Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
File: debiEsY3QbhblXx8l_fFj1teEzU.mft (raw, json)
Hash identifier: pcyiGn9vogNDrj/2SouEWZ14J+spvC3VNqCXpYrCLnI=
Subject key identifier: CA:C5:FE:11:3C:A7:C8:52:33:74:4E:4C:C3:CF:70:20:E3:32:CE:5E
Authority key identifier: 75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
Certificate issuer: /CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Certificate serial: 0197B70ECC0C00D5E585902226252B0A8ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:29 +0000
Manifest this update: Sat 28 Jun 2025 15:01:29 +0000
Manifest next update: Sun 29 Jun 2025 15:01:29 +0000
Files and hashes: 1: bhZ8f0F77iFP_2rwZL2z4iLQgpA.roa (hash: TT4ui96hPVB8JuhJPLD2IoWX5TtqeZQlOzkrZUeBR/0=)
2: debiEsY3QbhblXx8l_fFj1teEzU.crl (hash: DxX3c+0QJlgjTDKw6j3FBmDeXKuzqZ+7laSGEp4yN/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:cc:0c:00:d5:e5:85:90:22:26:25:2b:0a:8e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e6e212c63741b85b957c7c97f7c58f5b5e1335
Validity
Not Before: Jun 28 15:01:29 2025 GMT
Not After : Jun 29 15:01:29 2025 GMT
Subject: CN=cac5fe113ca7c85233744e4cc3cf7020e332ce5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c6:92:f9:a0:e8:e5:10:d7:1f:07:0c:78:ff:
63:ce:9b:6e:52:34:0a:84:eb:60:30:de:d6:1f:6d:
18:86:0b:e1:b3:5c:03:f4:5a:bc:53:18:55:6b:01:
31:13:de:76:8d:08:c1:a9:16:2b:7e:47:b4:77:fe:
4a:2c:21:67:66:13:fb:69:6b:d4:5e:08:7d:1c:96:
2a:db:3e:1d:06:c5:8b:66:49:d9:74:f6:97:2c:ba:
d7:3f:7b:c6:a2:9d:e6:94:98:22:0d:50:71:4a:2f:
f1:ed:21:5a:1a:91:6a:d8:04:14:49:35:0a:df:5c:
b0:1b:e4:23:67:8d:74:f7:57:a3:dc:98:e0:74:8e:
0f:aa:c7:88:9f:46:16:c5:05:2f:95:81:0f:b8:bd:
9e:10:46:b6:92:52:01:3f:b5:5a:d1:d8:26:c3:b6:
3c:d0:0c:8b:21:f0:be:aa:d4:3f:22:aa:75:46:b8:
1e:40:e2:a8:b7:d5:f6:49:63:dd:cf:03:30:60:ae:
aa:18:ff:ea:dc:d1:ce:4e:1a:c3:c9:fb:1b:a1:95:
aa:03:95:4e:81:e0:13:56:e8:21:7f:56:16:9c:9c:
08:98:96:75:bf:38:e6:56:85:01:89:52:47:46:a3:
9e:b4:7e:3f:d2:d5:c7:c5:5a:6e:7a:ae:6b:4b:97:
01:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:C5:FE:11:3C:A7:C8:52:33:74:4E:4C:C3:CF:70:20:E3:32:CE:5E
X509v3 Authority Key Identifier:
keyid:75:E6:E2:12:C6:37:41:B8:5B:95:7C:7C:97:F7:C5:8F:5B:5E:13:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/debiEsY3QbhblXx8l_fFj1teEzU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/333ea6-584a-4749-83c7-03d7461eb58a/1/debiEsY3QbhblXx8l_fFj1teEzU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
dc:b0:d2:86:0b:ca:b5:9c:9a:c9:d0:4b:6e:f4:0e:06:d2:14:
1e:e6:48:bc:a0:64:54:7f:8a:d2:be:2d:be:af:69:1d:3b:9b:
e0:d7:20:df:50:01:95:d1:70:89:47:09:9a:6c:8f:64:f4:5c:
92:f8:d7:0d:cf:09:6f:48:9c:55:1c:04:dd:f1:85:0f:1e:62:
79:d6:59:30:a8:e7:30:06:d7:07:7b:50:95:f3:78:e2:41:d5:
23:b1:a0:c6:b4:15:b5:3f:2a:7b:5b:a8:eb:36:5e:c8:37:e9:
d3:95:80:dc:8b:87:08:db:aa:6b:46:6c:33:da:35:96:d2:07:
28:e3:70:25:54:45:bc:18:36:f3:a1:ae:60:ee:73:5b:c4:60:
4d:5e:c3:18:83:32:c1:a6:a1:d1:96:41:5f:e3:7e:c0:7d:86:
a6:54:78:b3:e6:f4:39:80:0d:f1:c4:e5:ba:3c:dd:c4:62:dd:
73:d0:2b:2c:ee:98:2c:ef:e4:b7:76:e1:22:d5:86:f5:2a:60:
12:2d:9c:a9:46:81:9f:2d:b8:19:08:9a:2c:21:ad:32:67:9f:
5e:87:ef:bd:b8:43:07:20:b1:fa:a3:eb:6f:df:3f:42:ae:ba:
cf:2e:f2:27:be:ec:3a:a8:f7:cd:ba:c4:01:f6:41:a0:a6:5b:
66:42:aa:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:57:44 2025 by rpki-client