Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
File: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft (raw, json)
Hash identifier: Zl1EA8kqHacKVDiClQ4qjFel2v9GqC/9VkgQ8cLNvcw=
Subject key identifier: 7E:ED:ED:D4:FD:1B:B4:93:40:6C:AE:CB:FA:58:51:41:9C:21:8F:36
Authority key identifier: B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
Certificate issuer: /CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Certificate serial: 0197C726AE5ADAE095E22D68D1CD1A64BA3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
Manifest number: 15C5
Signing time: Tue 01 Jul 2025 18:01:30 +0000
Manifest this update: Tue 01 Jul 2025 18:01:30 +0000
Manifest next update: Wed 02 Jul 2025 18:01:30 +0000
Files and hashes: 1: F0xtYGfQ_s_LJkUkk89IHcL9J5M.roa (hash: JVjlGGRIJlPuTdOW/N8SfdRvr3fAH3HHybxJ5aP4RD0=)
2: tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl (hash: YV1TXkinJVHvJGB9pEkMEvtOWjdoRyQoZAfw1M561uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c7:26:ae:5a:da:e0:95:e2:2d:68:d1:cd:1a:64:ba:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4bdc376a159d05e2af97176a3eba8360e60d176
Validity
Not Before: Jul 1 18:01:30 2025 GMT
Not After : Jul 2 18:01:30 2025 GMT
Subject: CN=7eededd4fd1bb493406caecbfa5851419c218f36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:9d:c0:48:a4:4e:c5:7e:30:00:f4:a6:b1:
f5:b2:ad:70:19:0c:62:00:3e:65:da:31:c1:b2:10:
c8:39:c7:49:4e:47:d0:ab:c2:ff:e7:0a:c1:49:a2:
eb:91:6a:24:08:f5:6f:a2:46:d3:9f:13:5d:98:20:
e7:45:ce:6b:12:06:cf:4e:19:29:70:a8:be:20:0c:
e2:b4:e1:33:f5:42:10:d3:6c:8d:1c:ca:f3:61:d5:
d8:45:4e:b3:3f:30:13:08:cf:4d:89:07:1b:0b:08:
68:77:9d:fc:b9:4e:e5:0f:2e:40:98:e5:c3:45:c5:
65:aa:f1:31:e9:5c:26:8d:74:2c:e5:30:33:64:87:
14:f3:45:61:fd:1c:e7:be:f6:f3:52:f3:a4:2c:3a:
eb:ad:df:b8:87:3f:80:5b:7c:00:8d:7f:bc:23:19:
39:ef:d7:95:ac:1b:1e:ef:83:8c:cb:c9:9d:8f:15:
dd:66:d1:f7:c8:cc:d9:3c:5b:5e:b6:03:da:3d:b5:
ab:6d:f2:2a:64:1d:ae:fa:7e:67:1f:1e:be:b9:67:
a5:06:27:67:46:38:0a:54:fc:af:d6:fb:91:28:4a:
a4:1a:85:a8:1d:49:6f:02:79:50:aa:18:70:1e:74:
f3:28:3b:5a:9f:9c:45:31:93:4c:38:62:4d:99:06:
9a:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:ED:ED:D4:FD:1B:B4:93:40:6C:AE:CB:FA:58:51:41:9C:21:8F:36
X509v3 Authority Key Identifier:
keyid:B4:BD:C3:76:A1:59:D0:5E:2A:F9:71:76:A3:EB:A8:36:0E:60:D1:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/40ea14-dc50-4aa0-aa85-28d010603529/1/tL3DdqFZ0F4q-XF2o-uoNg5g0XY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c0:0e:68:2e:b3:56:e7:9c:79:59:52:2f:85:50:3c:f4:3c:
98:5e:d4:b8:d1:f1:d7:38:35:34:b9:d0:0f:82:32:23:5c:69:
04:3d:ba:39:f7:16:d2:04:0f:1e:ba:30:ff:bb:4e:75:a0:45:
d9:f2:f2:86:25:47:ba:b1:88:82:37:21:7f:49:a1:48:00:0b:
77:f6:7c:a5:8b:4c:f2:95:bb:0b:7a:68:c9:60:68:9f:28:99:
55:0f:c2:6d:4f:97:b0:13:79:f1:aa:1e:56:8e:51:5c:81:41:
80:b5:b3:3e:89:da:cc:92:ed:2b:20:a3:9e:25:b9:22:29:31:
e6:77:1e:64:83:e5:17:fb:bb:ea:17:16:67:fc:46:53:c5:50:
c0:6c:c9:e0:5c:ea:09:c6:69:08:db:81:bc:e3:6e:03:d1:f4:
ba:f7:6a:31:cf:27:70:37:e1:96:7e:7a:1e:e2:49:a4:0e:c9:
0f:50:16:a3:2a:f9:67:a6:cd:fe:87:c5:ae:dc:55:11:64:d4:
1b:a5:50:74:69:a5:a6:f0:f4:b7:b2:af:ca:e5:3a:4f:47:56:
08:35:6e:0b:72:81:b1:43:d7:8f:b3:d4:58:4e:bd:5c:fe:5c:
f9:1f:1c:d7:db:6a:26:35:06:f5:87:0e:d1:3f:5d:c4:8a:08:
10:63:a8:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 22:37:26 2025 by rpki-client