Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
File: IS6vWaK_88qxGHEYlEeLue_5O4U.mft (raw, json)
Hash identifier: fbsMFFdii/48ksWerix1fWzSQU2QTPlomAQZg2C3N0w=
Subject key identifier: 09:69:DD:2E:EC:F3:F3:C9:B5:76:0B:B7:C2:69:CB:63:88:F7:65:25
Authority key identifier: 21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
Certificate issuer: /CN=212eaf59a2bff3cab118711894478bb9eff93b85
Certificate serial: 0197B77C90BEF2FD52FCCE2771D7FD90F849
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 17:01:23 +0000
Manifest this update: Sat 28 Jun 2025 17:01:23 +0000
Manifest next update: Sun 29 Jun 2025 17:01:23 +0000
Files and hashes: 1: 9ACkzxrIX1FcdAcP7vGEcSMswwg.roa (hash: 5NgCoOKEw6pjVDqABbTS2aQr1tInYVR2kf/DOaxnI6o=)
2: IS6vWaK_88qxGHEYlEeLue_5O4U.crl (hash: 6IzGJxxO+JqDIMuRQuyvqxpZ/ApYX3yMfJBNc5VCySA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:90:be:f2:fd:52:fc:ce:27:71:d7:fd:90:f8:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=212eaf59a2bff3cab118711894478bb9eff93b85
Validity
Not Before: Jun 28 17:01:23 2025 GMT
Not After : Jun 29 17:01:23 2025 GMT
Subject: CN=0969dd2eecf3f3c9b5760bb7c269cb6388f76525
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:84:c5:22:61:9e:43:35:c3:36:78:82:60:2d:
e3:56:18:06:32:1d:32:a6:c7:78:a7:54:63:b6:bc:
e0:4e:87:12:b0:22:c9:cd:b7:81:7a:80:c0:15:da:
73:33:0b:14:a2:65:10:86:1c:e9:eb:14:0b:f6:b5:
2c:ec:e1:d3:e5:b2:cc:bf:c1:d8:54:b0:35:f6:01:
e0:bd:ca:93:74:85:21:0c:8f:72:18:20:47:d6:f2:
a8:ea:bb:cb:43:7c:0a:60:5d:51:9e:f5:4d:15:f8:
34:2f:db:a7:2f:52:19:4f:08:64:bf:67:fd:b3:c8:
b5:a8:11:0e:5e:db:de:ef:80:01:ef:1d:b2:75:a7:
18:78:d5:d0:bd:a0:08:8d:93:1a:23:a7:de:66:2e:
a9:8c:3a:5d:0f:53:41:89:25:3d:68:f6:63:f0:23:
6f:54:4b:71:8b:96:56:6f:60:1b:af:5f:96:98:a7:
ba:7f:01:80:6f:5f:09:fc:69:5e:20:7d:80:9d:24:
fe:5c:e0:44:de:84:4d:d6:ec:da:d4:89:05:27:15:
b8:d5:60:c8:a0:85:0a:ac:e8:5c:38:ac:1c:3c:3c:
52:f5:f8:b5:82:98:81:43:a8:8d:0d:0c:c1:43:bc:
b6:3c:c2:69:aa:84:55:f7:0d:8b:ca:7d:4a:51:e5:
3f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:69:DD:2E:EC:F3:F3:C9:B5:76:0B:B7:C2:69:CB:63:88:F7:65:25
X509v3 Authority Key Identifier:
keyid:21:2E:AF:59:A2:BF:F3:CA:B1:18:71:18:94:47:8B:B9:EF:F9:3B:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IS6vWaK_88qxGHEYlEeLue_5O4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/28f6ac-f805-4c91-b4ea-194887bda423/1/IS6vWaK_88qxGHEYlEeLue_5O4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:86:5b:cd:7d:28:51:73:3d:89:34:b5:1f:58:a1:7c:ce:fb:
46:a0:99:2a:05:1f:11:ca:73:d8:38:7f:ce:72:a5:b0:c8:3e:
05:88:b4:57:99:3e:02:4a:e0:af:28:0d:56:03:e8:dd:b3:b1:
ed:d7:32:78:e4:6d:5b:c5:54:54:8a:56:cb:5d:66:6b:35:2e:
84:f1:25:26:99:3a:ac:e0:fc:c0:71:05:e7:10:04:f4:07:c7:
df:f5:99:5c:f9:1c:77:47:f0:37:24:a8:d0:dc:69:5b:c1:e7:
6f:54:35:8c:3e:87:ff:95:86:12:e6:38:24:87:1e:a0:02:d6:
10:ed:5e:dd:bb:91:45:b1:eb:f8:5b:95:e4:07:16:4c:ad:1f:
63:5f:64:19:d4:b3:09:9e:02:96:94:6f:2b:1b:25:91:12:85:
50:75:e6:14:9c:31:a8:ad:97:12:95:eb:4e:bb:09:10:35:71:
4d:36:0c:5f:4e:db:d7:01:71:1c:af:87:5b:4b:93:7e:56:e7:
0f:d6:f2:0e:e4:d8:5e:e9:7d:23:1e:db:66:6b:59:b0:d9:5e:
da:15:76:7f:fd:c8:bb:f5:80:33:36:1e:20:97:49:32:d1:49:
95:f4:cd:8c:41:3c:c9:37:2c:e5:70:31:16:4a:cf:3b:76:f2:
f1:df:c5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:26 2025 by rpki-client