Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
File: fJEmcywvAZO8PeTo06vBX0uu1i0.mft (raw, json)
Hash identifier: HhH1LO7G/bdkCBjuXtP6+Zvkx6fCBXUQkFwbKbPvYV0=
Subject key identifier: C1:DF:FD:91:5A:35:C2:AE:85:E4:F3:98:96:B6:BF:94:41:9A:42:9D
Authority key identifier: 7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
Certificate issuer: /CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Certificate serial: 0197CC8376CA8033FE4A4D59A01E24A98000
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
Manifest number: 15C5
Signing time: Wed 02 Jul 2025 19:00:56 +0000
Manifest this update: Wed 02 Jul 2025 19:00:56 +0000
Manifest next update: Thu 03 Jul 2025 19:00:56 +0000
Files and hashes: 1: FhiaygjAF_1CRSj0CN-vLLhuasg.roa (hash: SeFF3k4+NSW9uVrbVWJXjtkwiHNZBfGKLzdPBZ23zYE=)
2: REJSEHBqBmUbahN6hVMSYy6LHI0.roa (hash: M3m09unuab4iohEbcy0njc+8m8Kysxgeqz3sy5tQvW4=)
3: fJEmcywvAZO8PeTo06vBX0uu1i0.crl (hash: lvVgQP4/lR3rutIxH+2+0RKZLvj3XNevDYB1gG8qzaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:76:ca:80:33:fe:4a:4d:59:a0:1e:24:a9:80:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c9126732c2f0193bc3de4e8d3abc15f4baed62d
Validity
Not Before: Jul 2 19:00:56 2025 GMT
Not After : Jul 3 19:00:56 2025 GMT
Subject: CN=c1dffd915a35c2ae85e4f39896b6bf94419a429d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:30:bc:d6:9e:c0:5d:72:8e:d5:ad:bc:39:8f:
e9:e6:5d:6d:9f:68:71:34:d3:9d:8f:ad:8f:b6:18:
fa:bf:f2:dc:ff:b4:b3:f0:79:0a:d8:f9:05:7c:81:
60:fa:fe:d9:df:e1:aa:1d:55:07:6b:2b:b5:df:3a:
3e:4c:ce:96:74:eb:26:33:ba:86:30:d8:d4:4c:0f:
b4:e5:e2:e7:2c:e6:b1:3f:df:a2:64:1a:2d:8a:b7:
00:f6:3e:c7:d4:a5:c7:e1:14:06:b4:12:6f:da:b2:
7e:d3:b5:c8:6c:61:de:fa:95:0b:2d:df:d2:37:78:
a1:85:3f:f4:4a:22:5a:7f:5d:f5:d9:45:87:6f:70:
6f:a0:2d:f2:41:1d:b1:a7:fb:bb:b1:50:24:3b:14:
c3:6c:6e:95:11:fd:6c:c6:bf:4d:26:a3:8b:29:91:
b0:77:de:2a:34:7d:97:53:46:c2:5a:95:a5:9d:f4:
22:82:05:f2:78:90:fd:d2:30:38:a1:a5:7e:ae:3e:
71:4e:29:d2:b1:a6:07:22:9c:a8:5a:8e:cc:b7:39:
a9:46:10:4c:7e:25:0c:26:fc:12:e5:8a:da:0f:2f:
75:b8:33:f8:54:b6:b8:8c:3c:14:1f:26:47:d6:d3:
93:7e:06:fd:d2:2a:7d:df:e6:d9:4e:06:7f:a4:19:
7c:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:DF:FD:91:5A:35:C2:AE:85:E4:F3:98:96:B6:BF:94:41:9A:42:9D
X509v3 Authority Key Identifier:
keyid:7C:91:26:73:2C:2F:01:93:BC:3D:E4:E8:D3:AB:C1:5F:4B:AE:D6:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fJEmcywvAZO8PeTo06vBX0uu1i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/94632e-99d3-4c21-b67d-d6b730266e76/1/fJEmcywvAZO8PeTo06vBX0uu1i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:b2:95:60:7c:9f:1f:f8:b9:d8:f6:d0:87:ec:d6:a4:f0:32:
21:bd:d9:dc:95:c9:59:e9:84:98:a3:15:88:08:b1:06:a3:ea:
fe:da:2f:57:45:e5:2e:95:9e:4b:41:dc:4c:c9:03:70:43:cd:
97:5e:af:19:e7:50:bd:ac:22:e7:56:d0:82:80:99:27:2c:16:
05:18:8e:f8:e1:5c:d8:8a:9b:65:47:a0:3b:40:bc:2a:55:e1:
9a:25:f7:92:c4:f8:36:12:7f:1b:a8:50:61:5c:23:1d:5d:e8:
c6:ea:2c:d3:eb:f9:7f:0a:0b:88:6d:5f:40:ce:c8:59:27:60:
82:cd:a9:ee:5c:ca:63:9c:0f:78:69:78:67:a0:18:86:97:cd:
2b:0a:b6:78:61:4f:a7:7e:e1:0b:d6:60:9b:92:93:32:8e:21:
4f:9f:7e:f3:cf:a9:5f:8e:0c:e1:bf:a2:1b:b3:e1:f9:29:db:
1e:6a:80:de:a7:16:01:67:3b:8b:f3:4c:8b:ae:85:77:6d:3b:
4c:f3:a4:b5:ce:0f:9e:a1:2f:13:f5:54:c8:8a:39:2d:b3:22:
43:4f:42:14:e7:f2:fc:36:8c:5e:27:9a:45:2f:a6:d9:2c:36:
fe:6c:2d:38:4c:30:80:84:3c:6e:64:b4:f3:a8:70:b8:9c:aa:
bc:5f:6f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 20:48:41 2025 by rpki-client