Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
File: RSfyHUBiHlgT5KBpIRlH4k0A55c.mft (raw, json)
Hash identifier: rJvWBrr5HaecFYYiHdoym4FGl0Ny3PcfDqznYv8ARu4=
Subject key identifier: B6:0C:0B:1B:9C:5E:FB:80:F1:0E:DE:15:15:6E:51:96:75:E2:2C:20
Authority key identifier: 45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
Certificate issuer: /CN=4527f21d40621e5813e4a069211947e24d00e797
Certificate serial: 0197B6A1505FFE2B72CDA802196196B7C4D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:01:54 +0000
Manifest this update: Sat 28 Jun 2025 13:01:54 +0000
Manifest next update: Sun 29 Jun 2025 13:01:54 +0000
Files and hashes: 1: RSfyHUBiHlgT5KBpIRlH4k0A55c.crl (hash: B5N2U8ShF0+S6Shj8kG7jto+HkJ9xZzkexRcXgz8MLk=)
2: vI1HVKVzSovdfnitP5UZ3coZhWk.roa (hash: cmV3rToD1U+gURWFgpIifqRZJUwIYZppdxx/PgY7lUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:50:5f:fe:2b:72:cd:a8:02:19:61:96:b7:c4:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4527f21d40621e5813e4a069211947e24d00e797
Validity
Not Before: Jun 28 13:01:54 2025 GMT
Not After : Jun 29 13:01:54 2025 GMT
Subject: CN=b60c0b1b9c5efb80f10ede15156e519675e22c20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:78:5f:1c:6d:81:54:8b:3d:48:2f:9b:65:37:
f0:0e:f6:8d:41:f9:8c:7f:15:7b:94:ff:ad:b8:06:
d3:84:ad:6b:37:74:e1:fb:21:5e:22:19:61:9c:58:
72:17:bf:cd:25:8c:86:bc:6d:63:6d:f6:c9:31:20:
96:e1:a8:29:15:6f:0b:2d:45:0e:ad:aa:e6:71:d3:
5d:9b:e8:0e:9a:5d:c9:be:94:c8:16:2c:64:6d:c7:
40:1c:bb:65:3d:62:e0:6f:d6:eb:26:b6:ff:90:f0:
7b:92:de:13:33:95:6f:54:bb:7f:74:3d:76:80:16:
a9:3e:40:ce:71:96:77:4b:ca:97:fa:03:a7:1e:4b:
4f:3d:71:49:85:33:30:0a:ea:cc:3b:32:2e:72:b9:
58:2f:54:68:1b:a8:99:a0:61:5c:e0:77:a6:d5:33:
60:fb:53:4f:15:ef:dd:10:1b:de:6e:6f:31:c1:59:
3c:59:f2:75:af:5d:1e:a2:65:e7:7d:a6:b3:d1:cd:
96:ce:ea:8c:35:ea:95:3f:1c:c3:96:a6:fc:c4:28:
f1:f2:02:d5:3c:c8:7c:8d:33:74:85:f5:7a:fc:36:
41:74:42:c0:6c:7f:e8:2c:0f:3f:f8:3d:a0:d1:3c:
39:86:c9:ce:d8:e5:fc:d0:97:98:5b:41:e1:3a:5e:
11:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0C:0B:1B:9C:5E:FB:80:F1:0E:DE:15:15:6E:51:96:75:E2:2C:20
X509v3 Authority Key Identifier:
keyid:45:27:F2:1D:40:62:1E:58:13:E4:A0:69:21:19:47:E2:4D:00:E7:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RSfyHUBiHlgT5KBpIRlH4k0A55c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/7d7744-f367-42cc-a926-f086e6f96cbb/1/RSfyHUBiHlgT5KBpIRlH4k0A55c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:07:3b:15:37:a5:34:7a:0d:7e:66:6b:3f:e0:ed:48:67:80:
5a:46:db:d9:62:fc:8b:a6:bd:5a:1f:a7:56:d7:a4:7f:5c:61:
35:cd:95:41:4b:94:2f:21:69:63:f9:01:68:69:47:ad:37:4b:
32:95:91:05:52:03:65:38:7d:99:0c:c7:54:e6:48:13:54:c5:
80:a3:2d:e9:7b:db:df:6f:09:90:c6:0a:20:54:ad:f3:40:f9:
41:fa:1b:7d:27:e4:06:50:d0:ca:c3:af:9d:2a:96:77:9a:b3:
fa:e2:19:88:db:b4:ec:7b:cd:6f:f4:a9:d7:a2:e7:15:39:ec:
d3:26:c1:3f:d3:c2:38:31:f5:c6:e8:29:e7:13:bc:46:91:43:
08:ce:6e:01:f0:b5:18:0f:28:7c:98:cd:8f:9a:02:42:59:68:
d3:0e:58:74:b1:58:e8:50:3e:7d:a6:4c:85:63:3b:dd:8d:fe:
6e:84:c2:7e:6d:7e:ce:da:01:56:b7:0d:62:38:f9:d7:4a:29:
ef:14:75:f1:4a:dd:e1:bc:a9:b2:bb:e4:23:68:3f:9e:6a:8e:
c0:ab:77:a1:83:52:e0:cd:56:7d:b6:f1:04:c9:1c:75:33:d5:
05:5e:3f:2c:f9:50:5c:e6:56:be:a3:76:e5:2f:20:52:f6:41:
56:5e:8b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:52 2025 by rpki-client