Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
File: FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft (raw, json)
Hash identifier: 9ulwXSgdGshOpdHeOKTE9F+BRJtsQb4sudCtnyNCiaw=
Subject key identifier: 0D:A6:FE:EF:13:57:69:2D:31:3E:B7:65:B5:22:88:75:8B:04:73:8A
Authority key identifier: 16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
Certificate issuer: /CN=167782bea46fd271768ff46d9b45c057a9df5481
Certificate serial: 0197B74529CBE2746220D9377D905C27A274
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 16:00:52 +0000
Manifest this update: Sat 28 Jun 2025 16:00:52 +0000
Manifest next update: Sun 29 Jun 2025 16:00:52 +0000
Files and hashes: 1: 86pmQhR3tumm6aKpKa5tR6sKn2Y.roa (hash: y1UamkXET5HMaJBK7pe7q3lox6X+V75MRSuUUTK6f04=)
2: FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl (hash: t+S/r4eXf5H2ndxQz3PYxRPRs9MJdpvO1BDVfaMsiyM=)
3: Zg3SfPJqyJJ2sN5UVgE8M6UTOjo.roa (hash: vyUE4iE6P3VunHQn7CBSp04IcceuNcHP3wF8npQ/Nvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:29:cb:e2:74:62:20:d9:37:7d:90:5c:27:a2:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=167782bea46fd271768ff46d9b45c057a9df5481
Validity
Not Before: Jun 28 16:00:52 2025 GMT
Not After : Jun 29 16:00:52 2025 GMT
Subject: CN=0da6feef1357692d313eb765b52288758b04738a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:50:5d:45:bc:69:ee:99:cf:ec:7f:7c:62:b8:
53:1b:c6:84:ae:b4:94:99:07:88:2c:4b:56:7a:ce:
ea:3a:de:a3:24:8b:14:ff:79:e3:4a:0e:6e:7f:a2:
db:34:21:00:0c:d1:c2:b5:69:a3:be:35:3f:77:1a:
54:3b:f2:66:04:1d:4d:11:54:64:f4:64:d2:f6:38:
3d:8a:61:86:5f:4e:7b:03:1c:7b:f8:56:b9:f3:6c:
c2:13:b9:79:f8:08:f3:80:88:11:78:d5:ca:4c:e7:
1b:68:a1:37:23:15:c5:b5:2e:4a:98:bc:be:a1:84:
c4:69:a5:3b:07:94:77:65:da:fe:29:eb:75:66:e9:
a1:93:0c:0b:3c:7d:79:f3:8a:3a:12:6a:bb:6b:f5:
1f:f0:16:86:96:69:0f:63:ee:10:db:88:1e:3e:11:
55:87:dd:17:cf:a0:de:ca:71:db:24:0f:c8:95:d7:
30:aa:f4:88:3c:c0:93:af:55:87:72:d3:40:77:a3:
76:ff:95:68:93:da:c6:67:32:88:be:18:ea:cf:a9:
59:3e:5e:9b:65:11:d4:0e:99:31:d5:28:80:ed:56:
b9:e4:f2:87:00:ba:81:eb:4f:8d:3a:b2:12:66:a3:
b0:78:dc:96:ae:4b:22:b9:94:58:0e:5e:70:8b:c9:
07:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:A6:FE:EF:13:57:69:2D:31:3E:B7:65:B5:22:88:75:8B:04:73:8A
X509v3 Authority Key Identifier:
keyid:16:77:82:BE:A4:6F:D2:71:76:8F:F4:6D:9B:45:C0:57:A9:DF:54:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FneCvqRv0nF2j_Rtm0XAV6nfVIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ef0b92-5d85-4792-b551-9a358362829c/1/FneCvqRv0nF2j_Rtm0XAV6nfVIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ee:59:ff:45:a5:69:88:5b:63:97:76:ce:05:1d:1e:b6:7c:
fe:6c:af:7b:22:c3:4b:11:8e:05:6b:5b:d9:52:cd:ed:e7:e6:
a4:16:cd:5d:05:12:72:ce:52:f2:78:18:8a:8b:76:6e:4b:2b:
0d:d3:0a:fd:fb:2f:06:a7:96:40:e7:19:47:6d:8b:e1:c3:a8:
b1:19:e3:21:c0:e8:0d:80:b5:1a:69:da:aa:e5:a7:0d:6d:37:
5d:fa:3a:71:96:c5:29:f6:52:f0:85:37:84:7d:98:02:74:d0:
44:8c:5a:ee:61:0b:90:08:52:3e:17:c8:69:cd:fb:39:e2:b6:
1f:83:1f:90:d2:bb:06:7c:76:ab:19:33:cb:92:97:c0:fe:b7:
90:3b:8b:d2:2f:69:65:7c:6c:b8:e0:24:8e:70:bf:67:3e:47:
5d:47:61:55:02:f2:28:f3:51:92:3a:ff:60:de:2d:40:73:51:
c8:2f:f2:b0:d8:0a:9d:06:f9:f7:d5:f6:a1:70:fc:10:65:b1:
1a:e8:7d:f8:b0:85:01:bb:21:35:e0:70:ea:ca:3e:8a:48:da:
dc:57:04:96:db:71:46:8b:18:ba:49:29:6f:82:db:b8:e0:d2:
0e:c2:d5:8d:c1:36:2f:2e:83:18:64:57:87:9d:7c:20:61:9c:
87:fd:a5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:46 2025 by rpki-client