Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
File: _l28QbEed7xEvSxzVVS1tCWNDDM.mft (raw, json)
Hash identifier: Ws1/O4R3LOjxTs70bObKYGeqWGSg7AyRPAAEgJKJYpE=
Subject key identifier: B5:B4:FD:B5:EE:40:A9:AB:EC:FC:5A:9B:A1:62:F1:37:0E:6E:BA:EC
Authority key identifier: FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
Certificate issuer: /CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Certificate serial: 0197B6D7A8072FB61812800FD2FFEFCBAC14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:01:15 +0000
Manifest this update: Sat 28 Jun 2025 14:01:15 +0000
Manifest next update: Sun 29 Jun 2025 14:01:15 +0000
Files and hashes: 1: QQYnKZZEKh0t39rLRqceu8xA4vU.roa (hash: PxxqnNy49Cu4ltRHNTmmrI+SwKZQqPOvx1a9kq3y6xs=)
2: _l28QbEed7xEvSxzVVS1tCWNDDM.crl (hash: loDN3zcImg/XJvlW85IIYhfIBqnkAUCOc+Z/ynMG/U8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a8:07:2f:b6:18:12:80:0f:d2:ff:ef:cb:ac:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Validity
Not Before: Jun 28 14:01:15 2025 GMT
Not After : Jun 29 14:01:15 2025 GMT
Subject: CN=b5b4fdb5ee40a9abecfc5a9ba162f1370e6ebaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:16:a7:f0:9a:07:fa:4b:83:64:dc:d0:80:97:
e3:42:e3:5d:81:32:8c:d1:19:c1:46:b3:24:75:41:
75:36:d2:85:f3:1c:5d:e4:fb:69:69:6b:e1:6e:4e:
4d:7d:f5:42:85:02:5d:97:fd:6e:8d:1c:e4:07:e2:
37:5c:8d:26:db:e8:39:0f:83:8c:b9:70:ca:8a:74:
a7:1d:b4:a9:0c:60:72:43:ad:43:4a:ac:d7:92:9b:
d9:3f:9f:13:c1:3e:6b:81:b9:97:4c:f9:ab:7f:d9:
fa:7a:94:a0:fb:19:c3:0d:89:20:d9:d6:7e:a8:8a:
4f:9b:b7:a2:c0:54:78:f2:3e:75:2a:9c:be:98:71:
4f:da:63:6c:14:6a:b9:41:69:fb:9d:52:c1:6d:1a:
cb:69:e1:fd:e9:d7:79:ad:8d:34:fb:d2:6f:c6:6f:
ae:2b:7d:01:26:aa:f7:8f:36:1e:ec:b4:cc:fb:e3:
42:70:98:72:49:07:5e:c5:9a:8c:f3:31:2e:43:9c:
d6:76:86:52:d0:f8:64:30:1f:39:3a:95:fb:06:d0:
24:f2:de:14:ac:c5:20:07:a6:2c:c8:80:8d:4b:b6:
c8:c8:26:39:6c:ed:df:4f:75:35:a7:4d:d1:80:5d:
cb:e6:bf:a9:df:16:f2:95:10:ca:be:1e:da:1e:33:
b0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:B4:FD:B5:EE:40:A9:AB:EC:FC:5A:9B:A1:62:F1:37:0E:6E:BA:EC
X509v3 Authority Key Identifier:
keyid:FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:3e:d3:30:7a:e1:bf:0a:3e:7f:53:89:e6:5c:96:ae:31:e9:
c5:c6:bb:32:8b:84:64:20:81:40:1f:d9:cf:b5:05:dc:03:13:
db:ee:7a:28:76:30:92:f9:f8:d4:26:a3:60:82:0d:6f:95:f9:
f8:c6:60:0e:3c:b0:29:ab:b1:6f:32:29:c4:05:67:1d:b7:3c:
18:dd:4c:63:97:88:34:af:e9:42:2a:db:0f:f7:ea:b7:8d:48:
b6:8a:55:cb:a7:51:13:61:3c:25:eb:0f:97:99:e4:fa:68:87:
d1:f7:9b:cf:8a:ce:01:4a:b6:cc:22:ce:44:68:bc:9f:0c:ae:
8e:14:63:5f:50:eb:da:f6:3d:60:9e:a2:9d:f9:4a:5c:e3:13:
d3:f2:fe:df:82:af:1b:94:d8:c9:ee:2e:6c:56:3f:50:da:d5:
20:fd:ea:80:d4:77:92:99:27:98:aa:00:bb:b3:ea:5f:3b:01:
02:ce:28:7a:88:2f:96:9b:3f:63:3d:03:7c:b6:de:19:50:5a:
5c:21:6d:7f:1b:92:63:b1:85:2c:55:37:e7:97:e4:6d:86:b8:
b5:f5:84:0f:c7:f2:e3:bc:61:ff:ea:36:bf:8d:af:f7:de:76:
28:8a:ea:be:61:6a:7d:a9:bb:1e:64:f4:9d:4c:b3:af:32:e5:
90:4e:7e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:46 2025 by rpki-client