Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
File: Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft (raw, json)
Hash identifier: MT1U/7pADNu5PBgX2JEwWsXZiw+4tYbC8q1J74TM8bs=
Subject key identifier: D5:75:AD:99:E4:D8:39:6B:B6:42:E2:3D:36:1D:03:8D:E2:A6:69:FA
Authority key identifier: 49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
Certificate issuer: /CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Certificate serial: 0197B6A09E5FABF9DF082142425A746F2614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: 7MtM04j_v2k1Wph2OgnR4TG2Sv8.roa (hash: 4itzuX/fQ15qNQ7YFYgNHc2z9oC3AqKBZmDxx9ZMouE=)
2: Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl (hash: fW5k9QAq6gKsKs3gHYK1OXeaAcJjob8HaJYGU3uI9OM=)
3: kx9kPAQ67ntw1Xkq0X26moD-pwk.roa (hash: X9S/3YSjUgYxw6y4t3NQ27+L1d2kR0+Z9uu+3WHTnVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9e:5f:ab:f9:df:08:21:42:42:5a:74:6f:26:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49af2153f02409a464e4d7461c802d4b8dd10dff
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=d575ad99e4d8396bb642e23d361d038de2a669fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:22:50:ec:b4:3e:23:ed:79:e6:36:2b:c3:dd:
ce:48:aa:9f:6a:83:6f:2d:17:6b:32:98:4c:22:bb:
cb:78:4b:77:46:e8:5a:cd:3e:d8:d2:b4:0a:2a:f3:
f5:9f:f5:26:6e:e5:7e:ef:1e:24:4c:a6:f4:3b:e1:
8d:f2:e5:86:90:bf:03:ae:16:c9:f2:07:c9:9b:b2:
c3:60:d6:69:b6:ef:70:15:1a:9c:aa:b6:ac:12:ef:
e9:ca:25:a1:f8:ea:2a:aa:42:45:25:06:29:ee:ab:
8a:ec:1f:44:92:23:66:f2:f6:28:01:1c:68:0e:69:
b1:71:e1:73:bf:cb:a1:04:37:26:f7:9d:13:1d:ee:
b7:a5:6c:44:87:41:dd:d9:ba:37:b3:61:b1:88:30:
a4:80:41:55:9e:98:d3:4f:0a:52:37:da:3e:6f:41:
91:43:8e:c8:e9:9b:47:48:b1:2d:6c:f8:d8:b1:b5:
7a:53:d8:95:96:22:c8:87:b8:30:ab:ee:78:ea:77:
14:db:84:bc:40:29:31:99:ea:fd:d2:17:1d:6f:3e:
55:09:7f:f0:6c:f0:c9:32:2c:99:af:1d:5f:2a:85:
20:40:48:d1:69:0d:5b:43:be:68:83:7d:1e:29:a1:
6c:43:a3:2f:ca:c3:70:1a:9f:b8:60:88:6b:68:ae:
2e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:75:AD:99:E4:D8:39:6B:B6:42:E2:3D:36:1D:03:8D:E2:A6:69:FA
X509v3 Authority Key Identifier:
keyid:49:AF:21:53:F0:24:09:A4:64:E4:D7:46:1C:80:2D:4B:8D:D1:0D:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Sa8hU_AkCaRk5NdGHIAtS43RDf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/eb25b5-71ea-469d-9484-4ea6dfb2e5d3/1/Sa8hU_AkCaRk5NdGHIAtS43RDf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:9f:36:ce:d7:03:5d:ce:be:06:e1:15:bb:0e:98:58:65:46:
f4:a6:76:19:70:98:c9:cf:04:ee:14:63:23:f4:20:19:6e:89:
a4:8d:71:5b:bc:03:92:8a:fa:5f:39:74:dc:43:af:bf:85:08:
fa:96:5f:cf:47:7f:38:38:15:1e:c3:d7:3c:ef:de:90:bb:20:
39:23:e8:df:cb:dd:74:82:bc:46:ce:12:cc:50:52:34:0e:63:
d5:3c:76:9c:c9:c4:3b:cb:53:15:0a:6a:0f:10:fa:91:66:fb:
42:2c:95:c3:27:f4:23:15:1c:66:f3:77:a4:7a:44:34:cd:84:
ae:bf:52:6d:95:e3:92:93:c7:82:d2:74:ce:37:2f:18:c2:0c:
0e:21:b2:97:fc:62:8b:2c:47:d7:3f:11:19:8a:f7:a4:45:e1:
c1:bd:10:34:ec:e5:c0:6e:62:34:7a:e1:62:d7:da:d7:64:23:
72:1d:ff:f1:9c:10:5b:6a:ed:e6:44:dd:d5:4e:d4:81:30:ee:
ca:16:3d:e3:aa:0b:66:88:5c:e2:96:5a:6c:6d:ab:c0:c8:9c:
7d:c2:8f:d1:c8:63:af:df:4f:de:ee:ea:38:aa:da:58:fc:9f:
c2:d5:79:8f:d9:49:44:25:68:ff:cf:19:0a:a4:6d:93:7d:ba:
c2:01:1d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:53:59 2025 by rpki-client