Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
File: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft (raw, json)
Hash identifier: nkB7ikluDMjYj2nyklA1XmXhQKbH4Waltr3dwoJHd1k=
Subject key identifier: 15:EA:A6:B9:59:CE:59:8E:68:95:F6:BA:ED:8B:15:6D:99:86:DB:34
Authority key identifier: 16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
Certificate issuer: /CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Certificate serial: 0197B6A1F8B4A1F608ACEDBCE32F737784C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:02:37 +0000
Manifest this update: Sat 28 Jun 2025 13:02:37 +0000
Manifest next update: Sun 29 Jun 2025 13:02:37 +0000
Files and hashes: 1: Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl (hash: QYgoCVogd0s8r61ycbW795aYQmS+kZSWi21h9Q8l+NU=)
2: WIJApdkXlbEUeEO2cKb4qiLS28o.roa (hash: 1qyiMGZ/E0ICeDVPfHZdxWe+RTO7sCD7GgXGyaWl1c0=)
3: jmPpCt20gyt7K42Iosl951LnaB8.roa (hash: pgMiVWt2zP5Kw215EB82Tgo4s/CVNPF5riSUMPLjECQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f8:b4:a1:f6:08:ac:ed:bc:e3:2f:73:77:84:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=169f4ed6620c8960521fbb81ff72e837dc0038af
Validity
Not Before: Jun 28 13:02:37 2025 GMT
Not After : Jun 29 13:02:37 2025 GMT
Subject: CN=15eaa6b959ce598e6895f6baed8b156d9986db34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6d:37:42:f7:20:92:08:b7:a4:83:ec:89:81:
6a:0c:6a:5b:79:37:bd:cb:93:de:cd:0b:47:f5:d8:
5a:2e:f0:1b:9a:6c:62:72:a7:67:9d:17:f5:9f:1b:
00:1f:77:a5:b1:b2:f1:5c:69:06:a9:ee:97:c7:8d:
2b:4a:26:02:f7:b9:e7:07:fb:d3:98:51:e5:15:18:
3b:a4:82:cd:2f:b1:b8:4c:3c:7d:7a:fc:de:e1:45:
56:7d:3f:40:bb:3d:3e:5d:61:64:60:5c:b0:3c:ae:
5d:34:32:cd:40:04:5d:fd:de:04:5e:c5:15:28:94:
b9:68:ff:27:7f:59:54:3b:2a:e0:5b:fb:f6:03:43:
4d:ab:14:1c:8e:e0:ab:1f:bb:6f:3e:0f:ab:ca:ad:
83:57:5d:45:08:88:9f:fb:ab:ed:8e:2c:b9:77:be:
7a:f9:89:42:49:a2:02:a1:54:5f:6b:08:13:06:6d:
34:82:d5:67:22:10:ae:0c:78:4b:da:bf:d3:12:85:
05:34:71:52:a7:c6:3a:60:48:3d:4d:29:08:7b:c9:
cd:52:fd:bc:ab:0e:f1:5d:a2:ef:34:47:0d:cd:ca:
02:b7:1e:40:9e:f1:9b:39:e8:e9:78:06:47:7b:d5:
71:4e:dc:8b:77:f6:62:a7:86:db:79:86:6d:c5:86:
0e:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:EA:A6:B9:59:CE:59:8E:68:95:F6:BA:ED:8B:15:6D:99:86:DB:34
X509v3 Authority Key Identifier:
keyid:16:9F:4E:D6:62:0C:89:60:52:1F:BB:81:FF:72:E8:37:DC:00:38:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/bc6d1e-0146-4a35-8e9b-cf5fb042566a/1/Fp9O1mIMiWBSH7uB_3LoN9wAOK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:c8:fe:61:9c:64:e9:e0:a9:52:70:5e:54:1f:ba:a2:fd:88:
52:b6:38:a6:c3:c7:83:b7:82:86:e3:76:65:cf:8b:79:36:00:
68:77:8a:3b:93:2e:74:3c:9a:7d:41:28:41:47:bf:93:2f:b9:
6e:ee:16:d7:8d:fe:6d:39:f9:12:0a:4f:00:0e:dc:b2:e1:03:
0a:e2:b0:ca:72:65:2c:0b:41:fd:29:92:ee:4e:14:00:35:38:
c8:25:cd:0e:e6:87:3c:83:2b:c7:bf:15:fd:d7:79:80:2d:e6:
f1:3a:e7:80:20:b4:10:60:b2:3a:97:01:c1:97:7f:c3:d0:ac:
c9:bd:f3:3e:b7:32:cf:63:c5:e9:0a:63:f5:75:df:78:47:53:
08:4a:ab:fe:84:17:ca:a5:70:c3:11:72:33:0f:5d:93:f5:d5:
28:c4:93:94:33:89:dd:1f:d2:ec:ab:90:2b:1f:03:8d:a4:c5:
1f:e8:29:b1:06:b1:2c:54:a7:32:f6:c9:b0:98:df:44:b0:46:
dd:a7:43:a3:3a:35:d9:21:0f:45:a1:86:07:3a:21:b7:81:46:
22:39:fb:5d:96:6f:89:a5:69:b2:f3:44:b0:7a:23:20:db:e9:
cf:9c:1a:30:c0:94:cb:c5:02:67:db:9d:76:31:f3:3c:34:35:
16:04:80:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:33:48 2025 by rpki-client