Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File: 15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier: CRXf+JhCyzsRLz5Xiw27ZuNhol9YeKp0rAFsPmQejeA=
Subject key identifier: DF:65:D6:E9:E6:2F:AF:50:0C:27:EC:BA:FA:C1:D8:E3:61:67:36:78
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 0197580052A3EAFBEF6CDB76EE6E0278A226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number: 0C8D
Signing time: Tue 10 Jun 2025 04:01:45 +0000
Manifest this update: Tue 10 Jun 2025 04:01:45 +0000
Manifest next update: Wed 11 Jun 2025 04:01:45 +0000
Files and hashes: 1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: t7r6BWw6BnysElpZ/2II92w+q0K6kW/Blv8plwiUzBY=)
2: 74Pc-d1cIDB2cJwPwMZKRC2SHlY.roa (hash: BNXJ9UQTlJTDJF7YHXiQBgrxMV0S9TBmp+TiB2lnrCw=)
3: ATm3n0KFZ5OKTQtdaMLYTaNNVew.roa (hash: 2UTJGztOoJrr9yNdFqpMauhjZZvVEquE5BNwI7gR6Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 04:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:00:52:a3:ea:fb:ef:6c:db:76:ee:6e:02:78:a2:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Jun 10 04:01:45 2025 GMT
Not After : Jun 11 04:01:45 2025 GMT
Subject: CN=df65d6e9e62faf500c27ecbafac1d8e361673678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a7:f4:0a:98:d9:2b:b1:2e:16:f1:26:91:83:
cc:fa:8d:0c:85:c5:f4:8c:fd:6b:da:f9:22:64:49:
8f:92:7e:7a:b9:1d:b4:2b:47:0e:db:01:28:98:70:
32:5d:c3:f0:7b:c1:94:d2:25:6e:93:29:81:fe:94:
70:6e:ff:63:2c:a6:8a:e8:f0:4c:6d:66:a4:36:7e:
e3:33:19:93:34:ef:1f:95:a3:36:5c:dc:f8:59:00:
63:3c:4d:44:fe:1b:01:c1:c8:e3:eb:61:cb:a0:69:
ad:00:ff:2a:eb:ec:42:e5:d1:b8:73:57:cf:31:2c:
ff:18:9b:f9:98:9b:43:31:e1:79:2e:99:6b:ee:b5:
ee:0c:2f:ae:71:3e:09:7f:af:ac:dc:e4:5a:62:37:
81:22:a2:c5:d5:90:1e:19:79:14:6d:46:87:10:c2:
88:10:6e:f0:49:ab:9d:bc:8b:70:86:23:e0:11:90:
d2:66:c0:ce:80:2d:74:3f:dd:56:90:1c:b8:73:ff:
0b:a3:98:b8:cd:8b:fb:ff:4f:a8:4e:cb:a9:ec:97:
f5:03:90:93:79:7c:bb:76:fc:e1:96:fa:92:da:ea:
e3:46:3a:b3:56:7b:59:c0:10:62:57:0b:83:15:12:
c1:9e:fe:e8:6e:c2:01:c8:54:c2:b3:fd:96:2b:74:
79:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:65:D6:E9:E6:2F:AF:50:0C:27:EC:BA:FA:C1:D8:E3:61:67:36:78
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:bf:ca:ea:e8:6d:5e:0c:1a:33:0e:bd:3d:91:e8:f5:20:c6:
b6:e8:20:3c:5e:3a:97:3b:3f:da:55:d0:16:3e:83:54:5f:a5:
18:5d:98:83:48:9d:d0:1e:ed:4a:7b:d1:72:16:4e:2e:26:b2:
d1:fe:1b:e9:13:ef:73:2b:71:e5:02:3e:1c:4a:0e:35:7c:5d:
63:34:25:7c:2c:b0:a0:f5:14:d0:e3:22:68:9f:3f:55:dd:6b:
c6:f6:0a:14:01:dd:3f:05:62:6e:f5:f1:27:5a:d4:8b:90:74:
ef:c1:1d:c9:3c:db:40:cd:0c:66:11:31:d2:09:35:d9:c9:3d:
88:1c:03:8f:7e:22:55:63:cb:59:28:08:b5:f2:da:a9:e0:a4:
40:07:d1:4c:9a:49:9c:40:82:54:64:d8:61:e5:63:56:f8:3e:
59:fd:51:a6:47:b6:b4:4e:f0:40:cb:d4:b2:10:9f:eb:05:2d:
ed:62:c0:4b:7a:b5:6c:fa:e3:9e:43:9e:da:79:55:5c:1b:e3:
27:a8:4f:ac:d4:d2:af:c9:f4:31:11:7a:34:47:20:9b:54:56:
44:87:f8:38:2d:36:94:e2:8e:a0:ef:d2:dd:ad:62:c6:39:77:
6b:a4:62:a4:44:7f:03:0e:ad:12:83:04:f8:b6:0e:16:ee:91:
52:3b:47:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 14:19:45 2025 by rpki-client