Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
File: i96i1KsTgPCjt_59T6eCjhyUNVg.mft (raw, json)
Hash identifier: ohq7SVGU1BP2Zb3pA6pDobXkQ/XZJyYCIQisNub+8nE=
Subject key identifier: 42:E5:AB:5B:0E:24:D5:AB:6F:7A:58:88:ED:2A:40:AE:C4:41:EA:FC
Authority key identifier: 8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
Certificate issuer: /CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Certificate serial: 0197B7EA38F2B9A5EC5073BC430FDEFFF8AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:09 +0000
Manifest this update: Sat 28 Jun 2025 19:01:09 +0000
Manifest next update: Sun 29 Jun 2025 19:01:09 +0000
Files and hashes: 1: CXV5h4NnxextID8ps-zs1B6iIxg.roa (hash: H0fWCwenw+LaQh1zQTvHX9xYl9ZHHPd/qzueTxfRIcY=)
2: i96i1KsTgPCjt_59T6eCjhyUNVg.crl (hash: o5FNdCH9GNDBh+97opNHc65M1GnVM/BI1Gv2OFwzisM=)
3: uXuzZdEmcXhnurqd_jWF8YOUHrw.roa (hash: 0tKKSAqCxTZYYBM2R7eXZ3g3GCiHz3+8Vn0Oldh70rU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:38:f2:b9:a5:ec:50:73:bc:43:0f:de:ff:f8:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bdea2d4ab1380f0a3b7fe7d4fa7828e1c943558
Validity
Not Before: Jun 28 19:01:09 2025 GMT
Not After : Jun 29 19:01:09 2025 GMT
Subject: CN=42e5ab5b0e24d5ab6f7a5888ed2a40aec441eafc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c6:f2:62:f3:da:85:b8:c9:ee:ec:82:45:b9:
79:81:37:62:7f:65:ee:0b:5d:cd:85:fa:e2:93:c0:
34:8c:2a:bf:e1:9b:b5:89:e2:9a:96:8d:1e:26:bc:
aa:cd:50:ac:9f:39:66:e0:45:b0:3c:18:19:19:fd:
ec:41:6d:e4:4d:ed:a4:f3:42:35:a2:96:0b:fe:c7:
28:06:fd:46:db:7f:53:31:c6:ea:32:e8:46:17:f5:
96:dd:8e:7a:a8:93:0d:12:6c:af:5a:81:02:52:3e:
f3:0e:2b:d0:02:67:e6:1d:46:41:0b:91:38:cc:6a:
13:bf:49:9b:7a:62:7b:66:62:f4:ac:8b:d3:6e:46:
bd:75:0d:94:de:de:a5:30:35:7b:4f:52:43:fe:e4:
81:09:5a:97:7f:7d:70:83:4e:b6:e8:e6:94:85:98:
c6:fb:37:15:f2:dc:f3:17:e1:92:d8:68:74:82:01:
fc:7a:e0:ec:15:1e:93:3b:6d:70:a4:6e:71:27:09:
a2:83:56:e5:cf:76:57:c6:8d:bb:15:1d:b9:75:6c:
f0:7f:88:56:d8:7a:db:46:6f:4c:3d:02:c7:6e:49:
14:ba:ce:c6:dd:b1:36:53:78:6f:e2:4f:bf:25:17:
4e:3c:61:13:37:db:ac:85:98:d2:86:3c:81:78:42:
60:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E5:AB:5B:0E:24:D5:AB:6F:7A:58:88:ED:2A:40:AE:C4:41:EA:FC
X509v3 Authority Key Identifier:
keyid:8B:DE:A2:D4:AB:13:80:F0:A3:B7:FE:7D:4F:A7:82:8E:1C:94:35:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i96i1KsTgPCjt_59T6eCjhyUNVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/c67d90-d304-481b-8a64-1e326deba4d0/1/i96i1KsTgPCjt_59T6eCjhyUNVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:d6:66:38:39:b9:42:7d:c5:3b:bb:3b:d9:69:a5:5e:7a:25:
7e:27:71:de:fa:b0:64:8c:48:51:ed:1b:ea:c8:69:5d:3a:5c:
31:cc:60:d9:a9:46:09:f5:88:12:fd:ff:b7:63:48:9a:b2:4c:
a2:f4:ac:e7:5c:29:00:b8:d2:40:8e:84:01:1e:72:ba:32:eb:
96:b2:35:80:ce:49:78:f3:de:e9:62:20:e1:eb:dd:22:ca:b7:
54:6e:cd:c4:75:f6:06:7a:e7:6d:f2:e9:32:f2:af:4f:58:68:
5b:23:2e:59:ee:f8:60:73:47:9f:fb:51:e3:8d:0b:52:9a:eb:
09:36:5d:63:2b:b0:55:6d:01:45:07:b8:ed:d0:94:94:26:50:
60:9a:a5:38:ee:1c:32:ae:5d:e7:d3:29:29:04:1c:39:0a:25:
96:07:f6:b8:05:7e:5a:4b:e4:b5:f3:45:b4:b5:a3:5b:52:ad:
96:82:7e:77:77:6c:a1:67:4a:63:ad:e3:85:d6:ae:d7:19:5d:
39:ec:e0:e4:ca:f1:a9:de:d4:5b:9a:c2:e5:f1:c2:76:0d:73:
ce:8a:1c:a6:10:db:41:bc:85:c8:10:c6:1f:30:9a:2b:64:ff:
cf:4a:f2:81:09:b1:3e:df:05:76:1b:bd:6f:0a:8d:7f:af:5e:
65:55:2f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:28:28 2025 by rpki-client