Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
File: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft (raw, json)
Hash identifier: T1xDD2cf5LTrT0UjrZPO/ow8zBm1nzZ91/Av74VRtZI=
Subject key identifier: 5A:93:F2:EC:EE:C1:8C:13:99:65:21:D9:0D:0D:49:73:2B:44:0E:98
Authority key identifier: AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
Certificate issuer: /CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Certificate serial: 0197B82118EE67A9BB425BC756C11C009B06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:01:06 +0000
Manifest this update: Sat 28 Jun 2025 20:01:06 +0000
Manifest next update: Sun 29 Jun 2025 20:01:06 +0000
Files and hashes: 1: 5jA5Josk9BqU9IUqGDRntTJ49ME.roa (hash: 32eH1PvNSkInyLcgYxDyHSfueWB890pDkTVZp7L2USg=)
2: r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl (hash: +eJNkO5frBvrFBv3Dy9jrzmGgqymrM3dP+IyK5cCl8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:18:ee:67:a9:bb:42:5b:c7:56:c1:1c:00:9b:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afb04b1355e5d6ed2223249630ac8b9f7439aee1
Validity
Not Before: Jun 28 20:01:06 2025 GMT
Not After : Jun 29 20:01:06 2025 GMT
Subject: CN=5a93f2eceec18c13996521d90d0d49732b440e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:91:cf:ec:b5:40:77:28:cd:c1:31:5e:6a:8c:
3a:e8:03:ab:63:c3:5a:16:de:94:a2:38:77:d8:92:
e5:f5:2e:62:58:9f:f0:43:c0:8f:cd:3d:a3:80:ec:
0f:05:3d:e4:15:90:24:52:0a:56:c7:46:98:b4:8c:
52:65:40:dd:63:ae:24:6b:68:18:2c:dd:38:dc:32:
f9:3b:1d:e6:1d:63:3f:cd:30:bb:13:7e:c3:81:51:
c6:bb:71:3a:04:cc:b8:c0:65:59:1f:2f:a8:bc:fd:
2d:34:32:e7:4d:60:20:79:b6:03:6d:d0:28:75:cf:
7f:bf:c3:18:05:40:0c:f2:3c:13:66:21:4d:61:4b:
0d:a3:0d:3e:ad:14:e9:cf:e0:ce:91:c3:76:c5:1b:
8e:4b:ef:49:47:1c:15:3e:b9:28:d1:30:c4:34:e0:
33:6e:6a:e5:ba:cb:07:08:05:dc:57:c3:91:5a:53:
6a:b6:51:73:1a:a4:30:8a:ea:3c:6d:c5:d5:b3:62:
ae:5a:64:c7:24:33:d9:50:ec:b6:35:d9:54:7b:26:
68:14:9c:7f:39:ec:9b:05:d6:03:33:df:71:fb:cf:
f3:c8:97:54:32:86:57:02:26:e5:82:5c:15:a1:7a:
c5:14:c5:4f:e6:a6:8b:df:a3:fe:05:54:58:54:9d:
e7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:93:F2:EC:EE:C1:8C:13:99:65:21:D9:0D:0D:49:73:2B:44:0E:98
X509v3 Authority Key Identifier:
keyid:AF:B0:4B:13:55:E5:D6:ED:22:23:24:96:30:AC:8B:9F:74:39:AE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/e2b494-c0b2-43f4-bc4d-a6f4f0f4f72d/1/r7BLE1Xl1u0iIySWMKyLn3Q5ruE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c9:34:6b:64:a9:bc:9b:95:5a:b0:d8:22:fe:78:35:a5:e5:
22:12:ef:55:39:1a:97:4b:9e:a5:f6:cf:dc:e6:db:db:ea:40:
f6:65:94:4a:7f:d5:b6:a9:e6:bd:34:51:aa:38:65:19:ad:99:
24:07:c6:00:86:d9:fc:80:1a:70:fc:20:01:44:8d:2e:d5:3f:
6b:f6:5f:32:c0:cc:b6:99:d6:53:c8:87:50:a3:bb:41:28:a8:
27:57:7e:64:39:08:b5:61:f7:b6:d1:7a:ba:08:6d:29:92:ef:
c4:b4:12:b2:39:77:33:1c:b8:50:4a:06:53:50:44:15:a8:8c:
39:d0:bc:c8:73:c9:45:39:53:89:ac:48:84:47:6d:58:cb:cd:
55:8c:55:96:9c:c7:ca:99:d1:12:9f:50:0c:25:9c:64:84:05:
17:be:28:f8:db:bb:ad:b0:53:ea:93:e7:90:9e:11:8e:43:bb:
e9:b9:0f:63:e1:13:dc:ca:3a:0e:76:0e:7d:d4:66:ff:b3:c6:
06:35:0a:b7:2c:ec:5d:5c:fd:4a:d7:9f:56:78:66:bb:98:8e:
6c:c9:fd:f0:e0:ae:95:65:a3:6d:d8:fd:05:62:f7:13:ac:6f:
49:d0:1f:09:88:f7:ca:59:5d:73:e7:26:82:25:b5:2c:d6:e5:
31:cc:03:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:42:00 2025 by rpki-client