Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
File: cF5128zl_N2R2KmeWhssmVuBJ3U.mft (raw, json)
Hash identifier: LqyqUcn9UHTP4Ue9T5lpeQ1EgpI8qCFrhuV/5Ndc714=
Subject key identifier: AB:39:FA:F7:19:18:27:E9:2F:55:1F:19:12:51:5D:D4:34:CB:7C:22
Authority key identifier: 70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
Certificate issuer: /CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Certificate serial: 0197C312C3EAF62CF7FF41C95D19BB7C5103
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
Manifest number: 15C0
Signing time: Mon 30 Jun 2025 23:01:15 +0000
Manifest this update: Mon 30 Jun 2025 23:01:15 +0000
Manifest next update: Tue 01 Jul 2025 23:01:15 +0000
Files and hashes: 1: Y-ORdAusYkZsKOUTFP8lOiqiHAs.roa (hash: VsoWMS+G3RdpKa8Z+B6s882TzbmXTjisQIhsADrOhSU=)
2: cF5128zl_N2R2KmeWhssmVuBJ3U.crl (hash: OrMH57mLeJRg7rPeF9LlYo0CelB9+Wrj2cCyN+/1A4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c3:12:c3:ea:f6:2c:f7:ff:41:c9:5d:19:bb:7c:51:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=705e75dbcce5fcdd91d8a99e5a1b2c995b812775
Validity
Not Before: Jun 30 23:01:15 2025 GMT
Not After : Jul 1 23:01:15 2025 GMT
Subject: CN=ab39faf7191827e92f551f1912515dd434cb7c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:32:43:28:4a:40:11:9d:d8:c7:06:dc:78:fa:
3b:a9:80:0b:4b:c1:79:e1:a8:7f:65:41:3b:5a:2d:
76:43:dd:bf:9c:da:f1:51:9b:ad:c4:0e:49:d6:36:
4b:6b:8a:78:df:64:1d:0d:d5:cf:1c:44:f8:ff:d8:
0a:7d:6d:28:aa:64:22:99:cf:cd:51:30:38:7b:5a:
50:ec:46:13:4f:05:b2:33:6e:5a:05:75:11:8d:eb:
65:62:64:8e:b5:ca:2f:5d:26:ed:02:bd:f4:f0:09:
37:96:5e:0a:fe:f3:2d:e1:b1:8d:45:29:fa:79:e6:
8e:dc:d5:59:6c:51:6b:ff:be:d2:0b:98:43:14:93:
89:cb:db:a1:67:1a:63:b6:1e:57:89:7f:d6:e9:96:
f1:f1:f2:5b:44:69:3e:70:d5:7b:d4:07:41:0b:6d:
6f:4a:64:ab:c5:92:af:88:4d:e7:e5:6e:9a:03:a8:
27:f8:b2:ad:9c:80:88:57:25:5d:57:66:c9:13:fc:
a9:34:74:cd:77:73:02:d6:e7:5e:1e:31:cf:2a:02:
ee:67:13:c0:42:ba:08:3d:f6:36:30:c4:1b:2b:35:
43:56:87:be:e7:f9:10:49:86:74:e3:8e:1b:01:79:
cf:ce:6b:fa:b4:24:f3:48:40:45:ec:c0:5a:f2:cb:
b9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:39:FA:F7:19:18:27:E9:2F:55:1F:19:12:51:5D:D4:34:CB:7C:22
X509v3 Authority Key Identifier:
keyid:70:5E:75:DB:CC:E5:FC:DD:91:D8:A9:9E:5A:1B:2C:99:5B:81:27:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cF5128zl_N2R2KmeWhssmVuBJ3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/c1f448-8808-4a2f-bffa-f8b48baccd9b/1/cF5128zl_N2R2KmeWhssmVuBJ3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f7:47:f3:6c:21:3c:89:77:0c:a0:da:da:a6:c2:d1:9b:4a:
c2:83:1a:fa:94:ab:23:ad:a0:06:0b:07:dc:50:82:60:c0:f6:
3f:7a:6e:85:eb:73:0d:b0:17:1e:86:95:1b:7d:18:04:82:3f:
b1:94:88:c6:83:a4:2a:68:b6:23:d4:8c:4e:e0:0e:f5:61:22:
3b:d4:c5:b5:e0:a3:ce:86:e1:0a:6d:58:29:45:d8:f8:48:bd:
79:66:89:65:d7:db:8c:a8:4d:e9:3e:cc:59:4b:2a:33:d5:e3:
48:60:de:7a:a6:86:c3:fe:30:33:a3:d3:5f:4a:4d:b1:1a:ef:
08:d6:61:9d:04:2d:35:e3:1a:7d:6a:b7:09:19:f8:97:5e:57:
d5:c1:27:5d:50:de:8a:63:d9:eb:ba:cf:3a:61:90:0c:1f:7d:
d8:8c:aa:fe:ca:c0:72:d0:ac:a2:cf:31:b7:ea:87:01:e6:05:
ff:f2:3f:31:23:1c:65:22:6c:eb:6b:7e:7c:e9:0e:5b:da:f4:
25:7b:64:b0:b7:68:92:98:3f:c6:89:23:4b:35:50:e0:36:4b:
6b:16:86:ea:2a:d2:1d:f0:ee:fe:62:2b:b7:64:9f:96:f5:65:
47:47:ce:0a:15:9e:13:23:71:5e:c7:54:74:82:b0:40:24:c4:
03:b3:11:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:10:26 2025 by rpki-client