Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File: 15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier: aguhjiiUqhJH/EMDKW3MkQd5yeKwSgqIbWm2MyNuIqU=
Subject key identifier: 6D:AD:90:82:85:B9:57:E6:FA:9A:A3:30:52:76:A4:E4:04:C5:8F:20
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 01976B5054092BEC182731C0D9A49CACF064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number: 0C97
Signing time: Fri 13 Jun 2025 22:01:55 +0000
Manifest this update: Fri 13 Jun 2025 22:01:55 +0000
Manifest next update: Sat 14 Jun 2025 22:01:55 +0000
Files and hashes: 1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: LerEYlekrejIe6vUJhXIQKNhXPF02pdYtupAFHxNvV0=)
2: 74Pc-d1cIDB2cJwPwMZKRC2SHlY.roa (hash: BNXJ9UQTlJTDJF7YHXiQBgrxMV0S9TBmp+TiB2lnrCw=)
3: ATm3n0KFZ5OKTQtdaMLYTaNNVew.roa (hash: 2UTJGztOoJrr9yNdFqpMauhjZZvVEquE5BNwI7gR6Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 22:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:50:54:09:2b:ec:18:27:31:c0:d9:a4:9c:ac:f0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Jun 13 22:01:55 2025 GMT
Not After : Jun 14 22:01:55 2025 GMT
Subject: CN=6dad908285b957e6fa9aa3305276a4e404c58f20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:f1:e0:ba:cf:76:3b:5b:b9:a1:5f:a8:d9:
52:7f:22:59:45:1e:16:8d:01:d8:e1:ac:ac:a9:0b:
1d:57:90:80:b2:92:2f:5f:99:38:d4:5f:39:56:f9:
64:01:20:d2:41:e7:04:9e:f0:71:3d:5d:c5:ff:b9:
bf:6a:d3:4e:20:2d:83:f5:6c:30:97:98:2f:c7:ba:
93:18:43:dd:35:52:ae:02:74:f5:d5:01:ee:51:b9:
2e:f2:43:fa:c4:80:61:4a:aa:9f:f7:db:87:97:29:
99:26:13:b5:c4:b6:7a:d1:3d:bf:d4:4c:f4:b1:26:
ad:7f:85:a8:17:bd:04:5a:27:06:12:eb:e3:bf:b4:
e3:09:52:8a:da:db:ec:4e:9e:82:80:d3:d0:6b:4e:
06:23:3f:2b:1f:25:20:d7:bd:83:66:38:01:1a:6c:
80:48:a3:c6:88:2e:13:b2:3e:db:ce:e9:97:52:4a:
cf:92:30:8c:a6:fd:97:04:3a:42:a0:45:42:97:e6:
36:91:da:d0:18:0f:5e:ed:d7:96:50:15:99:3f:19:
60:d2:c6:b2:8b:33:0a:d8:b6:73:ff:84:f1:1d:0c:
f3:d9:92:54:db:00:f3:83:c9:2f:4c:5f:d6:16:6d:
4f:3c:ef:35:ee:72:62:10:eb:0d:16:d0:45:2b:ca:
e1:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:AD:90:82:85:B9:57:E6:FA:9A:A3:30:52:76:A4:E4:04:C5:8F:20
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b3:00:13:a5:24:f3:5b:74:34:49:71:0a:87:1e:8b:be:88:
3d:d0:89:e1:c9:69:1d:20:92:d4:0d:f2:94:0e:ca:85:0c:c2:
52:c1:9a:f0:72:1a:6a:00:6a:80:0e:33:7f:a7:5f:26:05:54:
ed:31:5a:d6:3e:f4:81:a8:8b:03:1f:3b:c9:14:91:c7:a0:8d:
68:68:cf:f1:ee:d6:84:28:de:15:18:69:64:5d:15:e7:67:5a:
07:57:63:6e:f0:86:e1:04:b2:1a:af:2f:36:d5:c4:63:e1:09:
8e:6d:1a:f8:16:98:af:d1:90:14:0b:4e:16:82:02:ab:31:dd:
05:79:b9:b9:59:1b:aa:96:07:4d:8e:0f:1f:20:e0:3e:83:55:
ae:70:f9:89:b5:b3:8f:9a:67:6f:55:b5:19:d9:e2:77:75:3c:
4c:e3:bd:ec:d7:17:ed:0f:d7:e9:fd:ad:de:2e:ab:c4:8e:eb:
ee:71:48:c3:e8:d3:c0:1a:71:e0:cb:7f:4d:ce:a8:8a:22:a3:
f4:3a:15:0c:3a:60:e5:f0:60:4e:dc:15:3b:9d:db:eb:63:18:
a9:d7:de:22:c5:63:fd:cc:0c:a9:da:d8:1d:af:be:0c:05:ac:
11:8d:8e:2a:2d:dc:4d:d2:3a:e4:75:22:fb:36:88:71:41:87:
82:b9:49:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 06:36:02 2025 by rpki-client