Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
File: FvFFcn00rmYHphUwEoPu69XWKRw.mft (raw, json)
Hash identifier: dPYFyh+20swvGoVVxE1JmG8GiL1U29mI/CDGuuIFYJM=
Subject key identifier: 5D:14:44:3C:FA:39:1F:BC:0B:B1:96:B7:73:A5:00:D0:0C:73:A8:7F
Authority key identifier: 16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
Certificate issuer: /CN=16f145727d34ae6607a615301283eeebd5d6291c
Certificate serial: 0197B6A104264D39172E9B6D79625B46E1BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
Manifest number: 12E5
Signing time: Sat 28 Jun 2025 13:01:35 +0000
Manifest this update: Sat 28 Jun 2025 13:01:35 +0000
Manifest next update: Sun 29 Jun 2025 13:01:35 +0000
Files and hashes: 1: B7T3sZebBoQYg5x0RYsPBj23iEo.roa (hash: O9yZ4KZ+ahHkW7NK8lCiaskHOdR7GD8prEJOvXc4vRI=)
2: FvFFcn00rmYHphUwEoPu69XWKRw.crl (hash: X8tXyZk/pV5iwpdk0H5qIKD85k2X8GxjcyK0ARYireA=)
3: swm48vI840zUfl2DaxMs8hbeLoo.roa (hash: JjFou/0kBbJgWy4DCqB6G2CRT7ZKW8RECYymrqJxYxE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:04:26:4d:39:17:2e:9b:6d:79:62:5b:46:e1:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f145727d34ae6607a615301283eeebd5d6291c
Validity
Not Before: Jun 28 13:01:35 2025 GMT
Not After : Jun 29 13:01:35 2025 GMT
Subject: CN=5d14443cfa391fbc0bb196b773a500d00c73a87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ed:f8:0c:5b:13:22:ca:b4:12:65:34:61:89:
0c:7a:80:6c:a0:75:14:eb:dd:46:05:aa:1d:ca:5f:
20:d8:bd:ba:1c:b9:6f:17:7a:21:5a:c5:f7:49:2f:
b1:d5:f2:d3:54:65:fc:2b:14:4f:31:fe:ab:6f:27:
6a:eb:4e:d1:a0:25:34:f0:a3:44:f1:d2:12:04:d3:
3a:0d:db:49:b3:a7:39:77:27:bf:88:ac:4a:5a:63:
2e:81:55:b1:37:a6:c0:34:45:46:de:73:cf:b2:c3:
19:14:99:0b:d5:75:79:52:e6:6f:e4:55:01:1a:a1:
d6:7c:9f:20:fc:a9:1e:95:5f:2d:d9:82:4a:87:e3:
06:3c:84:65:bc:46:2b:9c:b3:0b:5a:b3:48:1b:7e:
95:dc:82:c7:96:3c:b0:89:50:ca:e7:e3:1d:cc:32:
63:14:d5:f7:99:83:63:c1:47:a1:5c:bc:ce:30:18:
83:ff:46:2f:3c:4d:f7:3d:ff:20:0d:74:e6:eb:9f:
1a:07:be:92:9c:2f:59:6b:df:dc:10:81:5d:a8:51:
22:61:58:15:63:26:65:47:1a:2b:c6:f3:03:56:08:
63:69:5c:4c:6c:3f:f4:b4:64:0b:8c:5c:0e:77:26:
bb:d2:a3:bf:66:73:83:bf:0e:75:12:0f:10:63:39:
36:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:14:44:3C:FA:39:1F:BC:0B:B1:96:B7:73:A5:00:D0:0C:73:A8:7F
X509v3 Authority Key Identifier:
keyid:16:F1:45:72:7D:34:AE:66:07:A6:15:30:12:83:EE:EB:D5:D6:29:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvFFcn00rmYHphUwEoPu69XWKRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/6c808e-0015-4d62-81d8-ecb7ae2722c1/1/FvFFcn00rmYHphUwEoPu69XWKRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:d5:d4:4a:38:d5:05:d5:75:51:7b:23:8b:da:9e:fb:e2:16:
2a:56:45:57:d0:c6:c7:d6:bf:96:46:fc:0b:07:87:eb:56:08:
f9:09:a5:aa:f1:e1:23:ef:e3:18:2c:10:45:86:3d:30:00:25:
4f:a7:09:f4:24:7c:54:be:77:c5:49:d7:37:f4:7d:5f:d9:70:
f9:6d:68:1b:83:62:3e:d4:a5:52:16:c0:7f:34:24:38:7c:5e:
00:5e:1b:82:d8:f8:7d:3e:dd:cb:a3:c6:fc:8c:30:da:39:e3:
df:ec:28:27:71:29:00:44:d4:55:cc:f6:a1:aa:86:8a:1b:7a:
a0:d5:6d:bb:ca:bc:83:dc:05:81:6c:26:77:4d:7c:5e:cf:c7:
7d:c5:d9:1a:d2:4f:39:93:3f:5d:66:fe:c2:45:42:65:c3:80:
28:ef:e3:39:c2:d5:7f:0f:77:07:8d:14:ce:98:83:80:28:aa:
49:da:1d:c9:04:58:9a:27:a2:7c:74:92:9a:f4:07:e5:45:74:
6a:fc:5a:6e:5c:27:1b:60:3d:dc:2f:ee:f7:ca:2c:57:13:b9:
5d:0d:b9:ba:b0:ce:b4:fb:54:dd:df:49:9e:b3:7e:8c:6c:57:
ce:cf:8c:05:0c:ff:e3:e1:e0:1a:ca:49:0f:f6:48:f0:63:58:
ec:d2:52:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:29 2025 by rpki-client