Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
File: 7T_3g2Uw0cR09NCItrNiJPv2mC0.mft (raw, json)
Hash identifier: OYWKk4GfXgETogPm64VCMo3QI19+oaiUifc2xNauTaQ=
Subject key identifier: 0D:01:19:D8:8B:B1:9B:F2:74:A4:4A:00:DE:B3:D8:DC:B9:32:D8:28
Authority key identifier: ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
Certificate issuer: /CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Certificate serial: 0197B6328EDD8A0DA93A2AD0254E9BCD955E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 11:00:55 +0000
Manifest this update: Sat 28 Jun 2025 11:00:55 +0000
Manifest next update: Sun 29 Jun 2025 11:00:55 +0000
Files and hashes: 1: 7T_3g2Uw0cR09NCItrNiJPv2mC0.crl (hash: AN7pmGjhGG6c98/A5UpouBwq17Z7jgx1Ruf0u7jJSzM=)
2: 9zc3UK9Q2NW5kQioYk692gU-YJI.roa (hash: BBodVy2RZip9O+WWUTv52ptxLTbUw/7auCFYyPArRAA=)
3: UQ_3RuYAdJoYpjdqceJNmc5aoug.roa (hash: q3FXkXKtZ8hFVmAvp+UOJxjM7FKEfq7BOOg+5WvlLx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:8e:dd:8a:0d:a9:3a:2a:d0:25:4e:9b:cd:95:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed3ff7836530d1c474f4d088b6b36224fbf6982d
Validity
Not Before: Jun 28 11:00:55 2025 GMT
Not After : Jun 29 11:00:55 2025 GMT
Subject: CN=0d0119d88bb19bf274a44a00deb3d8dcb932d828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:9f:04:ca:1d:69:13:f4:70:b7:58:0f:22:e1:
74:84:bd:18:a0:64:5d:b1:4a:67:b1:a7:e7:fb:be:
c5:e3:51:b4:c6:0e:23:3f:cf:95:f1:8b:64:aa:e8:
14:4f:ec:b2:03:65:25:42:f4:2c:b0:1a:8f:43:d4:
5b:44:a0:30:2f:14:29:51:59:8c:ba:4e:f2:6b:58:
37:fd:a2:3d:f7:58:3e:12:72:0f:ef:be:3d:a3:18:
aa:8a:58:d1:be:56:7f:61:90:86:80:3f:66:55:71:
6a:59:f0:e7:82:5c:6a:5e:f4:fa:91:fd:bf:94:54:
5b:af:47:b2:35:58:27:af:83:59:fc:5a:98:6f:6f:
f6:ca:d1:bd:64:11:8d:32:af:ce:07:1c:22:74:26:
10:fc:10:12:00:82:4f:fd:35:45:fa:38:a4:62:56:
b0:7b:ee:fa:88:d7:f0:0d:3f:7c:57:29:97:e9:e7:
c9:9f:78:b4:97:54:ad:68:ca:d9:98:ae:52:a6:0f:
df:2d:bc:73:3c:0b:4e:5d:e4:81:ea:85:ac:37:58:
89:43:63:f1:b9:62:cd:c4:7e:98:c4:3c:96:eb:7d:
8d:7d:3c:b7:8f:58:95:7a:2f:7c:4f:2b:98:23:0d:
e2:50:5e:fd:fa:42:cb:b3:70:49:52:70:18:f9:fc:
a4:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:01:19:D8:8B:B1:9B:F2:74:A4:4A:00:DE:B3:D8:DC:B9:32:D8:28
X509v3 Authority Key Identifier:
keyid:ED:3F:F7:83:65:30:D1:C4:74:F4:D0:88:B6:B3:62:24:FB:F6:98:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7T_3g2Uw0cR09NCItrNiJPv2mC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/6ade9b-3216-4fef-8049-f3e24e075e35/1/7T_3g2Uw0cR09NCItrNiJPv2mC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:f6:30:51:9d:72:9f:5b:e8:6f:41:bc:07:02:77:2b:d4:50:
24:15:bd:50:28:e2:7d:b4:8c:72:5c:5f:47:2f:74:11:0f:e3:
cc:ec:ad:9e:8b:d4:24:0e:ff:58:fa:8f:8c:0d:01:51:c7:a8:
0a:e3:33:59:8e:0f:25:b9:bd:82:5c:3f:67:0a:2b:fb:f1:d1:
2c:f1:98:81:9b:b4:d5:be:ee:02:ff:27:a1:c7:4d:a5:91:46:
88:f4:cf:8b:71:41:31:87:b8:9e:98:60:dc:e0:86:3f:45:7c:
05:77:c6:c5:16:2e:4c:9f:a4:9c:6e:f7:a9:cd:91:87:ab:4b:
6b:f1:d3:b6:a5:80:39:28:9f:40:66:c5:5d:87:04:b1:f9:4a:
9d:d6:2d:23:b6:89:dc:6e:86:60:cc:d0:86:89:37:50:45:06:
45:e3:bb:03:6a:57:94:33:d7:6b:af:4a:14:6a:ce:e5:f0:e7:
6c:d8:e4:35:7a:0c:27:0f:fd:bc:3d:35:38:3e:15:fd:71:88:
48:eb:db:9b:41:9f:47:b7:69:81:bd:f7:73:01:93:41:9b:b9:
f3:52:5c:3f:bb:a3:c3:90:a5:39:d3:7d:a0:ba:76:43:7b:69:
ce:21:6a:ee:ae:a6:26:84:08:86:cf:cb:11:8f:8b:33:9d:fa:
f9:13:86:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:43 2025 by rpki-client