Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
File: i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft (raw, json)
Hash identifier: KPa/idO9sFMyaZJ3u/N4kY9XRKzj9Vt6N6e5794TlHA=
Subject key identifier: D1:A6:2C:24:9A:F7:82:FC:4F:F6:76:D9:A2:C2:7D:65:DB:70:13:46
Authority key identifier: 8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
Certificate issuer: /CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Certificate serial: 019777C11ECEED006CA16CB514A04E4407F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
Manifest number: 15A2
Signing time: Mon 16 Jun 2025 08:00:34 +0000
Manifest this update: Mon 16 Jun 2025 08:00:34 +0000
Manifest next update: Tue 17 Jun 2025 08:00:34 +0000
Files and hashes: 1: Z9hqFRirUe4P1_J6cnVrlFkJUwM.roa (hash: 1rB513D+oaDkVMZd5WQl+V38WfLdjvRgbt7ShIhiM3k=)
2: eldr0Gd72QMDJnfB5g3XkvXB5MA.roa (hash: TtEGiXJhnS9J3b71Jc1YsSME+mGa0e8iTuBkAI+Nugs=)
3: i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl (hash: vD4cC3I3g9WycFYC7AzuZilbVHPgUkIFlO8kmFdAt1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:1e:ce:ed:00:6c:a1:6c:b5:14:a0:4e:44:07:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb1308c6a977d5cb903bf25a96308b0e8ce3b46
Validity
Not Before: Jun 16 08:00:34 2025 GMT
Not After : Jun 17 08:00:34 2025 GMT
Subject: CN=d1a62c249af782fc4ff676d9a2c27d65db701346
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:dc:91:bf:b6:06:f6:d0:64:33:fd:8d:4a:15:
2a:20:38:7e:5f:b8:7d:aa:ba:5c:a5:04:cc:92:e1:
f3:16:6c:8a:d1:6b:6f:8d:30:7f:de:d4:84:0f:e0:
d6:44:87:82:ce:c7:51:51:1a:66:56:67:40:21:07:
f8:ce:58:a5:e7:35:79:4b:3b:9e:6a:a4:41:f6:5f:
1e:48:b0:d0:05:6a:c8:d9:c1:8c:db:7e:a2:41:2a:
4b:a1:9f:91:3c:ac:4c:99:6e:0d:03:da:5e:d5:c4:
d5:e3:f1:67:7b:db:aa:8a:47:32:44:25:26:fb:61:
aa:7a:bc:9a:f8:a7:ad:75:ca:25:52:f1:7f:a1:54:
6b:a8:8c:59:86:70:6a:34:3e:b6:8a:b9:53:15:55:
c4:2c:b9:c7:4e:b0:c3:0c:8c:de:05:02:b6:1f:ba:
ec:bd:ed:c1:f7:33:89:72:2c:6a:bc:53:a7:03:10:
23:1c:27:54:90:c7:8c:8f:e6:fd:71:52:46:76:f7:
67:98:fc:ec:a9:02:64:5e:04:12:e6:46:b8:f6:39:
4b:5c:5e:06:91:65:91:26:54:da:c4:c3:48:dd:95:
99:a1:57:eb:14:2f:cb:e6:d2:20:63:d9:ac:77:c1:
8d:73:0f:c2:05:a0:65:e6:2d:ac:02:d4:e5:9d:fd:
13:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:A6:2C:24:9A:F7:82:FC:4F:F6:76:D9:A2:C2:7D:65:DB:70:13:46
X509v3 Authority Key Identifier:
keyid:8B:B1:30:8C:6A:97:7D:5C:B9:03:BF:25:A9:63:08:B0:E8:CE:3B:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7EwjGqXfVy5A78lqWMIsOjOO0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/776681-b5ee-430f-8693-101abd7391a6/1/i7EwjGqXfVy5A78lqWMIsOjOO0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:b7:97:50:69:ff:eb:17:9f:9c:d8:69:4a:7f:fd:92:81:23:
b4:27:a8:f0:4e:c6:6e:33:ec:94:96:1a:00:31:96:b2:5d:f8:
90:f9:55:dd:b9:3e:2e:06:3c:87:9d:d0:d9:a3:0f:15:80:ea:
ca:19:3a:26:95:6e:fa:ac:59:a2:aa:75:fb:f8:b5:d5:63:12:
7a:32:a1:b0:c4:0c:36:2c:bc:7f:99:2b:83:96:6c:59:2a:6c:
3d:84:9f:a9:22:c8:27:dc:d2:da:b1:6d:37:f8:a9:89:d4:31:
54:60:47:b1:31:fb:97:2b:e5:6a:e1:4a:b5:af:b2:c4:5a:fb:
43:01:97:87:83:99:67:fb:11:b2:f0:38:ed:ca:8a:0c:f4:32:
0e:c9:1e:28:3b:40:04:9a:81:dd:a3:03:82:93:ff:33:8c:a4:
fb:c6:b5:05:3d:09:d1:85:cf:98:b8:a2:2b:84:93:20:45:ea:
ec:c6:9f:c6:30:0b:85:0d:52:9b:c5:2f:66:53:e0:b7:0b:5e:
d1:8f:0f:12:0f:fa:b2:0c:73:92:41:c2:70:c8:1c:34:46:29:
82:6d:85:4f:b3:71:fa:28:d8:17:5b:8c:dc:14:cb:8b:9a:05:
19:4f:22:e6:7e:fd:d7:90:e2:58:ce:a5:4c:03:6c:c2:4a:4f:
95:fe:7f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 17:10:44 2025 by rpki-client