Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
File: c-FXspGMrcqKWp-8Zul3YIpt9eE.mft (raw, json)
Hash identifier: rl42woya4beZ4iGRoMc48brwDoy/pxv5mUyv6K7pjq0=
Subject key identifier: DD:78:D0:4E:11:EC:AE:43:B5:89:10:B9:58:8B:B3:B7:B5:DD:E4:0D
Authority key identifier: 73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
Certificate issuer: /CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Certificate serial: 0197B7456A912AA5FB9A0BFE3F631F95C364
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
Manifest number: 15BE
Signing time: Sat 28 Jun 2025 16:01:09 +0000
Manifest this update: Sat 28 Jun 2025 16:01:09 +0000
Manifest next update: Sun 29 Jun 2025 16:01:09 +0000
Files and hashes: 1: 9Vc3AbW6vlZ_1l6ygzFXdiG_9DU.roa (hash: XyjyaFRHv8L+Xv8vUnenIR3U/Eb6y+TGYMaeT4tV8mY=)
2: F8Nk--QAXVfgvDbLL_6xQcd6OeY.roa (hash: B5PNCVqEZ3htMuoUo9SXwMTUf5kV2N6tfRSmohV4ztI=)
3: c-FXspGMrcqKWp-8Zul3YIpt9eE.crl (hash: g5Kd3gIxphqwiFdni1cwxL9ZqDT8rvJo35DmyvkwiRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6a:91:2a:a5:fb:9a:0b:fe:3f:63:1f:95:c3:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73e157b2918cadca8a5a9fbc66e977608a6df5e1
Validity
Not Before: Jun 28 16:01:09 2025 GMT
Not After : Jun 29 16:01:09 2025 GMT
Subject: CN=dd78d04e11ecae43b58910b9588bb3b7b5dde40d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8f:cf:f6:94:65:ca:b8:51:a8:9f:8a:fd:44:
5a:0d:a9:4a:dd:04:a8:58:80:9a:fd:3a:a0:af:3f:
08:fd:47:f7:da:5a:6d:51:27:ca:77:dc:52:56:f3:
c0:91:19:2c:68:9c:56:7b:0e:8a:85:8e:ef:a8:05:
26:4a:73:da:dc:f5:1a:89:5a:37:b4:61:89:f9:9a:
2b:5c:8e:78:32:37:5e:43:89:97:83:d3:d1:1f:92:
d4:5f:69:26:3a:06:be:51:5b:9f:3c:56:8b:0a:67:
0b:33:76:c8:0a:ce:c2:11:63:7b:7e:86:1e:03:c7:
25:9e:11:b9:c6:b9:14:7e:6b:61:35:66:80:03:0e:
6a:86:b6:68:ea:ad:16:a1:a3:56:e4:af:2d:3e:94:
b3:5b:03:7f:3f:05:06:96:54:64:4d:44:29:7a:c7:
c6:ed:20:42:8a:1e:71:36:ec:8b:88:e6:39:83:59:
4b:46:37:4e:25:0e:29:77:40:55:04:12:f6:b7:43:
d4:9f:56:d1:56:48:b7:6f:7a:c1:f9:5c:85:26:72:
1b:09:f9:e5:1c:ea:75:2d:4f:7f:88:0f:a1:72:c2:
af:04:25:28:07:9a:33:c7:61:7c:cb:79:14:1f:10:
75:18:a4:2f:9e:ee:d6:d2:1d:ae:28:3c:3c:d6:90:
c9:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:78:D0:4E:11:EC:AE:43:B5:89:10:B9:58:8B:B3:B7:B5:DD:E4:0D
X509v3 Authority Key Identifier:
keyid:73:E1:57:B2:91:8C:AD:CA:8A:5A:9F:BC:66:E9:77:60:8A:6D:F5:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-FXspGMrcqKWp-8Zul3YIpt9eE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/bbcd53-c4f8-4245-bb90-00a154b8ecb1/1/c-FXspGMrcqKWp-8Zul3YIpt9eE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ed:dc:b5:ba:14:51:ab:7e:4d:4f:1c:79:aa:c6:15:73:68:
4b:0a:f5:38:9a:61:74:27:b9:05:bf:39:01:10:cd:89:34:13:
89:29:12:17:19:5a:02:46:32:99:80:6a:9a:dc:9d:78:83:b4:
e4:e0:ea:92:63:c9:3c:81:a6:15:51:fd:77:7e:00:cc:ea:1a:
e8:6e:07:1e:19:e5:8b:99:86:d5:50:5a:8e:da:52:1c:66:b2:
29:0d:2e:19:02:c7:2f:32:ba:c8:97:42:b4:57:d2:ec:18:83:
82:ab:88:39:d6:70:fa:00:a6:47:7a:59:4a:c5:39:15:b9:93:
ae:da:00:81:58:38:b5:7f:14:91:ff:be:43:08:db:77:86:cc:
ad:5d:55:c9:0b:3a:48:fc:72:94:35:94:8b:d6:98:5b:e0:86:
91:18:d4:67:6b:83:18:95:d8:6b:34:aa:c8:d2:a9:b9:2d:ff:
b8:d8:6b:2a:37:d5:1a:19:5a:3f:f8:d9:48:e0:25:35:3c:f8:
8c:fd:92:85:58:95:53:52:48:cb:32:cc:46:2c:d7:f0:97:02:
52:d1:75:9a:a0:26:10:d5:cd:be:c6:de:a1:95:04:bf:56:16:
02:a7:ab:1f:2f:c0:da:ba:a2:40:43:0f:87:86:70:d6:15:a0:
3e:57:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:08 2025 by rpki-client