Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
File: ftCMDM2oAs8gznq97qICFOBeR68.mft (raw, json)
Hash identifier: Q+3EmpbjMlgaL47pP3v91MA2VHagGymrVPztaV/CaZ0=
Subject key identifier: 42:46:AC:F3:C4:B6:3C:08:56:18:22:30:7E:F9:11:D0:5B:10:EC:EA
Authority key identifier: 7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
Certificate issuer: /CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Certificate serial: 0197B77CA65C324FADB0EA3CD44D1BF96C7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:28 +0000
Manifest this update: Sat 28 Jun 2025 17:01:28 +0000
Manifest next update: Sun 29 Jun 2025 17:01:28 +0000
Files and hashes: 1: P79ilXjNNqLG_ABRYWZBAk8XzIM.roa (hash: z414yhHihxRqPfk1ej5lxFnTCRyHE+z/dZVS4h4vn3A=)
2: ftCMDM2oAs8gznq97qICFOBeR68.crl (hash: CcMiAiLw8jbdvgCHvM1/a6LZLPd8DNm4lZvxfxdXVI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:a6:5c:32:4f:ad:b0:ea:3c:d4:4d:1b:f9:6c:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ed08c0ccda802cf20ce7abdeea20214e05e47af
Validity
Not Before: Jun 28 17:01:28 2025 GMT
Not After : Jun 29 17:01:28 2025 GMT
Subject: CN=4246acf3c4b63c08561822307ef911d05b10ecea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:6a:97:21:c7:91:38:12:a2:50:02:ae:4b:
29:88:4e:ec:6a:2f:d1:df:c1:c1:ba:be:41:49:ca:
d8:67:73:da:69:35:0e:55:bb:cd:11:cd:a0:37:3d:
d0:c2:62:f3:26:a5:23:31:f5:96:a5:d6:fa:2b:7d:
a0:a3:df:95:74:85:e8:42:57:39:61:6c:ea:af:25:
79:6c:9c:19:6e:6c:81:d9:2f:56:fb:19:52:e7:8f:
85:dc:0f:01:0b:f9:14:7a:97:11:4b:5b:02:59:2e:
dc:65:9b:20:60:c7:a9:b0:32:a9:a5:95:14:e5:31:
46:cf:de:a7:fe:3d:4d:6a:e0:1f:ff:86:4d:10:a3:
e2:e3:85:32:28:b7:7c:c4:04:13:b5:85:df:4d:82:
44:b3:3b:ef:2b:b5:a9:44:ef:d7:44:56:c3:4e:7d:
8b:df:ca:28:a8:d1:2e:3b:0e:51:2e:ba:2b:98:54:
f1:26:48:3b:b4:37:d4:06:56:ad:62:20:95:b3:b0:
33:99:60:0a:54:9d:2a:14:8f:ea:d8:2e:db:be:9e:
d1:cd:29:59:40:45:b5:ca:e2:f6:88:d7:85:92:12:
87:74:0c:84:e4:97:29:4a:c4:ee:8f:ca:fb:15:6d:
1b:68:6a:1b:4d:f0:75:11:a9:ab:ad:e4:73:0a:53:
68:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:46:AC:F3:C4:B6:3C:08:56:18:22:30:7E:F9:11:D0:5B:10:EC:EA
X509v3 Authority Key Identifier:
keyid:7E:D0:8C:0C:CD:A8:02:CF:20:CE:7A:BD:EE:A2:02:14:E0:5E:47:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ftCMDM2oAs8gznq97qICFOBeR68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/3a20d8-e902-41f5-befa-ab5f39fb8d36/1/ftCMDM2oAs8gznq97qICFOBeR68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:67:85:d5:bc:2c:5a:dd:62:9b:43:c5:07:61:ca:2e:b2:c4:
f7:75:4d:34:83:0f:58:a1:5e:0e:b4:67:12:99:e7:7a:6b:d0:
ae:a7:23:ee:b0:85:11:a5:33:62:f3:8e:8e:56:13:52:69:6b:
ee:89:00:ca:9d:56:92:ca:b9:6f:41:4a:8b:c1:ea:b3:42:e5:
a5:5a:8a:c1:a6:7c:e1:46:9f:96:d9:57:a0:27:2b:4a:4a:6f:
0e:7d:8b:36:e0:7c:37:3f:36:5a:ff:74:6a:88:a1:eb:b6:1b:
22:c6:09:c2:07:f7:b4:6a:94:85:b5:a7:82:5b:55:77:eb:42:
02:45:2a:79:21:c5:b6:9a:34:53:57:76:8f:cf:99:ec:23:df:
92:1c:db:b4:29:49:7d:2f:c8:4a:e0:6c:b9:a9:37:d4:28:9a:
86:22:45:6d:35:f0:eb:f3:07:32:56:c8:97:d5:9e:94:95:49:
b5:28:6c:fe:d8:cc:82:4d:a8:a8:a3:e7:5e:0f:c8:23:c4:ea:
25:df:8e:49:53:dd:e5:44:fd:91:0c:14:61:f3:03:85:6a:73:
fa:16:49:00:fa:c4:8e:24:b1:fd:fc:c3:b6:0f:c1:58:72:59:
6a:77:f0:e3:80:2c:c0:73:c7:fe:8a:0e:81:9d:f3:38:1e:04:
f0:c7:1e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:28 2025 by rpki-client