Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
File: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft (raw, json)
Hash identifier: n/I2kIo/gz8KRSWkSKD6suHTOltm4S6E/26jsRVniHM=
Subject key identifier: 4D:CD:E7:5E:65:EB:92:9A:1B:02:93:41:F6:B9:5A:C7:B8:6C:CF:97
Authority key identifier: 14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
Certificate issuer: /CN=145ceb292089e0df75719db3e96c509754f94837
Certificate serial: 0197B632F4566397AD6C892D6A290631EA10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 11:01:21 +0000
Manifest this update: Sat 28 Jun 2025 11:01:21 +0000
Manifest next update: Sun 29 Jun 2025 11:01:21 +0000
Files and hashes: 1: FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl (hash: /lC1BLiwVc9OeZyZfca7s5mZc5SbSTg46wTnkRPAgdA=)
2: O5ilAJzp4Fiady6OzW8y6F-h2tk.roa (hash: 5NXhQBooraxn6sup0YPIQ8njZP6A7m2bDKaKDs+Nqts=)
3: QwSiPMgCrnV_t6yAUHlhkg3u_jM.roa (hash: hYyVlbmE/pf2k4j7NJjebHsv7m2YlTW7LKuiiP6VfuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:f4:56:63:97:ad:6c:89:2d:6a:29:06:31:ea:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=145ceb292089e0df75719db3e96c509754f94837
Validity
Not Before: Jun 28 11:01:21 2025 GMT
Not After : Jun 29 11:01:21 2025 GMT
Subject: CN=4dcde75e65eb929a1b029341f6b95ac7b86ccf97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5d:79:3b:62:ee:48:c4:b6:30:25:19:c1:18:
c6:33:ec:af:8d:9d:d3:48:1c:b8:84:7e:8f:a8:b6:
e3:15:53:51:df:87:fb:aa:92:e1:60:46:bb:f6:f5:
b2:21:95:6c:62:c7:df:4f:08:47:7f:0d:04:90:1e:
33:c9:2f:a6:af:92:bc:27:f9:7d:57:d5:95:70:c0:
60:48:9e:4a:e0:03:3e:b4:5f:68:af:a0:3d:b6:20:
16:e2:32:f3:bc:22:1c:5c:1d:ba:a7:42:b2:fb:b9:
69:f7:43:f9:9d:e5:9a:68:fb:d3:f5:1a:05:25:63:
c7:e7:c7:d9:ee:6c:09:72:e2:65:cc:26:9e:ec:dc:
39:0c:54:41:8c:f1:b8:f7:73:ba:20:19:bb:0a:47:
6e:18:96:0b:98:fd:bd:92:b8:fa:51:ff:1e:35:80:
63:63:b6:8e:d1:de:9e:63:b9:46:16:e7:90:0b:93:
b8:6d:5c:65:9a:45:d8:e9:7c:65:80:7d:6a:5e:92:
a0:b8:d6:4f:59:29:3c:90:87:8b:91:0d:fe:ac:b4:
b6:83:ac:90:a3:51:fa:5b:2f:84:14:11:41:36:d1:
4e:25:6c:b1:35:c6:ac:1d:c9:f4:6b:d9:32:fd:d2:
1b:0f:5d:3f:f8:d9:97:63:39:5e:ff:30:dd:0d:10:
f8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CD:E7:5E:65:EB:92:9A:1B:02:93:41:F6:B9:5A:C7:B8:6C:CF:97
X509v3 Authority Key Identifier:
keyid:14:5C:EB:29:20:89:E0:DF:75:71:9D:B3:E9:6C:50:97:54:F9:48:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/c71fde-3ef2-4bf7-8641-12719c261cc0/1/FFzrKSCJ4N91cZ2z6WxQl1T5SDc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:6f:bc:f6:8c:25:69:54:85:5a:80:63:8a:16:46:fc:b3:d7:
ac:d7:ad:53:44:4a:20:fd:3c:26:78:6c:2a:d2:3d:c7:66:64:
57:62:5b:aa:04:f2:b9:1c:5a:12:d4:92:61:21:d8:36:d7:f1:
44:44:18:2d:8e:29:a0:36:7e:96:a1:88:c0:02:66:75:06:74:
44:56:1e:86:f9:7d:cf:d5:9c:9d:fa:34:e1:64:68:6a:b2:b6:
70:0a:5b:40:47:2a:3c:e5:57:5c:b6:85:22:5a:e6:9b:79:ca:
74:c7:da:a5:5a:aa:65:f1:32:3a:5b:7e:a0:20:44:f2:83:90:
5e:46:0b:41:cd:c0:b2:7f:3b:19:62:10:e4:b9:07:68:13:36:
28:0d:23:e2:fe:c0:1c:ec:ba:77:cc:47:8f:f5:98:36:b8:59:
98:fe:6b:85:d4:49:ba:34:25:a9:a0:b6:a9:40:c3:d6:94:a8:
92:9a:bc:11:8d:cd:6d:79:fe:8b:22:e0:12:1d:bb:d0:90:78:
ec:20:70:4c:65:ba:47:6a:33:9b:23:b6:79:3d:20:f7:52:f7:
b3:16:86:f3:e5:e5:22:78:3d:bc:ba:5e:a8:2e:5a:f2:95:fc:
4a:68:f7:4e:51:c4:66:90:da:bd:bf:8a:22:34:33:dd:d3:13:
00:04:f1:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:16:19 2025 by rpki-client