Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
File: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft (raw, json)
Hash identifier: gWdBu8lhu65rOyBDc4nKEisNP04ylD71BugA73mZ72w=
Subject key identifier: 47:7F:21:C9:B6:F6:42:65:59:D6:09:05:F9:E7:13:7B:34:A2:D8:8F
Authority key identifier: D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
Certificate issuer: /CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Certificate serial: 0197B6D795D717EEB32078B432D93655977A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
Manifest number: 0D3F
Signing time: Sat 28 Jun 2025 14:01:11 +0000
Manifest this update: Sat 28 Jun 2025 14:01:11 +0000
Manifest next update: Sun 29 Jun 2025 14:01:11 +0000
Files and hashes: 1: 15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl (hash: HiVGBI6DgqikbRClymbjK4lSHFER9N5bC6yadIyPCDQ=)
2: 4nov_nt6GEsQWCkcquH9SVS1bMU.roa (hash: Ylgq5sDsdH7k78HDH4UBmheF5iyrFEvrHVeDharXE+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:95:d7:17:ee:b3:20:78:b4:32:d9:36:55:97:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d796afc54fe63ed1740d5e896b3f591b1184f6dc
Validity
Not Before: Jun 28 14:01:11 2025 GMT
Not After : Jun 29 14:01:11 2025 GMT
Subject: CN=477f21c9b6f6426559d60905f9e7137b34a2d88f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:cd:63:78:75:00:b8:0a:09:5e:02:cc:cb:75:
ed:ea:a8:9e:ee:70:fa:6d:58:cb:e4:9f:dd:ae:e5:
99:4b:8c:8e:73:d1:6e:c0:b6:0c:5c:a3:1e:6c:56:
26:c2:ed:3f:c2:fa:5b:20:a1:65:a0:b1:4d:de:1d:
de:a7:5c:61:0b:6a:20:db:ff:15:22:15:e2:a0:75:
f5:5c:df:a1:d9:28:80:82:dd:89:7b:ce:54:00:d3:
fd:81:27:ca:78:91:77:14:9c:85:a0:72:22:ed:a9:
d6:e3:72:f8:99:70:9f:fb:f2:95:c6:90:05:13:6e:
df:c4:a8:3f:e8:08:50:b6:ae:de:f8:ea:77:d2:08:
5e:18:a8:30:8a:d3:8f:35:9f:38:21:76:e1:0f:79:
7a:83:cc:40:4d:6f:c3:9d:24:0c:86:6a:6e:1b:dd:
e9:44:40:ae:0f:e2:03:ea:24:dd:ab:21:a3:81:da:
04:f4:85:61:fc:4e:8f:9a:aa:25:40:66:86:3c:48:
5a:a3:2b:b0:4d:65:da:dd:85:a4:70:d5:a3:f1:b6:
92:5c:5f:66:7a:1a:6c:66:77:61:11:68:26:50:55:
9d:39:b8:bb:d2:03:6e:81:56:0b:92:41:67:37:6f:
1c:6f:a8:58:6d:c7:01:05:49:fa:dd:3c:1c:65:12:
6f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:7F:21:C9:B6:F6:42:65:59:D6:09:05:F9:E7:13:7B:34:A2:D8:8F
X509v3 Authority Key Identifier:
keyid:D7:96:AF:C5:4F:E6:3E:D1:74:0D:5E:89:6B:3F:59:1B:11:84:F6:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15avxU_mPtF0DV6Jaz9ZGxGE9tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/32ab16-8f6d-414d-80cf-0a86358e9c84/1/15avxU_mPtF0DV6Jaz9ZGxGE9tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:77:bf:32:14:d6:41:ba:92:0b:19:bd:e4:a6:03:24:6b:ef:
74:1d:e3:27:32:34:11:56:5b:cb:dc:29:17:7c:e1:5f:99:a6:
f1:d4:70:58:8f:47:28:80:37:a3:31:af:2c:61:23:c0:00:38:
ed:af:22:8b:5e:92:cc:eb:77:9c:e6:dd:bb:4c:1d:83:7c:2e:
2b:e2:52:07:05:38:05:18:25:97:cb:16:a1:69:fe:5a:6f:60:
df:07:e5:f8:e0:1c:f0:6b:a6:0d:39:ee:e3:f1:68:13:07:a9:
9c:9f:b3:4f:45:b7:bd:42:79:6f:d7:3f:ee:81:c2:22:b3:a1:
21:16:d4:0b:ac:a0:f8:ba:01:37:b4:ce:7d:79:8c:cf:6b:73:
45:e8:1b:73:29:9b:0b:fb:f6:19:3e:c2:2c:a4:d6:93:60:d4:
f8:d5:64:3e:42:57:5c:57:02:df:f5:e1:0e:15:62:79:6d:13:
fc:f3:04:0e:87:c0:28:e2:cc:31:2d:04:02:2f:f3:52:78:2e:
2c:91:83:c7:2e:0b:48:fe:75:8f:62:b1:c6:22:e8:5b:8a:ed:
32:4a:04:4f:38:d2:ff:d6:c0:cc:d2:48:60:3c:a4:98:01:35:
b7:cc:6a:59:88:02:48:b2:61:04:1a:da:68:ec:53:66:6d:56:
92:f9:fa:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:35 2025 by rpki-client