Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
File: ril1GgrIGmVxkFRupHgM2GFA3J8.mft (raw, json)
Hash identifier: Za9JCvb/XFEchm10EcY8c3x4jUMIfA6f2vi7dRhkPPo=
Subject key identifier: 6C:8C:1E:B6:51:0D:35:00:E5:AF:89:4E:78:CC:E0:68:BF:E2:26:F6
Authority key identifier: AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
Certificate issuer: /CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Certificate serial: 0198353A171DA065C8391A0DCA6157BF87E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
Manifest number: 15F9
Signing time: Wed 23 Jul 2025 03:00:56 +0000
Manifest this update: Wed 23 Jul 2025 03:00:56 +0000
Manifest next update: Thu 24 Jul 2025 03:00:56 +0000
Files and hashes: 1: Pn8xyEax8dTf2X7jJobPQxh-9Fg.roa (hash: HTtYaWmG4vFsBggg1bZWXxDw9HN8LeHTNamhfWYt0+s=)
2: TzCEbM_FX1C8Etsgv1SpL73BfwY.roa (hash: 0+du4/EByKMALnvia/65AUVyk52kmBip6bBqdirNoQM=)
3: ril1GgrIGmVxkFRupHgM2GFA3J8.crl (hash: tz43dyAi0kyQvayE1ZHEmJXtmV2QcvE7yhR7ctKezhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 03:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:35:3a:17:1d:a0:65:c8:39:1a:0d:ca:61:57:bf:87:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae29751a0ac81a657190546ea4780cd86140dc9f
Validity
Not Before: Jul 23 03:00:56 2025 GMT
Not After : Jul 24 03:00:56 2025 GMT
Subject: CN=6c8c1eb6510d3500e5af894e78cce068bfe226f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:40:e0:19:56:4d:2d:fa:6a:72:42:d7:5f:9b:
73:3d:50:6d:7a:b3:5c:6e:34:24:e7:59:8f:16:35:
70:d0:e0:83:c4:29:24:44:cb:c5:23:4e:75:63:83:
7c:a0:47:02:53:d5:99:59:7c:b7:80:64:11:a0:dd:
2b:2c:1e:c0:fb:da:12:11:83:68:fe:1f:5f:06:26:
86:51:7e:75:cc:15:7f:cd:00:e8:10:17:fc:5a:df:
44:f6:2d:43:7d:30:8d:4f:a4:8d:53:b2:ee:f8:b7:
e1:ee:5e:6d:f2:f6:9c:f5:c8:b8:ed:64:81:73:e3:
de:2a:09:dd:18:5c:c7:c0:5e:bb:fc:0b:31:d1:e2:
56:e4:6a:d6:16:ae:8c:8a:1b:9e:41:a7:77:5d:43:
21:7a:22:7c:db:28:6f:72:b5:9a:e4:be:44:1b:23:
a3:c9:7f:89:ee:c1:66:0e:08:32:4e:60:72:56:03:
ee:43:b9:a4:89:18:65:ab:7e:95:04:51:d0:75:90:
52:0a:dc:46:ac:25:d8:f5:bb:f0:bc:b0:64:f0:93:
f5:9e:f0:84:c8:87:71:52:a6:69:0c:94:06:25:b9:
b9:33:9a:82:dd:e0:3e:56:33:18:12:37:09:a7:81:
42:35:22:9f:5b:1e:79:a5:bc:a0:d4:f0:2b:fc:f8:
90:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:8C:1E:B6:51:0D:35:00:E5:AF:89:4E:78:CC:E0:68:BF:E2:26:F6
X509v3 Authority Key Identifier:
keyid:AE:29:75:1A:0A:C8:1A:65:71:90:54:6E:A4:78:0C:D8:61:40:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ril1GgrIGmVxkFRupHgM2GFA3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/75e36c-db1f-483e-b0ef-229051879b74/1/ril1GgrIGmVxkFRupHgM2GFA3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:cc:78:62:ab:13:31:8a:e1:98:de:f0:cc:0a:9b:23:7f:17:
0f:9c:d6:a3:9d:e9:e6:a3:ee:44:c2:be:01:56:77:1f:6b:44:
36:7c:bd:23:16:1d:33:d2:b6:ec:fa:89:1d:49:81:10:56:82:
0e:74:3d:b5:a5:b6:f0:d3:e5:5d:7f:73:b5:ff:bc:61:95:9d:
d7:e3:2a:58:4f:0e:8c:5b:ce:2d:29:e1:b5:0b:ee:11:60:cf:
15:c7:30:19:6e:52:27:24:0d:21:3d:e5:4d:5d:10:c7:08:91:
a9:9e:1f:7b:3d:5d:2b:d7:fe:09:84:78:89:83:8c:5f:0e:49:
22:14:b9:63:32:14:f5:20:a5:c4:9f:5a:72:0f:ba:17:f3:ed:
f0:48:3f:bf:19:ae:c5:1a:70:e7:b3:72:89:13:f6:6f:13:57:
95:ff:93:54:ac:73:0b:8f:91:da:7b:e7:7a:b7:c1:85:eb:66:
dc:6a:d3:12:56:7a:7c:f5:8e:5b:dd:e2:42:d5:23:7f:41:6b:
90:1c:ff:0a:a7:60:49:1a:11:bc:45:30:43:f8:e8:ab:f3:90:
73:73:61:03:b3:02:73:4a:e9:71:5a:cc:a3:b2:2b:05:f6:60:
4d:3f:b5:13:20:f1:2f:5c:ba:53:66:29:41:06:9b:d6:01:16:
b5:8a:cc:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:10:21 2025 by rpki-client