Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
File: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft (raw, json)
Hash identifier: UhyQIcHghMF9chKKxWsvilezeG+4hXdO0U33eP6Q7w4=
Subject key identifier: 01:8B:3C:19:68:B3:2A:95:62:A8:5D:2D:37:D6:CE:66:45:00:72:8A
Authority key identifier: 7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
Certificate issuer: /CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Certificate serial: 0197BFDA60176D25C56ABB0F667A2A4321A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
Manifest number: 15C2
Signing time: Mon 30 Jun 2025 08:00:48 +0000
Manifest this update: Mon 30 Jun 2025 08:00:48 +0000
Manifest next update: Tue 01 Jul 2025 08:00:48 +0000
Files and hashes: 1: ZtCnXbp_YrwgCnKLVKnV0WSmOcU.roa (hash: kH4jiDgmQVBszMKQiiqGuVOByozNrdgPlqnsPcoBxDY=)
2: fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl (hash: Q6PoppkbRYrK4IqkZw9jdABy+yL5WuKqLAG963lDMJg=)
3: uklhr2EyG0t3uT3k6llXTSBL2L8.roa (hash: g5RYlitmLR15fm6PqKoImrqzTC0R3yuzCJ3CcwejS1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 08:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:da:60:17:6d:25:c5:6a:bb:0f:66:7a:2a:43:21:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e39825b26775e1551072f457d1edfd9d0ebe2df
Validity
Not Before: Jun 30 08:00:48 2025 GMT
Not After : Jul 1 08:00:48 2025 GMT
Subject: CN=018b3c1968b32a9562a85d2d37d6ce664500728a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ec:c7:9e:2e:94:e5:6b:ce:f9:56:49:16:d5:
ae:94:8a:51:c8:f8:6b:06:cc:c3:4a:40:fa:1c:f3:
93:18:0f:31:18:5e:7d:f9:2b:cd:e4:ae:6a:9d:7d:
6b:54:09:59:73:e5:08:a1:15:0c:33:7d:e8:fa:d6:
7b:96:4b:3d:71:0e:a6:65:65:29:35:38:6d:c8:f5:
10:3f:76:ea:a3:44:8a:73:4a:d9:41:0a:93:bb:78:
82:2b:36:24:45:72:a5:89:d1:c4:2a:10:b5:9c:2a:
c1:75:16:1f:02:c5:10:2d:37:69:f3:54:da:22:b1:
42:0b:8b:11:5c:11:f3:91:a8:55:15:be:25:99:db:
b3:7f:36:94:bd:d7:85:97:4f:f1:83:15:52:00:b9:
13:6e:35:4b:89:90:32:a9:14:c0:eb:90:f9:c6:60:
ef:14:d0:66:dd:e4:f2:77:43:40:4f:9e:b9:ef:fe:
1e:59:ef:1e:5c:bd:2c:dd:a9:65:95:c8:d5:7c:97:
b0:1b:a5:5e:02:ac:ae:d7:60:d5:b0:65:f8:97:eb:
0f:3c:3c:db:c6:14:f5:1b:3b:13:67:72:df:aa:b0:
05:df:2b:6d:62:eb:89:b3:d9:9b:9e:19:2a:9e:e4:
62:bf:b3:0c:f4:cd:26:22:3a:db:ae:6d:30:83:33:
46:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:8B:3C:19:68:B3:2A:95:62:A8:5D:2D:37:D6:CE:66:45:00:72:8A
X509v3 Authority Key Identifier:
keyid:7E:39:82:5B:26:77:5E:15:51:07:2F:45:7D:1E:DF:D9:D0:EB:E2:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/2166a8-357c-4cf6-b6f2-f8d6d1a74b1d/1/fjmCWyZ3XhVRBy9FfR7f2dDr4t8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:20:67:35:f3:81:7e:06:de:b2:56:eb:b1:58:75:ff:38:c0:
f5:2b:52:8e:75:0a:23:f3:4a:2e:6c:e6:1c:26:14:bc:9a:ac:
0c:aa:3f:f9:01:c1:7c:ac:87:68:b5:5d:d3:e5:9c:b0:0b:1d:
81:5e:af:b8:37:9c:62:83:a6:53:b2:63:90:cf:41:0a:b1:74:
62:d9:6d:f6:4f:ed:aa:66:32:71:b4:dc:e3:cf:e1:d4:c6:6d:
47:8d:7b:97:45:88:17:a1:dc:99:01:63:bd:b9:74:ab:a0:8a:
a8:9f:48:95:0d:d5:17:22:2e:37:5d:4d:dc:03:a3:51:fc:49:
6c:fd:d4:2c:f7:78:82:d9:36:a5:6e:36:55:65:68:b3:61:5b:
9e:20:64:36:d0:37:57:d1:68:e8:67:8b:c4:82:32:06:b9:67:
12:cf:7d:5a:56:88:44:1c:35:73:b1:45:7c:c7:c6:f6:38:30:
b4:59:93:a1:69:17:9c:b3:68:23:fc:e6:90:67:f2:ea:fa:37:
4c:0b:07:b5:24:f7:5b:66:4d:bd:a9:41:d7:c5:7b:e1:a4:60:
52:17:2a:e8:d3:3a:c7:c8:c0:fe:52:71:82:d5:00:e5:88:db:
46:32:86:48:d7:54:e8:92:87:f9:54:b3:85:1a:3a:61:66:61:
96:1c:f4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 30 17:33:15 2025 by rpki-client