Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
File: deBbwhsqbxAzcR_8pkkcbDDOWko.mft (raw, json)
Hash identifier: 47u6NdPbhq8i0eu5pRIgAgP273YLYFgO9pD3eWM+cmM=
Subject key identifier: 8D:F4:F4:2B:89:0C:26:C3:B1:DD:D5:28:BC:FF:2E:D6:D7:74:06:0A
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 0197B77C30833B9BE3569BB1DC8682C214B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
Manifest number: 15C0
Signing time: Sat 28 Jun 2025 17:00:58 +0000
Manifest this update: Sat 28 Jun 2025 17:00:58 +0000
Manifest next update: Sun 29 Jun 2025 17:00:58 +0000
Files and hashes: 1: UJAjdPQrd8bP5k3ucoOuD61_MT8.roa (hash: ugk9F1DdJco8dK5O++Cvmb5dblVQF4BV4yb8wudILQ0=)
2: WkmHxNpKrmAzpx_FXkIaqhpVbpg.roa (hash: +AeFew5fsUdx9Fz3OOuJ7ZKCrATyNvcvfW0fCxc+tvg=)
3: deBbwhsqbxAzcR_8pkkcbDDOWko.crl (hash: 5IELVxVnafSDjyNVv+z4hH7pBcQL+XMNk/y2Y0YgH50=)
4: imLX_iKSVxIt55dbqRMupQNb-6o.roa (hash: OviNWocn0RhLkHHteMWnzyr2rnMguzIPeb1JC9urBc0=)
5: iwdwl1HuN2YXg9VICxrnQ2L8T_o.roa (hash: tLBry0LnEHMR25EGcYFuNe2nISzjy4sXmppIiMI5cVo=)
6: ju7dlcjXTVtzrpg-cXuTrngFgtw.roa (hash: Odms44ovs7hGv3jdYt/7+590lUec8LGS69mCjmZU8q4=)
7: oDzpo9P1CSTveVeS7HO-MB_9-so.roa (hash: TBsZnZ6Hce91sBTky4DlDhCeMhJRvacSOmd1DwZB9+E=)
8: rsxSpj9moP8LtPzNvFBSE3jnhTY.roa (hash: EI5toUib0yn2k83FMVjkqamZ8A/+xIBPYiOu2bZVLHc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:30:83:3b:9b:e3:56:9b:b1:dc:86:82:c2:14:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Jun 28 17:00:58 2025 GMT
Not After : Jun 29 17:00:58 2025 GMT
Subject: CN=8df4f42b890c26c3b1ddd528bcff2ed6d774060a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:bc:72:f4:d8:6d:6b:7c:2c:79:34:99:62:20:
3a:16:c1:a0:76:3f:35:f6:31:0c:cb:c4:8d:23:ff:
0b:94:b7:6f:a7:cd:e0:3c:52:4f:ce:b8:49:f5:29:
ae:45:dd:07:14:54:93:62:95:c9:91:98:3b:0a:4f:
12:b7:19:de:90:7d:ef:05:3a:9d:15:f4:63:fc:7e:
c1:8f:4a:0c:b1:36:11:08:5a:e6:7b:65:b8:6c:50:
46:37:55:52:4c:4a:d7:4b:62:d5:0b:03:87:3a:d3:
47:f6:0f:5b:c8:0d:1e:14:03:d0:1a:1f:67:34:17:
aa:30:35:6b:b1:2a:9a:cc:99:2d:55:9b:a3:92:7f:
22:3b:b7:ae:0b:30:f7:df:92:7d:0c:12:45:9c:33:
7a:c1:6c:e4:cb:5a:bd:ed:dd:08:0f:62:04:bb:2b:
4a:dd:44:d1:06:a8:68:64:4e:27:b5:33:0b:66:ca:
b4:17:22:cf:04:0f:3c:13:d6:8e:6c:ed:24:1d:46:
51:48:4d:d3:15:31:5a:d2:ab:b4:09:f1:da:a2:b4:
23:1b:da:13:bb:58:48:4e:9c:91:af:e8:3f:ad:19:
f3:a5:bc:b0:91:de:42:90:b0:85:d5:24:75:77:30:
47:2f:82:d0:19:6f:d5:db:99:3f:3f:ac:8e:32:d2:
70:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:F4:F4:2B:89:0C:26:C3:B1:DD:D5:28:BC:FF:2E:D6:D7:74:06:0A
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:f7:e9:9a:98:fc:05:4c:fb:ff:87:46:0a:da:3f:d9:32:45:
97:47:22:f5:ba:71:40:84:32:f5:a0:1f:70:19:83:ed:5a:cf:
29:69:0c:51:b0:d4:76:96:a4:bb:db:7a:56:99:f3:d6:b3:b6:
2b:b2:ae:2d:1f:d2:e9:8e:8d:f5:41:12:07:ff:47:33:5f:4d:
01:09:0a:dc:92:f7:8d:ea:33:61:b1:a1:cf:73:c6:93:39:1c:
56:39:56:e4:d4:74:92:df:47:30:97:37:bf:fa:85:85:cf:77:
15:f3:5b:01:fd:f8:7e:de:a7:86:f7:d8:53:94:0d:49:03:06:
a1:30:83:b1:fc:e4:08:b1:dd:f3:0f:36:78:b0:ec:69:13:14:
5e:dd:df:50:5e:ca:e4:1a:77:cd:ee:47:7a:d3:ae:8e:dd:c8:
51:35:a2:b3:75:4b:2d:5b:0e:d4:2a:0b:2a:84:d7:db:28:e2:
1f:e6:2d:7d:cc:b3:63:75:b9:4a:b9:e9:fb:36:8e:41:0e:2e:
2a:ce:44:ca:8f:d8:00:99:de:a8:91:ec:96:95:e6:b6:9c:69:
ec:25:2f:df:ca:5f:67:90:50:2f:dd:b3:03:7c:40:fc:a7:c6:
15:b5:02:62:cd:33:65:3e:19:55:31:a8:8e:26:9e:76:ae:8d:
fb:d3:f6:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:52 2025 by rpki-client