Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
File: Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft (raw, json)
Hash identifier: m8wWQRjGCS9z+VS2ypSH7nEsdLPuTsr1/bApnY1OINk=
Subject key identifier: B0:15:3C:4D:D9:D3:7B:80:A1:AE:8D:1F:07:A1:51:A5:7F:DA:58:41
Authority key identifier: 0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
Certificate issuer: /CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Certificate serial: 0197B6329E8EA8F376104655093FD153875D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:01:00 +0000
Manifest this update: Sat 28 Jun 2025 11:01:00 +0000
Manifest next update: Sun 29 Jun 2025 11:01:00 +0000
Files and hashes: 1: Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl (hash: UR4Jro2hEH6JRLdSdo06qifL/RikB/XIk0qphsBP+8g=)
2: oMIi1pEOv1jeJYH_D8-bsx7eN14.roa (hash: L6yUeA60s1oezRJ3/Hwo53eHZ4mzV9eSXG/AVf/FB4E=)
3: ylHfNJxivzSDEST10fWDem7vKnQ.roa (hash: A5nWEbRO5hkEAdJU6Q2r7yPo+a47nvfcEeJhbXc7xME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:9e:8e:a8:f3:76:10:46:55:09:3f:d1:53:87:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a5ec6e0660db6f625b978be0d5ee71c2dcd465a
Validity
Not Before: Jun 28 11:01:00 2025 GMT
Not After : Jun 29 11:01:00 2025 GMT
Subject: CN=b0153c4dd9d37b80a1ae8d1f07a151a57fda5841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:be:0d:6c:d9:cd:4d:11:27:21:f5:5e:ad:c2:
ea:56:ca:6f:54:84:f4:de:f7:86:51:8b:a0:94:53:
97:ef:8d:f3:75:b5:ea:02:15:b3:43:ae:b5:55:e6:
cb:aa:49:5d:54:b6:07:16:0e:54:eb:88:d2:aa:5e:
26:c5:b3:ad:50:9d:79:32:29:ac:e8:66:94:6f:16:
b6:e4:7a:4b:fd:59:63:f5:c9:4e:79:55:e5:d7:5c:
b3:a8:d2:ce:e4:e0:49:1d:ef:fc:1b:c3:e1:c0:ad:
da:e7:74:0e:03:84:2d:aa:9f:3b:7c:04:a3:4c:2b:
45:95:0a:30:86:c3:c3:98:fd:9c:9c:7c:7c:b2:cf:
91:59:40:f6:c8:f0:57:81:7f:7d:28:c2:1e:85:98:
2e:41:db:56:45:0e:8f:42:e7:9e:f3:09:ff:b6:b9:
e7:3d:fc:a7:4d:3b:18:a0:bb:03:bf:8d:5c:17:ed:
fb:97:68:33:bc:f9:58:b2:f0:b1:37:0a:f0:c3:8d:
60:d2:5b:5e:1b:a7:36:5e:81:45:c0:dd:1d:c9:47:
9f:81:3f:d5:b4:d8:45:c0:91:6e:b0:e0:c6:cd:36:
54:4f:f2:da:b1:9e:ed:cb:68:32:7f:43:b1:09:fa:
74:4c:cb:48:b1:1d:39:5e:99:94:14:cf:1c:9c:b5:
5e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:15:3C:4D:D9:D3:7B:80:A1:AE:8D:1F:07:A1:51:A5:7F:DA:58:41
X509v3 Authority Key Identifier:
keyid:0A:5E:C6:E0:66:0D:B6:F6:25:B9:78:BE:0D:5E:E7:1C:2D:CD:46:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cl7G4GYNtvYluXi-DV7nHC3NRlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/5776a3-06dd-4980-8f6f-d3e3c78e7c44/1/Cl7G4GYNtvYluXi-DV7nHC3NRlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:0a:f0:4c:ee:00:16:d5:2c:90:2f:e1:4d:d4:6c:f2:ad:de:
1f:fa:86:2a:f7:c0:7c:2d:a1:8c:41:82:a8:94:be:89:32:ff:
97:e3:32:71:53:48:09:14:a2:5c:bf:a0:74:53:1a:31:49:43:
48:ac:4c:27:f3:ee:66:83:9c:13:73:b2:86:1f:48:20:c7:62:
47:95:05:4d:f3:7e:2c:30:57:31:cb:f6:46:a9:7e:2d:83:6f:
b8:29:e3:9e:71:e9:14:63:fe:57:b2:ee:b6:59:5f:cf:f0:51:
2d:e7:ad:a9:df:31:72:7a:73:0f:e6:dc:46:75:5c:9d:00:8c:
9a:9a:69:73:39:eb:5c:29:8c:69:20:22:ba:08:c6:37:5b:cb:
56:d4:11:df:b1:fb:f7:5b:12:53:a6:e6:d2:34:24:f8:d3:6d:
ce:06:7f:96:d3:72:d8:66:8c:3b:77:6c:3d:58:b2:e8:90:1b:
3b:7c:c2:6c:c9:d3:76:51:70:41:3f:80:7f:29:6f:1c:9d:62:
a9:fb:7d:a2:34:fa:5d:1d:b3:66:28:ed:15:7a:d5:fd:e6:cc:
f3:6a:5f:a4:4c:9b:fe:38:29:53:81:78:d2:54:db:c5:fb:f5:
7b:b9:d8:ae:6a:21:08:01:d1:5b:17:51:4d:38:ed:be:d6:d5:
e6:92:44:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:49 2025 by rpki-client