Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
File: 0rERWbctQBXthntCt4Q4Hl2VWo8.mft (raw, json)
Hash identifier: vG4q+a3WKpyKNn+8yyF/bUJemn77lLrxsdsnNtY9+B0=
Subject key identifier: F8:A5:CE:16:BC:78:69:70:05:37:F6:A7:88:67:96:A2:4A:69:1C:B4
Authority key identifier: D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
Certificate issuer: /CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Certificate serial: 0197B77C00E21DA53C78A7432522A7E884EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 17:00:46 +0000
Manifest this update: Sat 28 Jun 2025 17:00:46 +0000
Manifest next update: Sun 29 Jun 2025 17:00:46 +0000
Files and hashes: 1: 0rERWbctQBXthntCt4Q4Hl2VWo8.crl (hash: j59ZWIKSrWupbq+2KygOWQlIVEZTQV/7UObEnczzCFw=)
2: cl3GADBIa5-t9wHD_fNk8JDv5PM.roa (hash: H9R6zlOL/gViduYKRIYyM+avR4L6nr/tioY61On5qcw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:00:e2:1d:a5:3c:78:a7:43:25:22:a7:e8:84:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2b11159b72d4015ed867b42b784381e5d955a8f
Validity
Not Before: Jun 28 17:00:46 2025 GMT
Not After : Jun 29 17:00:46 2025 GMT
Subject: CN=f8a5ce16bc7869700537f6a7886796a24a691cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0b:d0:8c:7c:66:5e:7c:bc:f1:cd:2b:1f:d7:
e3:97:b6:02:e1:a1:92:72:fe:47:82:70:86:5c:dc:
55:ee:49:de:e7:e0:36:bb:ff:c0:90:df:67:2b:41:
da:f7:06:72:0d:35:ed:79:8e:fb:fe:39:f0:7c:18:
ac:e8:8d:0a:9e:5f:58:cb:e8:dc:c4:b6:bd:25:fc:
db:4a:a9:93:cb:60:e3:ce:3b:59:53:29:92:f5:aa:
4b:4e:ce:22:a2:0e:49:5f:dc:dc:5a:1d:1e:f2:3d:
b1:cc:c8:97:a9:8b:2f:48:21:64:ac:fb:88:61:4b:
bf:da:3f:6a:6b:df:5e:b1:86:cb:98:5a:65:99:21:
33:a2:f4:cb:be:fc:2a:46:25:69:54:11:99:dc:c5:
b9:a6:f2:57:d4:74:85:70:19:02:55:45:95:03:eb:
4a:d1:70:92:2c:7b:36:51:cc:4b:71:4d:da:f2:98:
f1:98:0d:bf:32:1b:ca:63:97:48:8b:e0:05:c6:c3:
22:65:80:63:ec:11:0a:11:de:34:c4:3e:c2:6b:d8:
05:9a:f2:51:17:0b:51:d4:53:d0:5b:ea:6c:9b:94:
cd:ad:c4:54:60:7c:88:dc:66:3b:aa:25:ae:92:4b:
0f:7d:c4:1d:9e:56:23:1b:5a:79:ce:93:14:b8:57:
ec:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:A5:CE:16:BC:78:69:70:05:37:F6:A7:88:67:96:A2:4A:69:1C:B4
X509v3 Authority Key Identifier:
keyid:D2:B1:11:59:B7:2D:40:15:ED:86:7B:42:B7:84:38:1E:5D:95:5A:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0rERWbctQBXthntCt4Q4Hl2VWo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/9c091b-f879-43f7-9020-f5b94959c9f7/1/0rERWbctQBXthntCt4Q4Hl2VWo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:8f:23:a4:91:b5:80:1b:2f:53:c8:c3:17:c4:2b:58:45:40:
97:41:48:41:74:a7:6c:86:74:65:b8:75:2d:86:03:f2:2b:1c:
67:5b:fa:6f:5f:80:5d:30:d6:b4:fb:fc:1e:9c:4a:f6:4d:da:
f8:0a:95:1d:54:52:38:4d:a1:13:96:09:d5:f5:e3:f8:eb:5a:
c8:af:88:ff:1b:d3:a5:7d:55:5e:e1:01:1b:8e:d7:a4:90:01:
47:fa:08:40:5b:39:04:ee:d4:c0:6a:79:fe:e0:b6:20:c8:ea:
84:b5:69:b1:24:b2:3d:83:2c:29:52:45:22:89:28:3e:1b:ac:
76:f5:50:71:65:97:e8:54:5d:43:f7:81:f2:61:0a:4e:71:46:
4a:6f:90:01:9e:97:37:e2:89:5c:6c:9e:51:07:b2:6b:0c:b0:
3e:79:98:6d:71:0c:15:83:b6:99:41:e6:e3:fa:dc:cb:97:d0:
b1:b7:72:08:2b:55:13:ed:f6:fb:fb:24:f3:38:71:9e:7c:f7:
67:1a:48:9f:c2:d9:c9:e0:63:bb:7c:3f:96:9c:7d:ba:56:9b:
04:74:9b:69:12:a5:c7:14:07:9a:8c:f5:43:03:27:a0:2f:d6:
6d:13:d0:8f:9d:83:b2:34:00:26:04:26:e2:76:20:7b:83:a9:
7f:65:91:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:36 2025 by rpki-client