:c2:3a:
02:48:bb:94:0e:ab:3b:ac:1e:46:ec:1e:dd:e7:ce:8b:c8:ae:
37:21:cf:68:f0:18:6a:02:b0:44:fc:1d:4b:67:14:0f:73:25:
bb:29:4f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:22:02 2025 by rpki-client