Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
File: IsFSYGEl62bVIiY_oDEJu_C7o9o.mft (raw, json)
Hash identifier: TnfumvAecXxWdXiv45Htva/MbrF91bC8pK8sVcot6Qg=
Subject key identifier: 2F:93:AA:1D:28:84:3A:58:FC:AA:3B:24:85:FA:06:29:FF:AE:C7:A6
Authority key identifier: 22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
Certificate issuer: /CN=22c152606125eb66d522263fa03109bbf0bba3da
Certificate serial: 0197B6A05E3A9DC04D0817E45D4181D9A2AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:00:52 +0000
Manifest this update: Sat 28 Jun 2025 13:00:52 +0000
Manifest next update: Sun 29 Jun 2025 13:00:52 +0000
Files and hashes: 1: IsFSYGEl62bVIiY_oDEJu_C7o9o.crl (hash: pqKoAu+LsxTGUTNMVq/M9f8qsb+sz+xUPEEAmdbr7zQ=)
2: sY4zDGKaTiswT3v9bquB0z3xZ38.roa (hash: UFeTme0jN/PK2GkSjMta2wryPzRGN56pgsmPYrOPfD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5e:3a:9d:c0:4d:08:17:e4:5d:41:81:d9:a2:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c152606125eb66d522263fa03109bbf0bba3da
Validity
Not Before: Jun 28 13:00:52 2025 GMT
Not After : Jun 29 13:00:52 2025 GMT
Subject: CN=2f93aa1d28843a58fcaa3b2485fa0629ffaec7a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:38:54:15:7a:83:ac:fd:e5:66:ed:5b:e3:ed:
68:4b:20:e4:21:3f:2a:ae:00:03:03:dc:37:b2:b0:
7f:77:40:64:09:69:c7:38:57:14:b0:d6:a4:d5:7f:
0c:d0:41:92:1d:c1:39:df:ec:52:b0:99:90:42:15:
85:ff:39:e1:a7:71:c8:6f:2c:57:d3:37:56:48:80:
63:78:a9:5f:0a:1f:bc:8d:82:2e:43:9e:de:2c:dd:
b7:93:89:cc:22:50:36:c3:1d:f9:d9:84:82:b3:f6:
50:8c:d7:b7:d9:7f:51:61:f8:7e:00:e1:55:8a:e7:
74:77:70:10:03:5f:8d:a7:e4:3a:14:4d:44:a6:7b:
8c:5f:a8:24:e0:f6:3b:76:21:e0:33:c3:06:cf:e5:
de:28:b5:c6:87:88:62:00:85:0b:48:df:06:d2:a8:
c3:1c:49:2a:c8:97:7a:ce:f9:39:da:44:ef:e1:61:
db:97:d5:f8:9e:70:cc:66:00:a2:16:9f:85:cb:53:
4b:5c:88:8a:ac:eb:26:a1:d7:26:7f:01:f1:34:7f:
2e:d6:38:18:91:e0:23:26:de:2d:52:35:46:19:45:
52:cb:44:5d:ea:3c:a7:9f:fd:f4:f5:22:4a:de:7f:
be:1d:a4:8e:f2:58:7d:1a:d6:88:df:65:bc:b3:44:
84:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:93:AA:1D:28:84:3A:58:FC:AA:3B:24:85:FA:06:29:FF:AE:C7:A6
X509v3 Authority Key Identifier:
keyid:22:C1:52:60:61:25:EB:66:D5:22:26:3F:A0:31:09:BB:F0:BB:A3:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsFSYGEl62bVIiY_oDEJu_C7o9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/ac25b4-194e-49c4-aab1-0fe4d7f7db3d/1/IsFSYGEl62bVIiY_oDEJu_C7o9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:d6:7c:fd:36:59:33:6e:5d:8c:e4:d9:4d:14:cb:f8:21:94:
55:73:a7:d8:e9:70:ca:24:c1:95:97:90:8d:05:a4:eb:7e:fc:
56:fb:46:b5:43:11:6c:60:b4:4c:27:cd:7e:1f:88:e1:46:48:
e6:c1:99:b9:a1:1e:5a:2b:10:05:76:7d:6f:1a:0d:77:20:33:
64:11:a9:b0:0a:97:12:01:65:13:8b:16:a5:74:14:c2:06:52:
de:68:39:59:40:25:bb:5f:01:21:92:af:44:a7:cc:4a:88:51:
56:ab:46:e1:58:47:1a:42:38:3f:87:3e:48:e0:72:4b:72:d4:
68:d5:eb:70:40:8a:ee:b7:00:ab:db:83:31:7c:09:bf:37:bf:
48:77:6a:79:47:4f:24:eb:ea:1e:0f:39:a1:38:c5:a0:eb:df:
12:f5:0a:82:bf:2c:20:52:26:39:1a:db:37:3b:f9:2d:f9:7d:
7f:10:84:7b:77:15:cb:12:86:16:f1:d3:06:ab:17:a5:d0:52:
66:be:ea:c8:35:ce:25:91:78:67:29:58:38:f9:66:11:60:67:
52:5c:20:8e:b3:0f:ff:54:74:d7:ff:52:35:b3:32:66:57:ae:
75:f3:c6:f0:71:89:1d:09:85:19:15:4b:ec:29:84:6c:c8:7b:
dc:62:9c:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:53 2025 by rpki-client