Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
File: _s8oKCHaV19okXZHzz4YmPnQpio.mft (raw, json)
Hash identifier: rnL0tZ45KcjabylDCOgPzSWos2RnKsyXWHoaiJGuqQg=
Subject key identifier: 97:08:03:40:2D:B4:16:33:22:93:6B:9F:85:57:4D:93:23:33:DF:64
Authority key identifier: FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
Certificate issuer: /CN=fecf282821da575f68917647cf3e1898f9d0a62a
Certificate serial: 0197B6D7C3E82CFBE3A554A7B55D76214F79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:01:22 +0000
Manifest this update: Sat 28 Jun 2025 14:01:22 +0000
Manifest next update: Sun 29 Jun 2025 14:01:22 +0000
Files and hashes: 1: 2OXGBjO85npyAkFnRouh_UBk1Hs.roa (hash: HbPy+YRVvuPyiRQMlka5FfjRj4FCj/zQuaXQr9znzdU=)
2: _s8oKCHaV19okXZHzz4YmPnQpio.crl (hash: UC1KL6r9p1Vr/RCDGkchkJMLHts713Ow0D8cZe38ZlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:c3:e8:2c:fb:e3:a5:54:a7:b5:5d:76:21:4f:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fecf282821da575f68917647cf3e1898f9d0a62a
Validity
Not Before: Jun 28 14:01:22 2025 GMT
Not After : Jun 29 14:01:22 2025 GMT
Subject: CN=970803402db4163322936b9f85574d932333df64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:bd:09:63:e9:ac:e1:f2:34:02:78:35:0b:
c4:1e:72:3d:41:a1:dd:f3:b9:75:1a:e7:0d:14:d2:
f8:37:0f:c1:68:04:70:20:77:6f:c3:e6:93:13:92:
1e:fe:0d:8c:5d:be:64:7c:aa:31:5f:51:83:0d:9a:
7b:0c:ab:87:d8:04:c7:c2:f7:2d:66:e2:09:5b:a0:
89:de:eb:64:08:2c:2d:11:4b:d1:57:bf:5a:c0:58:
27:56:b7:f0:bc:b9:c2:a9:97:42:e1:a0:01:0e:1c:
af:5f:ee:8d:d5:72:f0:38:2b:8f:41:cc:2a:11:1d:
93:bb:2a:15:f2:2a:59:75:7d:c5:c1:dd:0e:98:f5:
94:47:d4:55:28:5d:78:cc:6c:4f:30:9c:d7:03:bc:
a6:05:5f:08:0c:47:c5:04:b4:74:15:c7:1b:82:22:
2e:cd:06:9b:d8:cf:0b:55:fe:16:5a:0c:6b:fc:36:
99:31:71:03:78:58:0e:8a:19:cd:18:f4:ca:37:1c:
9f:7d:92:6e:33:e3:a5:cb:a9:4d:26:1f:69:f6:81:
34:d9:d0:fe:1b:17:86:53:af:46:a7:61:ea:15:01:
91:d2:dc:9b:17:1b:09:9e:59:58:64:54:20:4b:08:
a9:50:56:25:4d:56:b0:ae:f3:3b:44:81:b5:b6:a9:
fb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:08:03:40:2D:B4:16:33:22:93:6B:9F:85:57:4D:93:23:33:DF:64
X509v3 Authority Key Identifier:
keyid:FE:CF:28:28:21:DA:57:5F:68:91:76:47:CF:3E:18:98:F9:D0:A6:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_s8oKCHaV19okXZHzz4YmPnQpio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/288628-2039-4085-a006-060cd9c92f26/1/_s8oKCHaV19okXZHzz4YmPnQpio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:bb:a6:bb:00:8d:fc:ae:ab:bb:69:cd:9b:ff:60:94:35:b7:
93:09:c1:bd:88:e3:2c:ce:d8:05:60:6d:b9:1b:3d:29:4b:22:
6d:35:db:92:ab:17:ed:cb:81:9f:d4:3f:8e:8f:60:0d:b3:a4:
d8:de:da:c6:da:b2:c5:d6:1e:76:35:f4:21:d3:10:7c:c9:8d:
2a:ab:52:b2:d4:18:a7:6c:c4:98:22:16:f8:78:4f:cb:6b:66:
ff:3a:41:f3:0b:97:40:7f:fb:5b:84:50:bb:a9:5c:ec:70:37:
3d:73:ee:81:db:5c:d8:5c:69:9d:42:91:76:f0:4d:8b:e7:15:
88:c9:dc:89:03:77:e8:31:66:c2:7e:e6:ed:e1:a5:64:0a:43:
07:e7:62:79:63:28:d5:06:dc:ad:6f:16:d4:4d:41:ed:00:95:
6b:eb:08:28:2a:b3:15:18:e7:5c:5f:95:7d:fe:ab:75:fb:6f:
78:a7:02:db:ef:30:4f:ca:57:09:5c:7c:bb:72:90:60:d2:f1:
94:fa:a8:56:c5:b4:d9:85:3c:8f:36:4b:57:a5:38:f0:94:dc:
29:a8:7c:7b:b6:87:1e:ee:73:f6:3a:89:de:7c:50:98:bb:b7:
1c:28:64:74:52:3a:0c:8e:8d:49:c8:df:b8:18:d3:3e:0f:17:
31:34:21:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:26 2025 by rpki-client