Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
File: rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft (raw, json)
Hash identifier: ZPPUSIDALPElmIkmt9vKbx97fsIL3Vb1yDl8KOptmoU=
Subject key identifier: BE:96:F5:E9:89:CB:2D:9F:2E:40:A4:9A:DC:D7:05:7A:24:6F:C3:FF
Authority key identifier: AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
Certificate issuer: /CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Certificate serial: 0197B6D79D6A55BAFA50277E593989DFC653
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
Manifest number: 15C8
Signing time: Sat 28 Jun 2025 14:01:13 +0000
Manifest this update: Sat 28 Jun 2025 14:01:13 +0000
Manifest next update: Sun 29 Jun 2025 14:01:13 +0000
Files and hashes: 1: H6es8_RNukCcmpKSU4VhKyWzlXU.roa (hash: MWVORumqBLMSV+ezNkSFN1TihrvCnAOWBchr7+/zYAg=)
2: dBMJpVLGRQoTKZQpQqDPu3BVMTw.roa (hash: y7lqJ7uW4lmOcL9eEyRfqx2SbaFMyQX43zjAsjfpk98=)
3: q9V7Xus9JaAOVqWDDUO8V0frUJg.roa (hash: BOqisVRqsjZEstDgk3UUu1R2Uohg8LTPrkUF2hoHl7o=)
4: rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl (hash: wlwl7XvDYxnWJ21stiYHsMsTsj3UB6N+cLZ9gvuDAL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9d:6a:55:ba:fa:50:27:7e:59:39:89:df:c6:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac67c93b8225d04c3761c13cefee5f8329358e23
Validity
Not Before: Jun 28 14:01:13 2025 GMT
Not After : Jun 29 14:01:13 2025 GMT
Subject: CN=be96f5e989cb2d9f2e40a49adcd7057a246fc3ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:bd:c8:08:95:fa:b5:41:ca:2c:35:30:93:33:
03:bd:90:55:c9:a1:91:93:7e:a0:bb:00:98:81:2c:
da:8c:66:97:92:a1:04:c5:27:40:fa:ad:aa:2e:72:
c8:02:34:d5:4b:07:d5:e1:ce:a0:36:5f:39:37:7a:
a5:43:dd:a9:65:90:1c:4c:3a:40:29:fc:93:06:b7:
0c:91:72:b1:be:6b:4d:30:5d:ac:90:33:56:74:37:
4d:a3:21:ee:23:cc:d5:84:26:21:e6:1d:8d:85:fa:
a7:5b:dd:50:42:81:82:eb:fe:ac:ce:3a:f1:f5:93:
45:d6:7b:51:36:23:2a:8d:f0:cf:b3:a9:df:fc:cb:
93:14:16:f7:57:f8:0f:a9:a7:b3:4c:32:a0:b9:fb:
3e:e1:7a:50:fe:42:51:c6:ab:66:d1:e1:89:83:d6:
7b:67:7d:3c:30:a0:ea:17:32:b5:8f:10:07:2b:85:
ea:47:27:97:ab:e1:98:6c:de:64:2d:b4:24:c0:bc:
d9:9c:c3:82:d4:61:a8:8d:e8:e2:b7:53:64:94:45:
a0:ca:25:3b:3c:48:c9:20:eb:c7:fa:bc:0c:c1:7b:
d2:dc:3d:61:bc:1c:3b:5d:52:f5:f6:4e:d1:8a:35:
c3:a5:03:f4:2f:53:4a:9e:d5:68:5f:63:21:50:91:
84:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:96:F5:E9:89:CB:2D:9F:2E:40:A4:9A:DC:D7:05:7A:24:6F:C3:FF
X509v3 Authority Key Identifier:
keyid:AC:67:C9:3B:82:25:D0:4C:37:61:C1:3C:EF:EE:5F:83:29:35:8E:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rGfJO4Il0Ew3YcE87-5fgyk1jiM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/ac8e6f-5f83-449b-8c9d-77c1048422d8/1/rGfJO4Il0Ew3YcE87-5fgyk1jiM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:2b:b1:de:8a:bb:a3:d6:ae:7c:92:80:31:a1:56:20:35:f8:
cb:9b:1f:c2:20:47:93:cf:99:de:f5:76:d1:f9:b7:ed:65:09:
ae:12:4b:0a:f4:94:fd:f4:78:36:9e:17:54:08:07:2d:1b:b3:
be:07:94:7d:df:bf:ee:4a:41:98:c5:4b:87:0a:fd:c8:b3:ce:
4c:4e:cc:6a:2b:03:b2:df:ab:bb:a2:41:3a:a4:ca:f5:a8:6e:
19:58:73:02:f0:2a:dc:17:f1:84:7e:a9:58:36:f5:30:8a:8e:
a0:d1:b0:5b:3c:6c:db:f1:c4:d0:84:c6:88:64:14:4b:c8:f3:
24:2f:5d:62:dd:23:13:82:3b:15:31:7a:e9:d9:0e:7a:bc:0b:
88:b4:df:a8:66:1d:2d:ec:9b:e9:5e:ee:9d:91:37:7e:1a:13:
09:96:33:9a:0c:21:6b:b7:ab:bb:f2:a7:48:6c:d5:36:a9:67:
ab:62:ac:95:73:ee:a6:a4:a1:7e:2e:6c:55:66:39:6f:c4:6a:
bf:32:7b:5a:45:f0:9a:46:a8:b0:0e:75:27:66:97:ed:83:b5:
5b:d0:2e:25:71:fd:bb:36:5b:71:8a:d4:26:18:5d:f6:6e:86:
6c:af:b1:a6:4f:47:7c:7a:e2:a0:74:94:38:d2:49:c3:b1:73:
c0:31:39:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:31:12 2025 by rpki-client