Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
File: aHmbdytVHbeE7rqLDhFaDEM807o.mft (raw, json)
Hash identifier: btFsSjMTywQUrflgU+QqW9dwzz6cay7Us2UrD7wQG2A=
Subject key identifier: BE:AC:43:05:D2:E3:9F:14:BF:01:A7:CE:CC:F2:A9:69:7C:B4:40:74
Authority key identifier: 68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
Certificate issuer: /CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Certificate serial: 0197B70EFB0E4608C62B7F48076D780F0E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:41 +0000
Manifest this update: Sat 28 Jun 2025 15:01:41 +0000
Manifest next update: Sun 29 Jun 2025 15:01:41 +0000
Files and hashes: 1: QIpPOWuJUQR17x2KgabcF3hdBpY.roa (hash: DGCugI0Fd9+HXtUvL1bfCetCLc7iYLKfDAKTqy9sWJY=)
2: aHmbdytVHbeE7rqLDhFaDEM807o.crl (hash: MvYvyi0JpCsGqsACUuBfkEl2jzhTKg0ESVgr+F2OLVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:fb:0e:46:08:c6:2b:7f:48:07:6d:78:0f:0e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68799b772b551db784eeba8b0e115a0c433cd3ba
Validity
Not Before: Jun 28 15:01:41 2025 GMT
Not After : Jun 29 15:01:41 2025 GMT
Subject: CN=beac4305d2e39f14bf01a7ceccf2a9697cb44074
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:44:ec:a9:77:ac:b5:00:29:5b:fa:74:2f:24:
79:fd:de:8b:cf:a1:f4:11:86:07:25:b4:7a:ef:49:
85:7a:d5:6a:e2:99:57:60:35:e1:4b:5a:4a:f4:9b:
14:5f:06:07:f4:ca:4b:82:e1:c1:98:5b:b3:dd:29:
e1:0e:12:36:2c:c9:3c:e4:48:5d:65:d3:20:82:d8:
98:4c:f8:7c:e5:09:b8:27:2b:67:29:f0:3b:f3:c2:
66:47:73:5f:db:02:0a:4a:02:f2:1c:d5:d7:c3:51:
82:ca:6c:6b:9d:f9:d0:4f:ba:ad:d1:b4:bf:af:67:
87:f9:b5:27:fe:ab:df:82:82:52:7f:11:9b:ef:fe:
6c:b4:f8:12:5c:ed:3c:24:17:21:bd:59:c9:7b:b2:
9c:64:51:2d:c3:d8:8d:d8:40:5a:d9:b8:d4:ed:16:
b2:c6:62:18:42:c1:ae:9c:97:71:93:21:75:ce:34:
a1:c0:cc:0c:dd:79:c0:c7:56:e1:b5:1f:f6:46:cf:
fe:17:38:38:ba:66:2c:f0:b6:60:2d:fd:4c:6a:04:
03:b7:98:6f:a6:28:03:97:fd:38:28:f0:e1:ea:a1:
2d:72:df:18:a8:a3:49:a7:fd:ee:9f:8c:c4:ce:e9:
50:6a:01:1c:9d:9c:d0:ca:98:08:84:0a:6a:81:71:
f7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:AC:43:05:D2:E3:9F:14:BF:01:A7:CE:CC:F2:A9:69:7C:B4:40:74
X509v3 Authority Key Identifier:
keyid:68:79:9B:77:2B:55:1D:B7:84:EE:BA:8B:0E:11:5A:0C:43:3C:D3:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aHmbdytVHbeE7rqLDhFaDEM807o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/962f2d-7282-421e-a631-0c76a316b52e/1/aHmbdytVHbeE7rqLDhFaDEM807o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:c3:7a:4b:52:ce:be:68:b5:53:d5:fe:b0:61:11:f1:58:5b:
88:3c:b7:1d:5f:1d:ea:1d:f2:a4:e0:47:b7:da:2d:26:fc:09:
5e:8f:5c:83:53:ae:9f:ec:e1:1c:3c:c9:92:a3:76:46:24:61:
01:75:02:87:a2:16:b6:ca:46:60:6f:bc:6d:74:72:60:62:fb:
fe:e5:0f:6b:4d:ec:96:1d:c5:a6:58:28:bb:43:84:84:ad:26:
aa:a0:37:d4:97:1c:f6:34:4a:d6:9b:ca:00:27:6a:39:de:49:
5c:20:f9:11:52:4e:c5:15:7b:08:f8:fc:6c:20:5b:bd:f5:48:
61:0b:58:2e:7a:17:23:44:1e:25:92:d2:cd:02:06:b9:8b:c6:
05:cf:b8:b0:a7:56:6b:3c:c6:26:e9:53:eb:8b:a6:f3:16:a4:
c6:15:6f:e2:d6:27:eb:bc:a7:cd:b0:e0:f6:95:be:01:8f:70:
0d:5d:3c:69:b1:58:59:9e:d2:14:ab:14:8c:52:c9:e5:8e:a0:
31:3e:9d:7e:1d:65:45:3a:b1:70:df:7b:f8:95:a9:d7:7b:a3:
b4:8d:53:d4:c3:3e:3b:08:93:c1:eb:66:b3:28:d6:26:a6:47:
1a:28:51:86:a0:28:7a:a4:7f:38:bc:ac:ed:53:ac:5c:96:48:
ac:13:ee:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:19 2025 by rpki-client