Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
File: SU0Or4AlCrgkiYm-caQDlxjWk1o.mft (raw, json)
Hash identifier: Gev2hvmQce13evcQSn0VgUXYlz58QIIsmfH4ANwgnsY=
Subject key identifier: C7:B4:4B:EF:C0:65:70:2B:75:4C:12:65:BE:AC:67:A8:C2:A6:00:64
Authority key identifier: 49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
Certificate issuer: /CN=494d0eaf80250ab8248989be71a4039718d6935a
Certificate serial: 01978C2327F52F30DEB79FC826CC7F1C5957
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
Manifest number: 15A0
Signing time: Fri 20 Jun 2025 07:00:03 +0000
Manifest this update: Fri 20 Jun 2025 07:00:03 +0000
Manifest next update: Sat 21 Jun 2025 07:00:03 +0000
Files and hashes: 1: Ad7sRIt_14WqsoXSVJnhtt5pR6I.roa (hash: d1H2UkdaZjL8z/VCs5Y8T9oYvq5D7T8CQrV9qDD8uXE=)
2: SU0Or4AlCrgkiYm-caQDlxjWk1o.crl (hash: rHuDIE8cu4XTITSz/F5lGhelFQyn1vF4/OPfFaisEhY=)
3: fbnqy98yfE_Lzn_9R-s84dMZn3s.roa (hash: RB1a5+/ABy4Ucs2InLVoqKGALjdVGmuLcFN8wD1kPqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 07:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:23:27:f5:2f:30:de:b7:9f:c8:26:cc:7f:1c:59:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=494d0eaf80250ab8248989be71a4039718d6935a
Validity
Not Before: Jun 20 07:00:03 2025 GMT
Not After : Jun 21 07:00:03 2025 GMT
Subject: CN=c7b44befc065702b754c1265beac67a8c2a60064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f4:57:f9:5f:9b:59:40:c6:53:2f:79:37:16:
df:fd:e3:07:d6:1d:f3:b1:42:d5:20:6d:84:a2:d8:
8c:44:54:0a:3a:9e:a2:4a:7c:80:f9:f5:fe:31:67:
56:bb:01:66:72:c4:b6:39:51:e3:5f:1b:bd:22:6e:
15:51:20:36:c7:9b:2f:7a:be:3e:d8:bd:69:53:c3:
cc:ce:4e:b1:55:f4:97:9f:18:61:1d:64:5a:96:b9:
08:c2:9a:46:28:42:04:12:b4:ad:57:d9:88:ee:f6:
90:92:99:a8:cb:a9:71:24:cf:23:0f:11:44:46:56:
86:ab:c8:f9:a7:45:96:c2:dc:c3:d9:9e:73:93:54:
0d:fa:79:c1:07:94:83:b9:59:e8:70:7d:4a:fb:f4:
2a:86:9b:da:b1:f3:5d:f7:19:2a:0e:06:16:b7:17:
e8:23:92:27:cb:f2:d7:94:39:01:16:ba:05:ce:d2:
33:75:86:4d:52:3e:b4:3a:6d:e4:64:9a:19:43:88:
79:f6:d4:88:ff:7b:9e:40:e8:03:94:f8:15:fd:82:
f4:60:23:ce:8a:e6:cc:53:a9:7e:60:cf:6f:11:68:
73:4b:a3:b1:6a:82:97:3e:74:de:cd:ae:aa:95:f7:
d8:1a:78:4d:79:57:68:d1:ab:ce:08:f9:1f:3e:ae:
4b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B4:4B:EF:C0:65:70:2B:75:4C:12:65:BE:AC:67:A8:C2:A6:00:64
X509v3 Authority Key Identifier:
keyid:49:4D:0E:AF:80:25:0A:B8:24:89:89:BE:71:A4:03:97:18:D6:93:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SU0Or4AlCrgkiYm-caQDlxjWk1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c88555-abb7-4b10-ab64-19c5427e416f/1/SU0Or4AlCrgkiYm-caQDlxjWk1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:be:58:0c:6b:db:a7:c1:81:83:73:03:5b:1b:ba:41:d4:77:
3d:71:03:fa:ce:18:e8:31:cf:e4:81:32:ff:56:d5:4d:0d:e1:
b1:4c:44:dc:a8:04:65:cf:3b:e1:52:12:82:ea:8d:ca:67:1e:
5a:08:de:31:7b:4b:25:6a:85:ef:e7:4a:66:de:92:fc:59:80:
46:c7:f9:68:55:8e:e3:e8:fc:31:c7:d2:94:a8:df:99:c0:52:
9c:f8:65:5b:be:f3:4e:e0:bc:91:0f:79:99:dd:90:13:b1:9e:
b1:8a:8e:ee:88:99:a1:97:35:f0:98:5a:aa:06:46:e5:28:51:
42:83:a2:af:38:d9:00:01:3e:44:e8:06:a7:7c:9c:74:0f:57:
a4:64:2c:9b:2c:9e:f4:eb:b4:13:47:80:e9:e0:be:4e:83:0c:
04:59:2f:ff:54:16:78:95:d7:eb:72:9b:19:cc:37:b9:27:8a:
85:62:5b:2f:0e:cc:c6:f1:f1:55:eb:af:73:35:60:bb:5c:63:
93:9a:8e:4e:b6:9c:92:52:5a:f1:6b:e5:4c:11:41:bc:11:3b:
2d:6d:7b:0a:5d:86:a7:df:30:da:e2:33:90:99:60:43:1f:07:
91:ae:cb:51:b4:e0:0d:84:66:c3:e5:68:d1:47:9c:9a:2f:80:
79:ca:54:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 16:57:35 2025 by rpki-client