Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
File: Fc09GKyTtW_SsxgAAWXc1swwE4I.mft (raw, json)
Hash identifier: fZipmNDMbjBEcUpzVTLyWhi3QjvQnefwQWOkOCm/jYM=
Subject key identifier: EF:6C:6D:A9:E7:07:FC:C0:A1:11:6D:F6:96:C9:F3:9C:1A:8F:86:19
Authority key identifier: 15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
Certificate issuer: /CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Certificate serial: 0197B88F88A40C224E430AD7DDAFE70626F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 22:01:43 +0000
Manifest this update: Sat 28 Jun 2025 22:01:43 +0000
Manifest next update: Sun 29 Jun 2025 22:01:43 +0000
Files and hashes: 1: Fc09GKyTtW_SsxgAAWXc1swwE4I.crl (hash: 0DHLOrNS0zIICFA0wI+ii2qWqODEpqPc7PVetBIo6AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:88:a4:0c:22:4e:43:0a:d7:dd:af:e7:06:26:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Validity
Not Before: Jun 28 22:01:43 2025 GMT
Not After : Jun 29 22:01:43 2025 GMT
Subject: CN=ef6c6da9e707fcc0a1116df696c9f39c1a8f8619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:7a:34:bd:43:d6:96:a3:89:c7:fb:69:dc:
1f:c1:9b:09:1b:27:b4:89:27:bc:89:bd:8a:d0:4a:
e7:d0:32:d0:ba:0a:d5:28:0f:fa:41:d7:8d:95:24:
2a:19:74:5a:ca:14:4b:c5:67:f0:d2:c1:4c:fc:03:
18:13:7e:8c:86:93:99:f5:2c:3a:99:ec:ab:d0:9e:
8e:76:25:15:7f:fc:3a:40:71:f9:a3:d8:5f:c1:74:
db:b3:e6:83:aa:45:99:c3:a7:5a:c9:12:04:9b:76:
bb:52:c5:e1:81:b1:bd:3e:1d:3c:5b:15:44:54:8f:
ad:39:c8:42:b0:70:b5:79:fe:69:e6:4a:70:86:2c:
7d:76:f9:3e:6a:f0:d4:a7:6b:a0:2b:81:4c:18:da:
d4:e1:13:3e:bd:0e:b5:f9:5d:66:5b:71:bc:ba:fa:
31:3c:0c:95:9e:02:f2:26:de:62:73:7e:4d:b5:8a:
10:08:de:53:85:8a:96:9c:13:e8:98:f6:69:82:4a:
be:ff:2e:76:d2:b1:68:e0:9d:58:54:6f:7d:01:d2:
50:08:1b:9b:6b:cf:ca:74:dd:4f:d9:4a:c2:f6:de:
ec:fd:13:e2:27:60:23:84:e0:f0:38:58:07:59:7e:
61:69:a9:85:3f:e8:fc:9c:20:ac:b6:da:cd:de:80:
99:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:6C:6D:A9:E7:07:FC:C0:A1:11:6D:F6:96:C9:F3:9C:1A:8F:86:19
X509v3 Authority Key Identifier:
keyid:15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d8:42:b3:a0:87:88:dc:04:5a:a9:ff:44:70:a0:e0:1b:80:
ee:bf:a3:e5:f9:07:65:bd:53:5a:7e:f1:50:6d:c4:a2:80:3e:
06:a5:91:10:3e:dc:ae:0e:bf:a2:b6:c1:b2:2a:59:2f:ed:a4:
a1:26:b7:c6:06:b8:9d:d7:d8:7a:2f:dc:ce:d3:ed:66:20:3d:
c2:68:da:f3:c8:ca:cb:c4:be:64:b6:99:29:3e:da:43:c5:7d:
44:95:bb:76:1a:85:b3:e6:99:a7:b0:87:08:6a:c2:cd:2d:ef:
9a:dc:19:ef:91:f6:03:48:62:d7:ad:f4:e0:e4:68:3e:a0:08:
b8:42:19:1d:68:3b:f4:72:0e:4a:27:70:64:ee:ed:55:82:af:
d0:a5:9b:1f:85:fd:45:7b:ec:81:b9:45:a1:8a:ab:e9:89:95:
fa:35:e3:43:c3:48:54:7e:c2:36:8c:06:9e:48:a6:ed:7a:d7:
50:a8:17:2c:ad:59:ec:1a:96:5a:44:9e:5c:e1:f1:bc:34:71:
92:fe:dd:26:30:05:10:8a:b7:f9:53:6b:4d:92:25:0f:8b:69:
24:17:c5:e1:fd:45:16:88:3b:62:e8:22:f9:2b:42:32:d4:bb:
5e:29:83:b7:ca:97:e5:d5:cf:bb:7f:13:62:45:7d:de:59:e5:
a0:a8:3c:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:31 2025 by rpki-client