Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
File: k7ke76bYBG2RjjZARWBJUmQLwV0.mft (raw, json)
Hash identifier: JmarbZs7o1EbsN/0z7NWbvvV4qKSILBq6J6lBxOZxAQ=
Subject key identifier: 11:86:23:7E:8A:AC:75:A1:1E:4D:2C:92:BE:68:B3:90:04:1E:F5:22
Authority key identifier: 93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
Certificate issuer: /CN=93b91eefa6d8046d918e364045604952640bc15d
Certificate serial: 0197B9A19ED33CD8AA4F9F9A40EA86C2DE1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 03:01:06 +0000
Manifest this update: Sun 29 Jun 2025 03:01:06 +0000
Manifest next update: Mon 30 Jun 2025 03:01:06 +0000
Files and hashes: 1: Uc_eHHiK2oso3GTkmMSET3r6doI.roa (hash: 0NgJOw3Kd7PNm0qwiJH+X6KSvVouo/yd/FKitaaEd7c=)
2: acAq7MIcmx18UIHmz-jlBD_t3Ys.roa (hash: Zx8ySSl2DHqJTH9VbThnUkgVbOzhPotBL0G7iUFbFBE=)
3: k7ke76bYBG2RjjZARWBJUmQLwV0.crl (hash: YwRwqvvmOYhqjIaoGMb3JsaSRm9VrxcolR3x9vVPQnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:9e:d3:3c:d8:aa:4f:9f:9a:40:ea:86:c2:de:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93b91eefa6d8046d918e364045604952640bc15d
Validity
Not Before: Jun 29 03:01:06 2025 GMT
Not After : Jun 30 03:01:06 2025 GMT
Subject: CN=1186237e8aac75a11e4d2c92be68b390041ef522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:62:56:18:8f:14:61:bc:1e:1c:e4:d7:54:f9:
d7:45:14:c8:84:cf:ee:79:65:29:f5:4e:eb:d2:7f:
75:a6:de:6e:32:12:3b:04:44:f0:d6:b0:f1:31:0a:
c4:4f:3b:be:d2:ac:21:f0:c5:c1:f9:e6:8d:8f:b8:
d1:56:05:cb:27:77:fa:4c:60:42:4e:ff:b0:b1:01:
13:0a:b1:4e:2d:9e:1b:35:11:33:bc:9d:81:7b:de:
0a:c9:6c:ab:de:d8:a1:ea:ce:59:76:88:6f:ab:74:
12:a8:7e:a1:06:6f:81:ad:32:22:cc:c2:58:c3:59:
cb:ec:07:77:09:30:2b:36:dd:fe:7c:d9:00:e5:50:
54:d6:75:40:1f:54:7b:70:da:af:8d:94:cc:82:cd:
bc:3f:f1:63:b8:ff:ac:ea:a2:2d:84:93:af:f9:b1:
6b:fc:90:74:a7:17:8f:1c:e2:c2:5f:4d:ca:69:c8:
64:26:ba:b2:34:60:4d:a9:20:ed:88:ca:cf:2c:a6:
7a:b9:fd:63:63:dc:6d:48:f2:7e:a4:e5:38:71:dc:
ab:8d:d7:45:f0:e0:78:ae:a0:cc:d3:3d:48:7d:bf:
9b:39:22:cd:18:69:ec:2e:ab:ab:91:69:68:12:b7:
db:a4:f4:88:c1:42:1a:d6:27:ef:e4:43:32:b8:00:
ae:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:86:23:7E:8A:AC:75:A1:1E:4D:2C:92:BE:68:B3:90:04:1E:F5:22
X509v3 Authority Key Identifier:
keyid:93:B9:1E:EF:A6:D8:04:6D:91:8E:36:40:45:60:49:52:64:0B:C1:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k7ke76bYBG2RjjZARWBJUmQLwV0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/babef9-079d-40f4-a211-3586aae13da7/1/k7ke76bYBG2RjjZARWBJUmQLwV0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ab:fa:72:47:ba:04:ae:8a:ce:d2:da:d2:a2:52:d8:db:36:
a1:f8:09:2f:48:1e:34:0f:5d:a6:f6:4c:bd:86:e6:7f:eb:99:
f6:af:2e:e5:8f:99:03:ee:23:ce:69:0a:7e:5f:ee:4d:fb:af:
2c:a9:13:ef:62:3e:97:2e:84:bc:dd:5a:b4:a2:df:2a:aa:02:
e9:cf:40:4d:78:81:c1:91:9b:03:4d:d9:b0:75:61:2c:bd:23:
cc:07:14:ab:04:4d:00:4a:88:84:5a:ec:98:dc:e2:ae:df:ed:
26:1f:be:b4:be:1f:18:fd:4b:ad:6c:e0:51:c1:12:9c:4e:a8:
53:28:69:21:77:2e:de:8d:01:1b:f7:c3:15:9d:6b:92:61:a0:
6d:ee:62:39:f9:a5:25:c9:8a:66:53:5b:a9:4e:82:02:4a:80:
24:38:3c:c8:3d:15:ba:d2:f1:98:e1:75:f6:e5:4b:af:bb:d7:
f0:19:ad:69:e6:87:39:96:44:25:c1:27:31:34:e9:42:be:9b:
ce:ff:e5:f9:d8:d6:87:d1:bf:43:fc:5d:70:0b:ad:91:9f:22:
fd:d2:4c:67:ce:b9:29:2e:b7:ac:04:21:7d:6b:e2:d2:5b:5a:
ca:fa:a7:d6:a4:d8:ae:36:7a:27:61:c2:f9:fe:78:b5:c6:b1:
56:05:64:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:44:08 2025 by rpki-client