Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
File: _ieWxamFRTLp7WONHDmlQcLYlSw.mft (raw, json)
Hash identifier: 1gLEGuTTne1sN4GVUa3rxBQQ7ypbQFTckKkNvgXJIug=
Subject key identifier: 19:60:02:D8:3A:6D:DC:AB:D1:13:8F:9C:03:1B:28:7A:0C:0C:ED:12
Authority key identifier: FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
Certificate issuer: /CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Certificate serial: 0197B70EA43F8937E35164F1BBDA5F4B849B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:19 +0000
Manifest this update: Sat 28 Jun 2025 15:01:19 +0000
Manifest next update: Sun 29 Jun 2025 15:01:19 +0000
Files and hashes: 1: _ieWxamFRTLp7WONHDmlQcLYlSw.crl (hash: bp0biHDfYzwqH3ZPMsPu5qpONTHgdVnvU3ykRUnhrDE=)
2: lVgaXBqK9ipwWOL2JmWoEWoiLBY.roa (hash: Oh3cZzMySDT+Ikxg+sUYVfiZZ5GP7qV/BWdrXyebTLU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:a4:3f:89:37:e3:51:64:f1:bb:da:5f:4b:84:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2796c5a9854532e9ed638d1c39a541c2d8952c
Validity
Not Before: Jun 28 15:01:19 2025 GMT
Not After : Jun 29 15:01:19 2025 GMT
Subject: CN=196002d83a6ddcabd1138f9c031b287a0c0ced12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:23:96:c5:8f:7b:18:34:03:93:1c:e4:60:c7:
68:b4:14:ff:d2:ea:c4:70:fd:93:06:80:fc:e5:15:
2d:c7:24:07:80:2e:e0:9c:0c:7d:97:26:b4:2b:89:
ad:f6:4f:12:19:44:a5:21:23:84:cf:ca:d2:01:ef:
31:d7:5e:4e:de:29:f0:44:3a:85:1d:d3:e9:ce:7d:
e6:4f:d0:5f:b1:64:9d:5d:8b:69:bd:1b:04:f1:33:
1f:b5:62:c4:f6:a5:9d:f4:f4:a4:74:bc:22:27:fd:
96:70:1e:d0:c3:e6:ca:ce:69:2d:dc:c8:8a:b4:22:
0e:4c:14:07:39:cb:be:f7:31:71:4c:ba:16:b1:48:
8c:dd:92:33:55:82:18:fc:94:e9:9e:05:4c:4f:00:
5a:68:96:6b:a5:e6:3f:b2:54:91:eb:9f:53:2a:08:
d6:1b:3b:13:36:b3:9d:22:20:74:69:47:ef:34:db:
77:40:cf:b0:30:a0:42:14:2c:46:41:c6:ff:26:0e:
ac:c2:3a:0d:80:ee:4c:3a:6d:ff:56:e8:71:71:0a:
4d:0b:f9:e2:51:8b:d5:11:fe:47:a3:5b:be:ca:db:
b3:c1:9c:e4:d9:86:b2:93:7d:1e:eb:8e:d7:5f:5d:
f4:37:cb:0c:de:dd:cd:e9:bf:6b:bb:fe:6a:34:d7:
05:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:60:02:D8:3A:6D:DC:AB:D1:13:8F:9C:03:1B:28:7A:0C:0C:ED:12
X509v3 Authority Key Identifier:
keyid:FE:27:96:C5:A9:85:45:32:E9:ED:63:8D:1C:39:A5:41:C2:D8:95:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ieWxamFRTLp7WONHDmlQcLYlSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/cba186-e4d2-45e1-a938-0e4ab2637bed/1/_ieWxamFRTLp7WONHDmlQcLYlSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:ba:56:45:17:f0:90:c8:13:53:d3:1a:cd:12:62:d1:f7:cd:
6b:c7:da:ec:28:6e:d0:31:bb:04:8d:c2:d5:46:23:5f:94:a7:
f5:b2:20:53:e1:67:68:70:13:42:5b:ba:04:d6:c1:76:a9:f6:
e3:08:45:5d:32:cf:d6:d4:28:11:51:bd:25:06:1f:8d:50:bd:
11:a7:cc:76:32:58:1a:ed:a5:73:ab:2c:38:dd:ea:80:d1:e8:
b8:a9:37:04:bd:7f:f7:59:5f:a3:d0:73:95:80:73:e2:3f:d1:
ab:d6:e5:77:99:ff:cb:21:e3:1e:e6:f1:69:8b:c6:5b:5a:0c:
a1:49:69:b8:8e:5a:34:a4:da:bc:b8:26:9b:60:2e:dd:5d:75:
43:f1:77:3a:d4:6f:21:49:57:e8:ef:fc:52:41:ec:53:37:38:
80:73:ac:c9:4a:3a:0d:4a:e9:a2:d7:80:eb:a5:8f:ad:3c:ab:
f0:56:b4:62:aa:82:eb:2f:22:ec:ef:da:f3:57:42:01:e6:7d:
41:9d:26:0b:79:8a:70:ab:3a:9e:e6:f1:68:ec:7f:9d:ca:10:
e0:3a:91:a5:8b:cb:16:b3:ae:3c:66:97:7c:bb:64:6e:8a:d2:
60:3f:7a:15:fa:d4:7b:51:35:f0:d7:06:6f:94:f7:51:31:fd:
88:e3:2f:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:08 2025 by rpki-client