Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
File: FQKvcT425SxxhmyKnr2s89him2g.mft (raw, json)
Hash identifier: 0vwjc5wzQdYf1OCJppMLp1yuyWInQVfwi3MpGiYc6TI=
Subject key identifier: 2B:35:01:05:BE:05:29:0C:59:02:8C:0E:E6:D1:C3:48:9C:8A:8E:EB
Authority key identifier: 15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
Certificate issuer: /CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Certificate serial: 0197B6A1CC01DFFE947065A8AE77F1E6E21C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:02:26 +0000
Manifest this update: Sat 28 Jun 2025 13:02:26 +0000
Manifest next update: Sun 29 Jun 2025 13:02:26 +0000
Files and hashes: 1: FQKvcT425SxxhmyKnr2s89him2g.crl (hash: aFdItRcWYggeoCqDgKQRLYEkLaWb+ilG+P4cr4DZixM=)
2: tuMifPTkCbCL7ajrwo0EzPnXWPw.roa (hash: jC33EY0cA4p2GJTzlFhrTlf/kii333WPsx2l9xMoLj4=)
3: xrGACS-1hAxmap4Rb-Oc9S070js.roa (hash: mptaEeEJPbcTmStEp7RBmFaS5iUHgb9cGp/H5Fm+PGs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:cc:01:df:fe:94:70:65:a8:ae:77:f1:e6:e2:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1502af713e36e52c71866c8a9ebdacf3d8629b68
Validity
Not Before: Jun 28 13:02:26 2025 GMT
Not After : Jun 29 13:02:26 2025 GMT
Subject: CN=2b350105be05290c59028c0ee6d1c3489c8a8eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:92:2e:0b:86:02:1f:dc:59:3a:df:37:30:54:
b4:3f:f2:73:45:fb:5e:bd:a1:e6:bf:94:ba:0a:7b:
ee:81:63:5c:02:bc:31:fd:4c:22:33:89:49:49:b6:
3c:cb:d6:54:82:27:4d:61:5f:0d:ed:4e:39:57:5c:
50:02:cd:27:25:87:5f:bb:f6:3c:97:dc:4c:e6:37:
36:7c:03:40:2f:24:7c:dd:b2:ea:2d:62:60:13:76:
ff:a8:da:7a:b5:69:ff:27:5e:f4:37:0c:c7:fd:5c:
96:11:44:0e:7a:79:30:b1:17:ab:8b:f4:0e:cf:0f:
e9:37:bb:8f:24:f2:69:14:20:6f:78:80:6a:a5:b6:
98:09:e9:90:32:b9:1a:c7:00:07:e0:ba:a6:d8:9a:
a6:04:d5:8d:06:48:45:7f:59:16:df:8a:c4:d7:00:
d1:79:fb:47:45:9b:db:2a:e0:a1:94:67:57:b4:e6:
22:b8:33:98:39:1e:02:08:14:25:db:89:aa:a8:c7:
73:1b:ea:00:a7:94:c5:26:57:99:5b:d6:7c:9d:f7:
dc:ea:cf:d2:17:0f:bd:35:48:e7:53:75:7a:e2:88:
d3:bd:9b:f7:54:09:50:34:1b:2c:7b:5d:1e:11:09:
19:32:73:61:11:02:e3:c6:fa:e3:71:18:7f:f9:85:
9c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:35:01:05:BE:05:29:0C:59:02:8C:0E:E6:D1:C3:48:9C:8A:8E:EB
X509v3 Authority Key Identifier:
keyid:15:02:AF:71:3E:36:E5:2C:71:86:6C:8A:9E:BD:AC:F3:D8:62:9B:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FQKvcT425SxxhmyKnr2s89him2g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/9dcc25-5b0a-4c3e-9149-5a8230e7643a/1/FQKvcT425SxxhmyKnr2s89him2g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:83:65:e9:f9:07:10:5c:b1:0b:68:c9:2b:c5:4c:8a:e2:d2:
28:6c:d3:ab:12:28:87:27:76:dd:3e:41:9c:e5:2c:5a:2b:c5:
e5:8e:a3:59:50:bb:15:fa:c3:05:71:00:08:57:55:f1:ad:15:
83:95:b1:5d:44:ae:bd:be:aa:98:d2:8b:bb:53:d7:45:57:7d:
49:c0:8f:0f:ad:2e:d5:95:33:03:e6:f5:13:70:3d:9e:75:c3:
bf:c0:4f:b7:c9:e6:c9:f8:5c:3f:10:e7:68:a8:6e:b7:7f:4d:
cd:e6:57:86:ef:e1:e2:b9:77:4f:8d:ef:49:b0:ef:ed:6d:87:
82:5f:6c:a5:33:dd:8d:73:90:0a:8e:f3:c8:e3:fc:47:ab:0c:
ef:30:8b:5d:4a:ff:e5:17:59:32:04:2c:90:ae:22:3a:3f:93:
3d:be:61:2f:e9:33:ed:56:2a:a9:ba:8b:50:0c:32:da:f5:71:
68:fd:08:b1:f9:90:a0:c5:9c:bc:f7:c2:7b:5d:e5:74:86:9f:
91:fa:c0:5f:ef:51:81:00:4f:8c:50:85:1c:db:5f:9d:6e:a9:
c9:52:ea:7f:54:ad:99:d0:5f:86:ef:66:94:90:34:bb:09:84:
c3:66:b3:a1:16:4b:03:15:88:84:d0:77:26:8b:80:94:37:c1:
62:ea:26:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:40:53 2025 by rpki-client