Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
File: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft (raw, json)
Hash identifier: DHnISTFTySSBxupv+YtFv2g/Ppj/sPiMOgbtI72Dkro=
Subject key identifier: 20:DC:F3:E1:3D:B2:8F:85:38:7B:B3:86:D8:6E:B7:5E:61:32:CB:3D
Authority key identifier: 15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
Certificate issuer: /CN=15fdb088e98e4e6415d944142212448369005b48
Certificate serial: 0198D583F701E5F159C96B39B51C52721014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
Manifest number: 015B
Signing time: Sat 23 Aug 2025 06:00:52 +0000
Manifest this update: Sat 23 Aug 2025 06:00:52 +0000
Manifest next update: Sun 24 Aug 2025 06:00:52 +0000
Files and hashes: 1: 1aDxtk8JRh6i0kM7vqlHAaQrJ3c.roa (hash: Q9hOadBBuPPxo3375iiCb6IfTPJTRKVivBWjEk+2yzQ=)
2: Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl (hash: S8r39uoT77OYDgEQ/dMwjnu1TsU70iOdVBwZ59yajhY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:f7:01:e5:f1:59:c9:6b:39:b5:1c:52:72:10:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fdb088e98e4e6415d944142212448369005b48
Validity
Not Before: Aug 23 06:00:52 2025 GMT
Not After : Aug 24 06:00:52 2025 GMT
Subject: CN=20dcf3e13db28f85387bb386d86eb75e6132cb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6c:3e:8d:c8:2e:dd:d5:37:25:75:e5:7e:05:
6e:51:80:18:15:1e:1a:19:19:06:82:62:8c:43:cf:
dd:cf:68:dd:0d:5e:e3:e2:b1:53:3f:5a:05:89:b6:
85:75:bc:b6:99:4a:bc:03:e4:d3:38:c0:9d:aa:ff:
ea:81:f8:41:ec:82:1a:3b:57:43:56:68:f8:ba:7b:
e7:07:e8:49:71:5b:f0:9c:5e:e8:0d:5b:68:d4:66:
56:0f:62:53:f7:7b:3b:8d:01:e2:51:d5:82:cc:f8:
3e:fa:be:be:f6:a0:2a:c9:2f:86:16:24:2e:98:70:
6b:6d:32:6a:93:b0:f1:ab:24:e6:68:8b:39:2a:ef:
92:9f:f2:d3:ba:7e:3f:82:4d:b9:50:94:d5:dd:6a:
6b:a3:28:0c:39:12:39:41:58:90:9f:65:12:7a:f9:
0b:0a:51:cb:03:01:4e:53:b5:58:02:09:cb:9f:43:
97:cb:33:99:a1:02:fe:0f:04:23:7c:46:69:2e:d0:
3f:f3:07:62:ce:35:3d:02:e4:3d:94:0e:bd:44:c7:
2f:69:2d:e2:8d:57:73:56:91:13:58:8f:f1:97:39:
46:80:f0:58:d1:53:e3:34:bc:3b:31:f3:02:34:f6:
3c:3f:a7:c2:4f:98:39:c1:db:8e:49:e3:f1:40:3c:
40:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:DC:F3:E1:3D:B2:8F:85:38:7B:B3:86:D8:6E:B7:5E:61:32:CB:3D
X509v3 Authority Key Identifier:
keyid:15:FD:B0:88:E9:8E:4E:64:15:D9:44:14:22:12:44:83:69:00:5B:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/cb877c-1699-44b9-9dc5-2f63ab46f31c/1/Ff2wiOmOTmQV2UQUIhJEg2kAW0g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:76:46:6a:41:9d:db:39:b4:a7:97:72:f5:96:a8:45:48:af:
31:3c:1b:0f:cd:d1:d7:7f:87:7f:7e:a3:bb:32:e9:94:54:c8:
81:e4:fd:7a:3a:60:ae:c7:0b:ca:ae:8c:95:38:87:4c:d8:e3:
df:f6:30:23:cd:f0:4d:82:ed:0b:7b:a4:aa:4e:05:54:78:08:
63:42:69:d6:24:97:48:88:f9:bc:20:b4:01:1e:79:75:ec:05:
d3:ed:66:e2:21:17:67:b6:74:d1:4e:87:b3:9e:54:76:d9:1f:
98:42:6e:b4:e3:48:be:56:1a:46:02:90:cb:79:04:d6:b4:95:
ec:7e:02:dd:05:7b:bf:60:8d:d5:46:d3:38:68:b3:d5:e6:d6:
98:4f:2e:b2:0f:11:e8:09:a7:31:03:fb:8b:2a:31:a0:1c:4c:
e0:78:b4:67:60:7b:58:48:ee:86:a4:17:90:94:38:a0:fa:ba:
35:2b:ec:b6:96:cd:e2:df:68:51:bc:68:3a:32:a3:69:13:a3:
e0:d1:08:e0:5a:11:06:fb:74:1a:34:32:ab:63:69:33:e3:5d:
e1:84:96:8c:f1:eb:ff:72:b8:2b:d6:17:3d:5f:e8:16:90:4e:
4e:db:91:e4:34:59:5c:45:ff:4d:6b:56:bc:23:17:0f:50:8b:
f3:7e:c7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 09:36:43 2025 by rpki-client