Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
File: 18FIdhtnAFMpqokTXTWtI1FzvEg.mft (raw, json)
Hash identifier: csBDdoRZYWwTwl9wyc+ncDGtMVaPcGwFLX73cah/ics=
Subject key identifier: F6:4B:71:AC:80:5B:99:3A:E7:10:B8:E9:76:6F:E2:C5:25:CA:09:29
Authority key identifier: D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
Certificate issuer: /CN=d7c148761b67005329aa89135d35ad235173bc48
Certificate serial: 0197B6A083F4745B52FBCC299B5458036B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:01:02 +0000
Manifest this update: Sat 28 Jun 2025 13:01:02 +0000
Manifest next update: Sun 29 Jun 2025 13:01:02 +0000
Files and hashes: 1: 18FIdhtnAFMpqokTXTWtI1FzvEg.crl (hash: lA3U7S+UTJ7mwweHx99D2Q921dY+GRHhk3oSBV5SVqQ=)
2: BLbhril53MDVDeifZO2SL2UKKFM.roa (hash: UsTWzBHrl9dfEtBG/7NjUZNeMJlhyin0Rp6YIFRWYAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:83:f4:74:5b:52:fb:cc:29:9b:54:58:03:6b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c148761b67005329aa89135d35ad235173bc48
Validity
Not Before: Jun 28 13:01:02 2025 GMT
Not After : Jun 29 13:01:02 2025 GMT
Subject: CN=f64b71ac805b993ae710b8e9766fe2c525ca0929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:4f:20:1e:a2:26:d8:fb:30:15:44:8c:05:6f:
3e:ad:98:bc:1b:54:f0:a3:fb:60:3c:a2:cd:11:f8:
2d:73:1e:36:04:ad:c3:82:f5:fd:8e:3b:ae:a3:48:
d6:97:82:8e:25:86:20:7c:35:73:50:52:c0:94:2e:
6d:66:c1:f4:73:90:b4:c8:4d:38:5a:30:b3:0b:2a:
33:cd:75:bb:ed:f4:31:e0:8c:d7:1b:9e:8c:27:85:
54:50:cc:9b:8f:a5:81:2e:9f:be:f9:3c:6b:19:f3:
1a:5e:4a:95:6e:5c:0f:15:a6:b1:1a:67:90:a0:e9:
bd:11:57:3f:ce:97:34:2e:52:b9:5f:cd:5b:7b:c3:
0e:0c:f8:1f:46:0f:96:64:25:86:1b:57:fb:d7:6f:
1f:f8:59:78:4b:1e:66:fa:03:5d:6b:62:5c:5e:49:
84:55:40:35:37:3b:41:c2:fe:16:c7:e9:92:0c:07:
ce:39:77:85:26:91:8f:67:96:8b:6d:6d:65:d4:5d:
fa:fc:98:46:4b:b8:42:23:46:a4:08:65:c4:89:1d:
72:06:22:0d:15:77:27:b2:03:0a:64:f1:23:a0:00:
85:54:d9:a7:cc:54:a6:62:87:3b:56:77:c1:f4:ab:
39:fd:e8:91:ca:df:b8:4a:01:a1:fc:e2:e8:ae:ca:
38:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:4B:71:AC:80:5B:99:3A:E7:10:B8:E9:76:6F:E2:C5:25:CA:09:29
X509v3 Authority Key Identifier:
keyid:D7:C1:48:76:1B:67:00:53:29:AA:89:13:5D:35:AD:23:51:73:BC:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18FIdhtnAFMpqokTXTWtI1FzvEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e8f69a-173a-4475-a6fb-011650fbd4c4/1/18FIdhtnAFMpqokTXTWtI1FzvEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:c3:58:a2:c6:e5:fb:82:a7:41:6e:52:41:15:e3:55:a6:f7:
b9:b6:a7:42:3a:ca:da:0c:18:40:cf:d7:23:7f:05:cc:44:62:
03:a0:c2:5e:88:8e:1a:f9:d4:36:5a:f5:6c:eb:47:82:03:37:
47:76:63:aa:2a:ac:ea:be:26:a4:c0:07:9c:3d:7a:f1:8a:34:
6f:f3:73:86:ec:aa:1d:ed:8a:87:13:63:6e:bb:b6:23:2b:e8:
ca:34:d4:31:c6:7e:16:c3:a7:64:e4:40:3c:ae:02:0d:b2:a3:
cf:22:d6:8d:c6:5b:b6:ab:cc:b5:9a:8f:01:7f:93:e5:43:12:
94:a4:a9:1d:d3:0c:ae:e1:ad:ae:58:f5:cc:34:90:fd:9d:c7:
dd:18:60:30:b7:9f:7b:a1:35:d2:e3:08:74:e8:b7:e0:4e:37:
47:69:aa:2a:52:af:7e:05:7e:01:35:44:f1:49:c8:58:15:1a:
ff:f2:55:e0:af:8f:12:ef:22:b1:34:e1:45:63:f0:67:0e:9a:
33:b8:ee:b1:b5:a7:08:8e:7e:aa:be:50:43:15:f8:27:8d:d0:
f4:06:3a:d1:8e:d3:0c:74:64:85:90:4b:a1:11:23:fb:c5:61:
d0:17:7c:08:87:54:07:2c:53:98:21:10:0e:c9:9d:bf:e5:d4:
68:ad:cf:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:29 2025 by rpki-client