Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
File: f_sBFcSs3dG0rcQHN4Byas_AGvk.mft (raw, json)
Hash identifier: eOipTwUA4qQ9WbURMfHD41zu/W+WGC0K4Jnzt5Y+v0c=
Subject key identifier: E1:A7:92:44:2B:F9:EF:4F:95:9B:DE:4F:6A:10:53:86:79:D1:88:9D
Authority key identifier: 7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
Certificate issuer: /CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Certificate serial: 0197B70EE0AE92D81DAC57D6473025746315
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
Manifest number: 0ABE
Signing time: Sat 28 Jun 2025 15:01:34 +0000
Manifest this update: Sat 28 Jun 2025 15:01:34 +0000
Manifest next update: Sun 29 Jun 2025 15:01:34 +0000
Files and hashes: 1: PYkAjVi-cL8YN88rzZYetquYlEI.roa (hash: Bkzz/gNbGNuCgszV6UDZARXya+u9kc2E711f4IbffiA=)
2: f_sBFcSs3dG0rcQHN4Byas_AGvk.crl (hash: yM6WsYbHabgrXucKPJlhATcwqe2+l+JqO4KfrRggd5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:e0:ae:92:d8:1d:ac:57:d6:47:30:25:74:63:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ffb0115c4acddd1b4adc4073780726acfc01af9
Validity
Not Before: Jun 28 15:01:34 2025 GMT
Not After : Jun 29 15:01:34 2025 GMT
Subject: CN=e1a792442bf9ef4f959bde4f6a10538679d1889d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a0:6c:29:3d:6f:50:9b:98:13:cd:b4:be:f4:
4a:79:1e:93:7a:1c:3a:1e:2d:ab:49:ae:a5:ab:8f:
8d:46:7d:6d:93:dc:af:6f:b5:72:2b:44:f9:0c:7f:
ab:9e:ac:ce:d1:dd:fa:45:92:1e:20:69:9e:96:64:
ec:40:1d:91:99:45:bf:b4:cc:6e:5c:ef:4e:34:9b:
c7:b6:5b:21:28:35:40:d8:a3:f1:81:19:20:60:59:
0f:b9:a0:84:60:7f:5a:fd:10:77:35:75:0d:e1:3d:
40:82:6c:70:0f:40:5d:32:d0:94:e4:a4:5d:0f:ac:
99:fd:34:39:6b:e7:90:35:a5:0f:b3:60:f3:63:d3:
33:df:3c:ac:df:a1:4c:d6:35:ff:bf:35:d4:97:15:
32:94:83:0a:fb:22:2a:45:ba:6d:23:c6:07:06:7e:
8f:c2:ab:76:6d:25:de:c0:52:e1:f4:69:32:f3:d4:
5c:02:4d:8f:0c:b0:b0:3e:a7:4e:c8:3b:56:38:5e:
a8:b5:ac:d4:05:3a:fb:da:71:01:b8:f1:6e:a9:2b:
dd:b0:b0:a9:54:fc:d2:8a:70:6a:35:3d:44:f8:3f:
23:5c:21:4e:32:84:96:88:73:2b:e4:ce:18:db:6d:
b5:f3:ed:06:4d:39:1b:ad:8e:7a:51:37:68:08:7c:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:A7:92:44:2B:F9:EF:4F:95:9B:DE:4F:6A:10:53:86:79:D1:88:9D
X509v3 Authority Key Identifier:
keyid:7F:FB:01:15:C4:AC:DD:D1:B4:AD:C4:07:37:80:72:6A:CF:C0:1A:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f_sBFcSs3dG0rcQHN4Byas_AGvk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5268fc-cfee-4aa8-97bf-cbe020665efe/1/f_sBFcSs3dG0rcQHN4Byas_AGvk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:68:bb:45:5d:93:1b:b8:9d:ac:76:21:fa:43:23:53:c4:78:
40:eb:2f:7b:b1:4c:de:f4:5c:33:9d:43:f6:89:4b:b9:18:e9:
02:ed:10:26:99:19:94:fb:1c:e9:ba:1b:c4:54:ee:2b:eb:15:
f5:03:f2:87:e4:2a:d8:66:85:c1:6c:9b:d0:c2:ea:b2:f7:f7:
f5:70:ac:c9:10:4e:83:94:0e:76:25:d4:69:ef:4a:4f:2d:dd:
c8:d0:e1:56:ea:e3:1f:0a:37:aa:dc:e0:4d:71:20:b4:6f:f3:
d6:e6:b2:a1:7d:88:94:8e:d8:d8:72:cd:6f:1f:9d:3a:ab:75:
7c:84:08:c6:05:54:31:56:92:9c:46:f2:66:92:af:61:5b:86:
45:1d:84:09:16:61:ee:37:97:42:bb:f7:91:79:8b:06:6b:3d:
45:b1:d9:96:c4:37:86:4e:27:ac:48:5e:79:94:e9:7f:9a:41:
d0:a4:9b:a7:ad:d8:97:c5:e6:dc:ee:5c:4f:89:ec:c8:56:49:
2c:0f:97:07:73:68:d0:7c:01:da:10:0f:48:51:3f:11:45:eb:
04:e7:f8:70:1d:80:19:c8:c3:c4:a7:3f:a3:f4:90:9a:3d:ee:
52:4c:30:73:7b:fe:88:8b:77:31:ce:92:5f:06:b1:f3:0e:12:
6d:58:83:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:52 2025 by rpki-client