Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File: 15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier: F8OSQf5IWiVv3lojbZ/6KZHT+i0b88bvZkvqK0r0pJI=
Subject key identifier: 45:86:4F:28:FA:80:ED:A2:8A:3B:CD:A5:26:A0:A7:EE:64:98:7D:67
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 01975DCAD733497D1D1FCFA6DF229969E522
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number: 0C90
Signing time: Wed 11 Jun 2025 07:01:03 +0000
Manifest this update: Wed 11 Jun 2025 07:01:03 +0000
Manifest next update: Thu 12 Jun 2025 07:01:03 +0000
Files and hashes: 1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: p1u4Tsjt2VWnVNl7871B4gF45yV/PqppWSREg+vwvX0=)
2: 74Pc-d1cIDB2cJwPwMZKRC2SHlY.roa (hash: BNXJ9UQTlJTDJF7YHXiQBgrxMV0S9TBmp+TiB2lnrCw=)
3: ATm3n0KFZ5OKTQtdaMLYTaNNVew.roa (hash: 2UTJGztOoJrr9yNdFqpMauhjZZvVEquE5BNwI7gR6Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 07:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:ca:d7:33:49:7d:1d:1f:cf:a6:df:22:99:69:e5:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Jun 11 07:01:03 2025 GMT
Not After : Jun 12 07:01:03 2025 GMT
Subject: CN=45864f28fa80eda28a3bcda526a0a7ee64987d67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:c8:36:be:01:c5:72:65:db:3c:a0:7c:bb:1d:
4b:8e:9f:fa:d4:95:40:3e:02:98:f2:30:50:44:e2:
d2:40:e4:bd:43:a5:0e:98:e8:2b:cf:b4:ba:8d:40:
c7:84:e5:d1:b1:ce:f1:c5:14:0c:12:06:05:2b:7e:
50:95:7a:63:97:2e:b8:bf:0e:c8:f0:eb:8f:b2:e6:
85:37:f9:2e:9a:6e:72:f0:de:cb:37:7a:9e:51:59:
a3:d5:c0:e4:f8:5a:f4:41:cc:96:b8:58:20:8a:bc:
fe:16:e1:51:df:18:d0:85:b6:f0:6e:41:66:be:fb:
4f:34:6d:19:5a:c2:87:5a:52:60:75:97:5e:f2:68:
7e:2f:be:38:07:00:f0:32:7b:c6:db:49:10:be:87:
f3:2d:72:b1:17:9b:b7:01:f4:05:f0:07:3f:96:ac:
ef:e5:7a:61:15:44:99:98:f3:44:19:cd:ed:62:00:
d8:f1:ab:2d:2c:0a:16:34:7c:fd:b9:1f:8e:0a:8e:
e8:e1:23:ae:6c:46:17:cd:b6:7c:2b:48:5b:65:23:
28:c5:75:40:a7:07:df:b1:92:0d:2a:bc:4f:37:63:
19:d0:7f:58:16:ce:3e:4c:cc:07:21:76:fe:2d:5b:
20:b6:c4:90:c3:4f:e6:ea:66:4c:9c:f1:5b:7a:1e:
99:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:86:4F:28:FA:80:ED:A2:8A:3B:CD:A5:26:A0:A7:EE:64:98:7D:67
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:5c:51:19:d3:d6:f4:56:e6:7e:a7:0d:b2:e6:4a:c8:c5:e0:
7e:a9:77:a6:db:24:19:d3:d3:2d:b1:38:08:08:65:b7:b3:be:
a7:3c:e9:f1:10:91:f6:1e:f8:e0:6e:f4:44:14:e0:c8:2d:8c:
49:0e:69:f7:b3:c4:cd:fe:11:c6:d8:0f:e2:b8:22:96:f9:50:
a0:77:c7:0e:c9:dd:15:0d:c3:7f:f9:ba:2b:3f:49:8f:ba:7b:
5c:bf:56:1c:dc:3d:4a:32:a9:92:ee:91:e2:64:5f:c7:6c:df:
57:b2:9c:08:de:54:1b:60:0e:e1:20:fd:49:10:49:08:af:8b:
5e:a4:63:69:be:e3:87:2c:9a:48:d9:e3:ef:54:36:27:6f:87:
f0:a4:e3:60:96:f6:9c:fc:ad:9a:6f:2b:83:61:7a:71:52:fe:
76:c3:e3:71:41:d6:bf:18:a0:e3:f3:6c:bc:df:35:a6:b4:ec:
f2:e2:76:40:9f:a2:57:f5:bf:5e:86:0e:43:f6:73:53:94:99:
fa:74:ec:90:62:3f:ce:5c:05:f2:a3:b6:9c:50:27:61:13:ad:
2c:4b:47:ec:f8:ea:55:8b:14:58:6d:6b:4f:f2:7a:c9:7b:d3:
38:43:26:68:9a:58:09:8f:62:c1:ec:69:e5:1d:43:af:8d:59:
3b:c2:c3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:14:20 2025 by rpki-client