Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
File: MAsvRrpXChZ3v9WExygirZ2f5bA.mft (raw, json)
Hash identifier: v+kn42Me4NYMoVvCgaDDvTc8/cf2SqtE0V9+omNKpis=
Subject key identifier: AE:0E:E4:EB:DC:0E:A2:50:78:57:CA:89:9C:97:0A:E0:A4:C1:B1:70
Authority key identifier: 30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
Certificate issuer: /CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Certificate serial: 0197B70EE805ADFD62301D7C277935FB03F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:36 +0000
Manifest this update: Sat 28 Jun 2025 15:01:36 +0000
Manifest next update: Sun 29 Jun 2025 15:01:36 +0000
Files and hashes: 1: 1-OVd2lrgp3V2rXsCVF3GooeWhcE.roa (hash: KipoSrKFnoRi0oHmHkcFIq8GeOt3ELUBmEPs2x8pv/4=)
2: KR7i1VGMfp6wOUHzM68qa6NoxyE.roa (hash: ndyzcu48CDHqz3NgyXeDet5mZyI1DmpInGav6pQo5SI=)
3: MAsvRrpXChZ3v9WExygirZ2f5bA.crl (hash: vhG+H5cePIKmEY3rlJb0haO0a3v1oSE+paVS+WTn9DI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e8:05:ad:fd:62:30:1d:7c:27:79:35:fb:03:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=300b2f46ba570a1677bfd584c72822ad9d9fe5b0
Validity
Not Before: Jun 28 15:01:36 2025 GMT
Not After : Jun 29 15:01:36 2025 GMT
Subject: CN=ae0ee4ebdc0ea2507857ca899c970ae0a4c1b170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:53:54:35:9d:fc:fe:d2:af:23:22:36:03:c6:
cc:f9:b6:24:4d:a3:7a:96:1d:ca:8c:9b:f4:13:7e:
f1:68:30:06:69:7d:21:8b:cd:b1:e8:05:68:fe:86:
b1:2e:4d:0a:bd:c4:a6:99:90:9d:bf:7e:2a:02:69:
85:e0:69:9c:78:6d:de:f2:eb:20:98:0e:81:12:24:
af:6d:f1:07:82:cc:4e:e1:ef:7d:72:85:71:ea:8d:
c8:30:82:eb:f5:2e:35:9d:9a:88:60:09:69:74:8f:
df:4e:99:4c:ca:5e:92:52:7b:2e:51:21:b4:d6:de:
a2:cd:2a:0d:d2:d3:58:76:18:9e:40:5d:8d:69:1f:
16:32:59:d7:71:00:e7:6a:e8:10:05:c7:50:56:f9:
1d:f9:78:27:94:0b:a6:87:a1:ec:db:9c:fc:52:ee:
92:df:54:1d:e9:07:a1:e9:de:8d:2d:f7:ce:3d:25:
3c:1c:91:e4:50:44:ca:89:a2:7b:10:a7:db:fd:fd:
58:59:10:9a:b7:e6:b9:91:a7:1b:8f:3f:1c:90:e8:
f3:58:06:b1:cf:6b:f9:1d:ed:77:5f:ad:35:f6:b9:
54:81:ec:56:4f:41:94:86:08:4c:81:88:1c:ac:ae:
b1:69:72:63:48:33:ea:a6:19:dd:42:ac:b1:bf:21:
ca:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0E:E4:EB:DC:0E:A2:50:78:57:CA:89:9C:97:0A:E0:A4:C1:B1:70
X509v3 Authority Key Identifier:
keyid:30:0B:2F:46:BA:57:0A:16:77:BF:D5:84:C7:28:22:AD:9D:9F:E5:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAsvRrpXChZ3v9WExygirZ2f5bA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/bcb87f-2c17-4207-962b-98072936c518/1/MAsvRrpXChZ3v9WExygirZ2f5bA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:90:65:62:47:79:57:cd:7e:1c:08:ae:37:0d:5e:dc:a1:be:
d0:59:20:05:7e:05:a2:d6:87:0c:2c:f9:c0:6e:d8:26:0b:46:
cc:f0:89:64:72:c5:e4:bf:14:de:0f:50:ec:14:24:ed:3d:0f:
70:17:09:96:06:7c:65:e6:8c:42:cb:fe:9f:a3:b9:95:f9:3d:
f7:62:03:f9:40:1e:11:5c:5a:5d:60:7e:98:21:55:16:c7:ae:
66:9c:c0:85:84:6a:03:9d:b4:b2:cf:59:4e:d9:1d:25:70:2d:
22:47:37:8d:80:8a:0f:f7:50:5b:69:6f:61:85:31:d0:48:0a:
98:5f:c7:4c:b5:7c:d1:75:b3:9d:60:bb:3d:bc:25:c3:a9:a9:
c5:b5:cd:a6:1f:b6:d1:ea:4e:a2:bb:b0:2e:0b:4b:d4:c0:10:
dc:61:16:bb:c0:6c:f0:1b:e8:b2:05:8e:1f:c8:6e:42:d0:98:
31:97:10:cc:7b:92:22:f5:0a:c1:cc:10:75:c3:cd:21:09:ed:
5f:33:27:f4:eb:44:47:0b:ef:33:80:41:8d:aa:3b:c1:4d:5c:
ce:f3:b4:ff:39:7f:e7:d7:cd:6a:aa:79:88:e0:04:68:8d:0a:
18:2d:9c:8b:da:ba:44:7e:09:ef:1f:48:d4:1b:45:d6:08:83:
45:fb:ff:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:13:43 2025 by rpki-client