Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
File: DFfLOh5T52Ke47nyZy1Fce-F0sg.mft (raw, json)
Hash identifier: v+W8NNHool1ATPHLDJ+/Ai52RZ6mxcIcAT8CysU+f8U=
Subject key identifier: 4B:13:1D:5F:57:85:33:84:A2:CC:6A:4B:01:7B:E1:97:E8:EC:46:D9
Authority key identifier: 0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
Certificate issuer: /CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Certificate serial: 0197B6A143F0C90E70241DCA8ED2B1596F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:51 +0000
Manifest this update: Sat 28 Jun 2025 13:01:51 +0000
Manifest next update: Sun 29 Jun 2025 13:01:51 +0000
Files and hashes: 1: 58PUT6ysZxKBONG9sTIOc1qL5Ls.roa (hash: n7460GeFmYRqG1aJJrfKZDL2a6FFJmjROlobClHOM2Y=)
2: 6BSYpk5RnNsu0NP-8CiJ4A3-eIA.roa (hash: lk5fXZ2Pgc+XIPu3nQ53XeIOSBvgneeeWVb78tjDQes=)
3: DFfLOh5T52Ke47nyZy1Fce-F0sg.crl (hash: a+212VEIaIxhXL3xaUoCop1wp8afAYeUjU0V3SFS5Q0=)
4: L5CVIsoItTTVw443IuKRnX_6ofc.roa (hash: u0QFKwVPCjoujirXbnFrSGkKMLgZEeDISyY/cSBSGF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:43:f0:c9:0e:70:24:1d:ca:8e:d2:b1:59:6f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c57cb3a1e53e7629ee3b9f2672d4571ef85d2c8
Validity
Not Before: Jun 28 13:01:51 2025 GMT
Not After : Jun 29 13:01:51 2025 GMT
Subject: CN=4b131d5f57853384a2cc6a4b017be197e8ec46d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:61:c2:b9:a8:fa:35:de:ee:88:53:e1:e6:0a:
5c:27:3d:1b:09:bb:89:4e:2d:42:46:e2:e7:e5:e5:
0e:1c:2a:fd:5f:c5:2b:82:5e:9d:0b:be:8f:e5:6c:
b5:25:23:4a:ba:5f:64:90:13:e2:ff:58:d8:35:28:
75:1f:37:a5:d6:52:3a:be:36:0b:af:19:97:bc:05:
43:8b:b0:00:e1:f4:ab:89:c3:7d:ad:69:d5:de:35:
c9:16:44:dc:64:84:2b:38:6d:c7:9d:3d:b0:69:34:
b5:9a:f0:9a:0d:9d:99:92:ef:0b:7c:b8:bd:d4:a0:
a2:49:16:f2:dc:be:b7:9f:6c:57:6f:34:68:c7:ea:
f3:69:eb:27:55:39:03:03:b7:5d:61:68:d1:1d:e8:
16:ac:c8:c0:ae:46:a0:1b:25:01:09:c3:a7:06:fe:
8f:90:88:66:58:ee:af:06:e6:4e:07:4e:73:5f:fc:
a2:15:4d:19:d3:11:16:18:1a:2e:16:57:54:16:98:
d9:d5:45:95:ef:fd:b9:fb:84:88:44:c0:88:4e:74:
79:8c:8f:f6:0f:b9:5d:2d:94:34:4f:78:04:0b:d0:
87:da:bd:52:a0:37:49:cb:42:2a:bb:8b:be:e4:a5:
69:11:eb:af:dd:a4:e0:ae:02:bf:76:34:0e:95:79:
c4:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:13:1D:5F:57:85:33:84:A2:CC:6A:4B:01:7B:E1:97:E8:EC:46:D9
X509v3 Authority Key Identifier:
keyid:0C:57:CB:3A:1E:53:E7:62:9E:E3:B9:F2:67:2D:45:71:EF:85:D2:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DFfLOh5T52Ke47nyZy1Fce-F0sg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/6c1e01-1595-47b0-9e03-cf7232ddebec/1/DFfLOh5T52Ke47nyZy1Fce-F0sg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:4a:82:e7:9a:cb:fd:69:76:f1:63:e4:dd:13:10:58:e1:69:
53:33:08:8b:fa:14:49:31:5d:64:a3:46:0e:5d:89:6f:67:32:
fc:0c:0c:76:32:c5:2d:b0:ed:cd:76:c1:68:c8:df:06:02:06:
2f:5c:f5:81:7d:28:5e:09:52:fb:bd:46:8b:cf:4a:e8:86:77:
a8:ab:da:c7:93:90:24:c7:98:99:b4:53:fb:96:99:06:24:ce:
04:de:f1:81:84:96:3f:b2:eb:7c:1b:d3:b1:62:1e:0f:67:75:
e5:84:1c:a0:28:b6:c2:67:72:84:4c:13:c5:2e:32:e7:df:46:
7d:fb:c1:b0:d7:81:40:47:b6:62:62:03:c4:d2:7a:fa:6a:36:
52:c7:d2:0e:4a:20:06:2a:66:cb:2b:24:57:79:f6:cc:6a:6d:
4b:da:7c:62:51:54:60:97:11:e6:c8:a6:78:23:6c:25:43:51:
a4:58:32:57:da:cc:9d:0d:d9:57:82:c0:ce:ee:42:4e:9b:66:
20:2a:ae:aa:63:6b:cb:b6:77:c8:85:5a:d0:30:f6:2f:1b:f4:
4c:4f:ec:d8:e3:3d:28:18:70:68:22:b9:58:8a:14:e9:28:76:
c5:10:ba:64:ec:f3:f1:63:e6:ab:0c:f5:04:f5:2e:19:c3:53:
d8:99:19:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:22 2025 by rpki-client