Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
File: cFngOgjhdBb2ZUYweYg0mZG4Si4.mft (raw, json)
Hash identifier: dPdKes1Js2bP6HslhTCsdK7V1piYVmAejR6G7LPBv0s=
Subject key identifier: F7:69:09:AC:50:37:66:E8:FE:07:1C:B8:38:5B:18:FB:F9:C8:9A:AF
Authority key identifier: 70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
Certificate issuer: /CN=7059e03a08e17416f66546307988349991b84a2e
Certificate serial: 0197B7EA3B6A7931F049FB7F1DBD1D5B1949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:10 +0000
Manifest this update: Sat 28 Jun 2025 19:01:10 +0000
Manifest next update: Sun 29 Jun 2025 19:01:10 +0000
Files and hashes: 1: ClJ5D2eNfayYbTx8ggCm0hRsP7c.roa (hash: 5Qda0Yje+FvIpLy35sRo5xthR6h+ClhT/rTRzyBmQIo=)
2: _he88goyBeeMgMEtYhNW51-yKRw.roa (hash: bVhU/YoxDPNh8/p9ZgLTw8sJFTf7HVdMt0ALSYqAQ2c=)
3: cFngOgjhdBb2ZUYweYg0mZG4Si4.crl (hash: hwutcfuQFo+fKcvi4Sa9EPX79sXUgCWknmB22zEK/CE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:3b:6a:79:31:f0:49:fb:7f:1d:bd:1d:5b:19:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7059e03a08e17416f66546307988349991b84a2e
Validity
Not Before: Jun 28 19:01:10 2025 GMT
Not After : Jun 29 19:01:10 2025 GMT
Subject: CN=f76909ac503766e8fe071cb8385b18fbf9c89aaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3d:72:c5:4e:c8:bd:59:30:0e:d8:f9:fd:34:
f6:3a:14:c2:56:68:0e:05:32:58:01:f0:7a:5a:8b:
52:1b:6d:c1:f3:d4:2b:65:45:98:54:77:4d:e9:74:
8c:0a:82:79:47:91:42:39:8b:fb:20:f4:72:ce:4c:
96:5b:25:71:b3:84:01:19:1a:09:a6:de:93:12:19:
95:7d:f7:a9:3d:5b:f4:1d:d4:11:f0:6f:e7:f4:44:
5d:05:7f:e0:81:d7:0f:84:84:20:1f:da:5c:8a:2e:
bc:07:7a:96:34:81:5b:fd:c0:19:27:b4:e1:3e:5b:
0d:4c:a3:9c:0d:70:91:16:44:ee:7f:bb:7a:58:71:
78:ef:d9:70:70:26:c5:fd:18:d3:7d:45:06:93:6a:
90:7c:98:76:1b:c5:f5:6b:05:86:4c:cd:5e:13:30:
cf:8d:2d:fb:53:94:a4:47:9c:94:40:2e:12:58:68:
fb:33:55:3d:8f:d1:04:f7:06:73:98:8a:42:ad:63:
2c:90:a5:3c:4b:f1:3e:64:92:11:03:44:58:37:da:
6e:93:a1:4e:9c:95:4f:2c:5b:35:db:a9:6e:92:e3:
21:58:8a:b7:b1:e1:ba:82:a9:f7:76:b2:75:54:2e:
ef:85:d2:b7:15:b6:56:63:8a:c8:6d:9e:c2:c3:9d:
28:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:69:09:AC:50:37:66:E8:FE:07:1C:B8:38:5B:18:FB:F9:C8:9A:AF
X509v3 Authority Key Identifier:
keyid:70:59:E0:3A:08:E1:74:16:F6:65:46:30:79:88:34:99:91:B8:4A:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cFngOgjhdBb2ZUYweYg0mZG4Si4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/065dba-eef9-480d-a880-9175c8408e5e/1/cFngOgjhdBb2ZUYweYg0mZG4Si4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:d9:ac:7f:64:e1:ea:2b:ca:5b:0e:10:15:e0:42:46:ec:a9:
fc:a1:93:4e:10:83:4f:90:e4:47:f6:7c:e8:ff:c6:a2:5e:d8:
2a:36:9c:60:cf:75:56:78:c4:7d:93:67:0e:ac:53:2c:81:ba:
94:05:e6:90:15:2f:8f:f1:9e:4a:08:1b:f8:30:c0:bd:57:f7:
9e:f5:49:b5:8c:d1:59:37:ae:af:34:51:95:8f:79:76:f1:24:
7b:d8:23:4f:cb:a7:08:18:f7:05:e0:fb:14:e9:34:ad:7b:f7:
b8:34:6b:89:9d:50:e7:85:3b:c1:fc:68:ee:8b:b4:a9:94:0e:
27:0f:d7:5e:62:d8:e5:a3:46:5f:d5:46:40:44:1f:e5:c9:01:
25:e1:c1:3b:e3:31:4d:40:e0:f8:13:25:43:a0:d9:82:fb:9c:
2c:ec:d5:8c:00:15:dc:55:a4:26:82:99:fc:7a:67:4f:d5:72:
f8:1a:64:24:6b:72:f3:ef:53:4f:2a:18:a1:4a:6e:7a:c2:f6:
74:eb:f3:22:b9:7a:4e:8e:01:17:43:c1:1f:7c:01:4d:db:10:
c3:3b:dd:ca:6c:4a:f3:aa:59:3e:ce:64:a2:75:47:c2:a1:4c:
dc:53:7a:30:2a:33:b1:81:01:4c:73:51:93:b2:ad:83:3e:af:
6c:da:70:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:41:57 2025 by rpki-client