Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
File: t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft (raw, json)
Hash identifier: 8mvedCb+BICZBsd9/KLsV5KQclS05X8MZ6OmluHhl10=
Subject key identifier: 70:1C:40:CC:56:4F:71:2D:BF:AB:49:AE:87:68:16:DF:FF:C8:13:7A
Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Certificate serial: 0197CEDFE97CED2F5DB1F93AC0382C8E013F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
Manifest number: 15C2
Signing time: Thu 03 Jul 2025 06:01:10 +0000
Manifest this update: Thu 03 Jul 2025 06:01:10 +0000
Manifest next update: Fri 04 Jul 2025 06:01:10 +0000
Files and hashes: 1: 4tvYqBz30c-0SHwQf2CtT0VNBPQ.roa (hash: qCyQEU6OdMbxdWiqsxkcJvwc0b3lfRGI0KL0oWxXAXQ=)
2: 5BiiR8tyxMqnVkrCR-JVCe5thJE.roa (hash: Hg2Lr4BrUeLiGXPiTTswxDVsunI16iUbiaP/wD6FGp4=)
3: t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl (hash: VKtfyc/kJFV/zI0y7yDoat+pe+1tzvjp2DCh/rcnhqY=)
4: zmgQ_aWhp6cEGx4y0seWn4Gsss4.roa (hash: /bqbphYKFU51MVxXzZqrdhuQ80/Caxadp1A0xOJ6vp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:df:e9:7c:ed:2f:5d:b1:f9:3a:c0:38:2c:8e:01:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b
Validity
Not Before: Jul 3 06:01:10 2025 GMT
Not After : Jul 4 06:01:10 2025 GMT
Subject: CN=701c40cc564f712dbfab49ae876816dfffc8137a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3d:db:4c:bb:f6:9d:03:cc:db:83:53:73:78:
64:8c:a7:e0:3d:26:fc:50:74:c9:01:99:86:1c:22:
ea:3b:f4:f7:4c:ed:41:6c:00:3b:40:6d:1e:eb:86:
82:9e:8c:7d:7c:ae:1d:17:69:68:ab:67:b2:1e:a7:
c5:05:fa:90:21:06:29:f0:6f:ce:81:b8:ee:df:e0:
5c:74:14:5e:a4:cc:71:d2:ed:ce:cd:48:cd:5a:05:
f4:e0:1e:8e:33:8e:ab:a5:cb:96:ba:ae:04:2e:7a:
00:4c:dc:df:ab:17:cc:07:1d:87:80:76:93:a4:49:
6f:05:eb:86:9a:2a:bf:2b:33:7e:e9:b4:43:f8:d7:
fa:23:4c:b4:02:41:c1:04:b5:95:79:81:ac:a8:54:
8e:74:df:19:40:cb:62:73:54:be:6b:6d:98:c3:e6:
c1:ad:c9:37:41:6f:eb:29:e8:a9:22:f3:81:ba:81:
76:24:0c:3b:d4:ba:cf:7f:8e:f5:0f:ac:d7:82:40:
a3:ab:e0:76:3b:0d:5c:a0:20:a6:33:22:29:42:1d:
d4:22:f0:0c:ea:ba:e7:d8:ef:cd:82:8d:01:68:57:
e3:0e:23:fb:6f:86:13:28:ee:84:21:31:22:98:ab:
d2:f1:69:65:76:83:90:55:9c:ac:a6:0c:66:6d:1c:
e7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:1C:40:CC:56:4F:71:2D:BF:AB:49:AE:87:68:16:DF:FF:C8:13:7A
X509v3 Authority Key Identifier:
keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:83:18:19:91:c0:1c:e9:47:04:a1:0c:f9:82:71:51:38:13:
b2:f0:25:21:e3:0b:24:63:fa:52:47:16:cc:f1:c1:7e:99:ea:
d2:4d:77:fc:bb:dc:dc:0c:5d:a5:42:2a:1e:d5:66:61:27:fb:
37:3a:5c:58:57:2c:a7:8f:e1:5e:f1:2b:2d:d3:3e:c7:b7:59:
92:54:78:99:26:00:6d:14:fe:8a:91:40:45:27:49:39:fd:9f:
39:b2:d9:ef:4b:3e:26:1f:c7:7c:88:c7:eb:d6:b0:30:16:8c:
1f:4a:95:17:7b:5b:a7:c3:f2:6b:12:d4:c8:7d:5f:48:0f:5f:
72:af:0c:de:af:29:46:62:c9:9b:2b:2a:04:2a:e6:21:5e:46:
8f:3c:fc:ec:c0:22:e6:14:ae:4a:84:da:c2:98:56:52:db:60:
0d:2b:e6:e3:e9:ad:58:19:0e:bc:a1:2b:0a:b6:95:ee:c2:b6:
fb:21:00:b0:34:56:ae:38:3c:dd:ea:87:7e:a4:34:ac:fd:30:
71:93:d2:81:ef:3f:44:28:18:6e:11:ee:f1:1d:40:a3:dc:63:
4d:30:f6:ad:64:ab:84:77:ea:d8:9c:3b:d5:0d:e4:e3:4d:4d:
72:d8:e7:37:5d:5b:6b:65:3e:11:d8:27:1f:f5:0b:a2:55:2e:
e9:a4:1d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 11:33:12 2025 by rpki-client