Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
File: Ba15SS6AmTTWk7EYVedRAyQVaes.mft (raw, json)
Hash identifier: SmtXn0M+UfZLZVDfRCEOzEUsfIjyJ8asG41DzG8FB9w=
Subject key identifier: 3A:6A:A8:E5:26:7F:43:7C:A7:89:7E:34:B2:FF:9B:7F:18:16:FC:C7
Authority key identifier: 05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
Certificate issuer: /CN=05ad79492e809934d693b11855e75103241569eb
Certificate serial: 019787A2484D4122232080D20A91F6FFBDD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
Manifest number: 152F
Signing time: Thu 19 Jun 2025 10:00:48 +0000
Manifest this update: Thu 19 Jun 2025 10:00:48 +0000
Manifest next update: Fri 20 Jun 2025 10:00:48 +0000
Files and hashes: 1: 0ZEHwJyA2KHuRsRQifM_9J9E2UY.roa (hash: 1DO414ntcLEzGPYsqi1T9pktOlbe8IXJos67T1vJeiY=)
2: 1UI6HT_8GUtsbAt1u0K32h0qEv8.roa (hash: RqgJutHKgdkCSusd/ckZpEoLNhIYSrs1ZKahvFk+D38=)
3: Ba15SS6AmTTWk7EYVedRAyQVaes.crl (hash: PMkP09uCy7+kLf8A2F1FPkWgkIpdJsmKxZUEgXGOnvQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:a2:48:4d:41:22:23:20:80:d2:0a:91:f6:ff:bd:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05ad79492e809934d693b11855e75103241569eb
Validity
Not Before: Jun 19 10:00:48 2025 GMT
Not After : Jun 20 10:00:48 2025 GMT
Subject: CN=3a6aa8e5267f437ca7897e34b2ff9b7f1816fcc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:86:eb:11:42:38:ba:73:94:fd:e6:47:74:b4:
2f:c1:24:4c:6a:85:33:4b:eb:ce:a3:69:28:50:87:
6e:e2:8b:5a:0b:f1:47:95:e2:6f:6f:cb:08:d4:8d:
0c:d9:a3:2d:2d:9e:d6:f6:0a:43:f9:cf:1b:67:e6:
13:f7:5a:0c:7c:ab:df:52:91:6f:d8:3f:52:9a:d8:
47:ef:34:7b:69:c4:4c:8d:1d:d6:38:76:db:8e:37:
25:d7:2d:5c:c5:cc:cc:65:82:72:ba:f6:02:8e:45:
1e:4b:8f:da:c9:f8:c6:7f:5d:aa:8b:82:b3:c7:2f:
18:64:72:d4:08:a6:f0:1f:67:da:f6:14:92:d4:dc:
ce:db:eb:44:75:60:c5:ff:03:12:02:4e:45:ee:06:
ae:42:ef:9d:b7:12:57:4c:58:ef:86:ed:49:11:6c:
eb:71:0f:dc:f0:39:49:5f:b9:49:95:99:46:bc:47:
3d:d4:d2:1b:1f:a2:14:d8:51:6e:01:a4:ed:f4:03:
d3:90:78:fd:27:83:7b:cd:b6:bf:1f:08:2d:da:97:
d4:f8:83:39:43:28:ef:a6:90:3b:5a:cc:7b:c1:10:
5b:84:fc:7b:57:c4:23:70:60:e3:8d:f3:c0:9f:4c:
e9:0d:71:cd:23:03:6f:0d:06:df:fd:9c:b7:6c:6b:
87:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:6A:A8:E5:26:7F:43:7C:A7:89:7E:34:B2:FF:9B:7F:18:16:FC:C7
X509v3 Authority Key Identifier:
keyid:05:AD:79:49:2E:80:99:34:D6:93:B1:18:55:E7:51:03:24:15:69:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ba15SS6AmTTWk7EYVedRAyQVaes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/280b76-15ac-4c68-8032-f3797ef348ff/1/Ba15SS6AmTTWk7EYVedRAyQVaes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:9c:ae:65:79:f7:2c:53:3f:12:a5:ed:3a:ac:85:48:e0:a5:
78:47:81:e1:8c:56:29:5a:b7:11:10:f5:0d:32:1c:3e:86:17:
0b:52:77:22:f7:17:b3:12:62:b1:e4:b4:95:66:2f:77:1e:e2:
e7:07:42:58:2f:94:6c:fd:cd:b4:11:b1:c3:1c:f1:4a:75:7b:
ec:8d:e8:1c:29:01:30:2f:2e:30:2d:64:1c:88:54:b2:47:9c:
6b:55:6a:c1:b1:1d:4a:09:60:49:8d:d7:7d:f7:b6:f5:36:c8:
58:9e:a4:40:7d:81:f0:04:dd:3a:ec:6d:e8:ec:af:3d:80:78:
5d:79:61:19:7a:5a:d9:4f:a4:6e:bc:bb:6c:ef:4e:23:cd:dd:
08:63:cb:eb:bb:16:13:dc:a4:ab:73:13:a4:af:ce:1a:bc:de:
80:88:26:e7:93:b7:b2:57:92:df:a9:16:98:10:a7:fc:0f:26:
5d:8b:6e:2c:79:7f:ed:7e:52:f9:21:fc:b1:1d:f0:57:e0:3c:
8b:ef:f8:18:77:7c:49:63:66:49:9f:cb:5c:e0:ea:b7:c9:ac:
b1:56:b2:e6:bb:af:d7:0b:5c:cd:4a:b0:45:4a:5f:2f:bc:7c:
49:e7:a2:72:6a:ff:21:4a:18:ba:6f:7f:de:fd:d7:b2:36:b7:
8d:15:8f:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 16:12:24 2025 by rpki-client