Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
File: ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft (raw, json)
Hash identifier: qOGw4PcIz/ciucK/ZHyhaWOHkb5KUXsZp/T3EXp3dMI=
Subject key identifier: F5:99:99:E4:80:91:22:E0:0B:59:5F:77:B3:36:FD:0E:A0:BD:B8:6A
Authority key identifier: 7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1
Certificate issuer: /CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
Certificate serial: 0197C048C1BCA084AD36034C9C4AF66138D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
Manifest number: 15B9
Signing time: Mon 30 Jun 2025 10:01:22 +0000
Manifest this update: Mon 30 Jun 2025 10:01:22 +0000
Manifest next update: Tue 01 Jul 2025 10:01:22 +0000
Files and hashes: 1: W5t6K8mhaeB1jcBRnZnKCObRLXo.roa (hash: vlPvYnrh67Sac6G89vl74L5sy1jyV/vOZ0tMCXQKGc4=)
2: ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl (hash: kdy1y1eqP4r4MhJV3/agzIjDH16LGP2/thZ0Vvw092Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:48:c1:bc:a0:84:ad:36:03:4c:9c:4a:f6:61:38:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7df0c231b802ec575adaf6518c1c0ae13f3f1bc1
Validity
Not Before: Jun 30 10:01:22 2025 GMT
Not After : Jul 1 10:01:22 2025 GMT
Subject: CN=f59999e4809122e00b595f77b336fd0ea0bdb86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:29:04:76:53:4a:51:6d:a5:a6:93:dc:e5:ef:
ff:0d:dd:a8:ca:cd:4b:12:05:3d:be:f2:3e:6f:d0:
1b:39:db:57:1d:32:ef:3d:3c:d7:e4:6a:3f:f9:a7:
eb:be:2a:dc:4a:18:76:d3:41:4c:df:fd:7d:de:d0:
e9:84:8d:a4:d8:5a:75:57:69:67:b0:f6:f9:9d:1c:
b4:ac:1c:4b:10:d7:c8:19:bd:f4:a1:c3:8e:f5:80:
1f:9b:4c:96:3d:0b:9b:e9:4f:ac:46:48:c2:bc:a5:
35:9e:b3:dc:b7:1c:a9:54:93:65:1a:78:01:af:33:
e0:30:1b:9b:b0:35:6b:f2:db:ba:e8:95:23:1f:24:
a2:ac:41:e7:9a:10:97:c7:75:4d:9a:ae:64:6e:c6:
ef:6a:54:fe:e4:48:ef:86:d1:7a:26:53:69:f4:6c:
9c:e9:99:73:e4:df:a9:7c:4a:d4:a5:d4:88:88:f4:
af:ae:9a:3c:15:89:69:13:29:d8:71:5a:da:2a:58:
a7:ea:7a:29:5b:25:47:f2:d1:af:bc:33:ba:9c:29:
5c:9d:7b:e3:d4:53:d9:e3:d6:12:ef:46:e2:86:a4:
22:04:28:19:af:ba:7a:56:21:16:dc:a1:83:91:62:
25:ae:bb:d9:9d:0f:fe:25:fc:cf:21:0d:96:d6:bd:
22:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:99:99:E4:80:91:22:E0:0B:59:5F:77:B3:36:FD:0E:A0:BD:B8:6A
X509v3 Authority Key Identifier:
keyid:7D:F0:C2:31:B8:02:EC:57:5A:DA:F6:51:8C:1C:0A:E1:3F:3F:1B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ffDCMbgC7Fda2vZRjBwK4T8_G8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/ec3092-1149-48d9-b2ff-d27aecc2b744/1/ffDCMbgC7Fda2vZRjBwK4T8_G8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:de:10:80:ba:ee:39:ac:1d:b2:a5:68:a3:dd:37:8e:96:37:
23:de:d7:d1:48:ab:81:23:d9:44:dc:ed:90:59:ab:9b:90:2f:
89:71:c0:d7:dc:83:5b:e0:30:d8:a2:65:0f:9c:82:39:fb:c7:
c4:88:a1:74:47:94:a5:78:27:f7:27:fb:d2:73:86:32:f9:0f:
d6:9a:73:69:ef:24:ed:19:33:57:3f:d4:45:ac:50:f7:81:07:
03:58:57:bf:0c:f6:e4:e6:59:be:3f:5a:f0:db:b1:04:6b:33:
37:da:15:42:fa:a3:db:ed:dd:17:c9:7a:48:24:74:1a:5c:29:
b1:e9:c9:71:e0:3a:e5:5e:42:99:d2:65:d5:4c:2f:4f:29:f3:
16:0a:85:40:59:9b:a9:f6:2b:4f:85:78:66:49:e0:5b:68:7d:
22:c8:c1:7a:11:8b:a0:46:fd:56:c3:dc:27:b2:52:29:53:14:
ea:6e:db:a7:18:54:ab:de:62:1f:8d:85:b3:8d:bf:aa:08:5f:
d6:1e:dc:c0:70:82:6a:e9:68:89:9b:c7:63:27:ca:6a:2c:3f:
f9:49:a5:d1:f7:90:db:e8:cf:f4:71:08:62:6b:ac:e4:6e:a8:
4d:89:97:5b:9d:87:e3:65:8b:e4:18:2c:56:2f:19:ee:3b:e5:
94:3d:c3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 19:22:18 2025 by rpki-client