Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
File: F0c32KSE0SU0ykD43YGKWIw7PeI.mft (raw, json)
Hash identifier: gSybX+CeYHVI2kaqPoOuVT/I1E2rTIqbJU8PO039dWM=
Subject key identifier: 52:E4:96:68:FD:E7:17:77:82:DE:DF:87:CC:E3:0A:A1:B2:90:5B:D1
Authority key identifier: 17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
Certificate issuer: /CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Certificate serial: 0197B7EA14A26D70880CE5626994F1E2553D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 19:01:00 +0000
Manifest this update: Sat 28 Jun 2025 19:01:00 +0000
Manifest next update: Sun 29 Jun 2025 19:01:00 +0000
Files and hashes: 1: F0c32KSE0SU0ykD43YGKWIw7PeI.crl (hash: BUBV4jsLc9Y1Tj374CNQpTxm6AK53bSTD9WHmotv1Nw=)
2: ghOgZScInzU-k80H-uXo6Z44fh4.roa (hash: lvvfvqGDTHXluMikuB2xTzxX/lcqRvi6zFraBkTfrlc=)
3: y-KKayWDkSAQJ7WHnrYBMGYeW7s.roa (hash: eQq4AAV0PFKKGDw6XQHABkksm4Mts0DM9GmL48be7Dw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:14:a2:6d:70:88:0c:e5:62:69:94:f1:e2:55:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=174737d8a484d12534ca40f8dd818a588c3b3de2
Validity
Not Before: Jun 28 19:01:00 2025 GMT
Not After : Jun 29 19:01:00 2025 GMT
Subject: CN=52e49668fde7177782dedf87cce30aa1b2905bd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9e:8c:7b:5e:f9:68:3b:46:cb:b3:9f:13:ec:
cb:2c:d5:ec:4c:18:2e:0f:39:4c:ca:e7:c3:24:7a:
2a:44:a7:0f:15:e8:71:c8:f6:93:11:4c:c1:52:42:
9a:aa:fb:04:ad:88:70:13:57:c8:ea:65:a8:c8:7e:
9f:65:95:e2:44:27:fe:47:7e:3f:03:42:bf:db:8a:
2f:6b:02:c5:48:9f:73:8e:de:25:99:1b:b3:ec:18:
82:e1:9f:4f:a3:08:3f:c9:1d:51:a6:aa:97:ba:3f:
fd:33:40:ce:19:a1:72:28:36:49:0f:e8:cd:73:50:
cf:c8:72:cf:e5:1e:21:fe:34:83:37:f7:b8:1e:8a:
70:7b:3d:1c:1c:98:6e:a8:2c:0f:7c:0a:35:74:d5:
41:0b:55:69:b9:8f:b2:3a:09:5b:f5:47:3a:42:76:
78:cc:5a:04:a5:cd:02:7b:ab:62:5e:9e:12:3a:fc:
2e:39:a2:ef:45:d0:6a:21:4b:2e:fe:99:dd:86:43:
5b:d7:39:7e:e2:29:67:07:e4:da:6d:83:0e:9e:4b:
3a:46:0d:c9:99:bc:a7:2e:a9:3a:88:d3:c5:41:f3:
10:fe:fb:23:66:35:90:ae:cb:d8:6f:64:b8:0d:bd:
72:0e:8e:55:7a:78:43:21:65:6e:10:d8:a2:44:bb:
27:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E4:96:68:FD:E7:17:77:82:DE:DF:87:CC:E3:0A:A1:B2:90:5B:D1
X509v3 Authority Key Identifier:
keyid:17:47:37:D8:A4:84:D1:25:34:CA:40:F8:DD:81:8A:58:8C:3B:3D:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0c32KSE0SU0ykD43YGKWIw7PeI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/19324a-0616-45d4-9b53-7b746ea1ab82/1/F0c32KSE0SU0ykD43YGKWIw7PeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:12:e5:43:a2:ce:61:ba:01:27:9a:63:97:21:ad:ca:98:d8:
b1:97:6d:2d:5f:ec:f6:f9:d3:5e:0a:bf:0d:bc:86:f5:ee:ff:
2c:de:e4:82:ce:df:62:48:84:04:b7:e1:dd:02:f0:d6:6a:9a:
38:44:85:b0:fa:50:cb:07:ca:cb:79:1a:27:b4:80:5b:0a:3f:
53:a6:32:00:03:3b:26:88:22:a3:0c:50:9f:12:70:b1:a2:54:
2b:19:b9:17:62:ac:aa:b4:de:e2:87:33:11:f0:b4:f6:eb:7f:
82:f0:d3:f1:81:31:3d:83:bc:22:1c:ff:b6:78:f3:37:c0:26:
5b:9b:91:e6:f5:31:0b:b0:d3:f1:f0:de:a6:38:1e:29:7d:e6:
74:2a:4e:d1:73:1e:e7:98:33:ea:8f:0a:90:02:8b:f1:7c:4f:
e4:22:4b:4b:18:b5:9d:f2:aa:ff:01:f0:71:e7:1e:cb:cb:88:
89:02:c9:6d:62:8c:2b:a3:15:f7:21:3f:94:ca:13:9c:90:2e:
43:d2:39:90:7d:f5:1b:87:74:a4:23:72:49:73:f0:4e:7b:f5:
d5:5a:60:89:10:fd:f9:af:56:6e:52:d5:2c:b3:b2:f5:59:51:
04:15:d1:f3:81:07:d0:88:27:74:5b:ff:f8:f7:36:9a:2e:e5:
7b:76:f1:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:44 2025 by rpki-client