Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
File: fIwTcd1q_V_XnqmE2j-9oblK_iM.mft (raw, json)
Hash identifier: ZuNMeSEjBhj387zrEeFfgX1IMst16iBY8syPD/v0jro=
Subject key identifier: 95:F6:CA:9E:18:B7:30:83:60:09:E9:88:18:0E:3C:CB:A8:56:76:EA
Authority key identifier: 7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
Certificate issuer: /CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Certificate serial: 0197B6D74852CAE8BA5E77D8C05A2B9C6AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 14:00:51 +0000
Manifest this update: Sat 28 Jun 2025 14:00:51 +0000
Manifest next update: Sun 29 Jun 2025 14:00:51 +0000
Files and hashes: 1: 4Ze6fHS1CDDIrfDprEE1yu2W5uY.roa (hash: To0AiaOH9TsCon/TYTwvzw2Mel3lXf3uulB0tRaKWIc=)
2: fIwTcd1q_V_XnqmE2j-9oblK_iM.crl (hash: PTlq/o0ao+QHiX8vkQ0+fBM/1S8VEXF36KC+Z6ThgDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:48:52:ca:e8:ba:5e:77:d8:c0:5a:2b:9c:6a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8c1371dd6afd5fd79ea984da3fbda1b94afe23
Validity
Not Before: Jun 28 14:00:51 2025 GMT
Not After : Jun 29 14:00:51 2025 GMT
Subject: CN=95f6ca9e18b730836009e988180e3ccba85676ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ec:41:cf:52:13:e3:98:9b:ac:c8:91:4b:3d:
04:dd:a4:f6:f6:3e:6b:92:8f:f7:c5:28:c2:03:46:
a7:5d:d9:ab:45:eb:71:63:6e:21:92:14:7f:ef:e7:
7b:c0:26:8e:28:84:cd:69:e2:a7:93:f5:7b:0f:6e:
a4:27:d2:48:15:a0:e0:33:04:91:bc:55:5e:1f:fa:
01:60:d2:4a:b3:84:48:a8:d1:c3:5f:b1:eb:3b:3d:
0f:b3:94:cd:ce:fc:37:d4:8e:a7:11:43:e5:ee:bf:
97:b6:4e:a5:00:50:76:d9:ab:c8:d8:b1:15:dc:bf:
ae:8d:8a:27:4a:14:ed:35:40:fc:ab:e2:c3:26:2e:
ec:75:88:80:9d:4f:1f:8b:c1:a0:b2:1b:85:da:93:
6f:df:38:6f:00:b1:0e:19:fc:b1:04:f0:0a:e4:9f:
f2:48:e9:a1:f7:9c:eb:b8:bf:93:01:9e:0d:35:6b:
98:71:4d:75:68:da:f4:73:ab:10:b0:b6:25:09:7e:
62:3b:8e:96:79:c2:9a:9e:eb:0a:31:bd:e6:e9:90:
76:d8:e8:e3:13:f9:85:3c:cc:dc:7a:9c:19:5a:f0:
10:9e:27:f8:6a:e0:c6:7f:2b:89:67:ed:8b:9c:36:
70:5f:65:ae:94:ca:f7:f5:95:4d:df:27:f1:66:f0:
fc:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F6:CA:9E:18:B7:30:83:60:09:E9:88:18:0E:3C:CB:A8:56:76:EA
X509v3 Authority Key Identifier:
keyid:7C:8C:13:71:DD:6A:FD:5F:D7:9E:A9:84:DA:3F:BD:A1:B9:4A:FE:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIwTcd1q_V_XnqmE2j-9oblK_iM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/e94652-1564-4d1b-8198-1ac5d8863082/1/fIwTcd1q_V_XnqmE2j-9oblK_iM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a1:18:26:2c:89:00:33:20:d0:59:1b:33:7d:12:b2:81:7a:
96:e5:03:d0:05:4c:46:26:1f:e5:f1:e5:ba:1c:f0:74:e3:79:
9c:48:41:02:6c:83:cf:e0:7d:5e:ad:6a:5c:be:10:5c:48:bf:
48:f9:5f:9b:f6:9f:a9:fd:12:40:75:dd:ec:4e:6f:7f:be:14:
a0:f2:77:e2:08:8f:ad:a6:20:b5:d4:13:d4:17:25:85:b4:3f:
1f:08:9f:6f:9e:64:59:3d:80:97:88:13:7c:e1:2d:26:43:32:
ea:11:46:a1:8d:f9:5c:33:7a:72:6c:2b:a6:90:e9:00:d2:25:
8e:d1:6b:d3:bc:2b:a7:b3:3f:bd:84:5d:75:20:58:2b:2b:35:
ea:21:c2:07:d2:95:30:15:4d:56:c4:25:f3:7a:b7:d9:d6:fc:
76:70:2f:e1:a5:f2:46:3a:f9:d3:be:cf:db:72:e7:66:44:3f:
cf:1c:e9:72:bd:2c:bc:7a:5e:5e:b2:45:e7:89:b0:c7:96:f9:
c1:9e:5d:d9:07:83:81:3d:ee:e0:aa:e1:47:3b:d7:73:bd:19:
d5:0f:1c:ce:48:0a:59:9b:75:f0:e2:84:ae:ea:e0:89:63:f1:
77:43:08:df:47:67:af:45:b2:68:e4:7b:be:a3:0e:ea:3d:00:
85:97:d0:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:22:54 2025 by rpki-client