Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
File: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft (raw, json)
Hash identifier: pvhcIlXWBNCw0NwmSc3sDDmN025PMTxWP4Y6pF42ZKI=
Subject key identifier: 16:DF:DD:9D:A4:0A:3E:D8:6B:FF:DC:ED:C0:86:E4:55:94:79:DD:BD
Authority key identifier: FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
Certificate issuer: /CN=fbb0a25810d02646656f909c44eb2ba939d23209
Certificate serial: 0197B6D79B9A63A5AB6C66C3E4E45D864FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 14:01:12 +0000
Manifest this update: Sat 28 Jun 2025 14:01:12 +0000
Manifest next update: Sun 29 Jun 2025 14:01:12 +0000
Files and hashes: 1: 1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl (hash: cFCACnL+CEc5kX/ExOMfwguQCeszAvxMKsxV8h+tBAc=)
2: bXTr3E6VnWX26W0oqBoPPL1PlHA.roa (hash: G0OUsQqR41YHtb5AbPT1gfl1AXhku70rwPK53DaTikA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:9b:9a:63:a5:ab:6c:66:c3:e4:e4:5d:86:4f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbb0a25810d02646656f909c44eb2ba939d23209
Validity
Not Before: Jun 28 14:01:12 2025 GMT
Not After : Jun 29 14:01:12 2025 GMT
Subject: CN=16dfdd9da40a3ed86bffdcedc086e4559479ddbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:03:f5:93:d5:cf:e2:c2:55:2f:70:ec:4b:
02:a6:01:d2:92:7a:62:1d:53:4b:1d:8f:e2:d5:da:
a1:10:44:5e:56:49:df:98:c7:a7:b4:29:f8:ba:34:
dc:84:08:64:2e:b7:48:d7:65:e4:40:8a:4d:3d:a9:
58:96:1a:09:b2:eb:3c:4f:b8:47:71:1e:40:80:31:
f5:58:2d:37:af:c9:36:3f:93:a2:7c:ec:9c:8a:04:
ff:f0:69:ae:39:7d:7f:5f:d5:df:ae:28:f9:33:c7:
7b:49:25:27:e3:ab:67:02:67:07:5f:3d:be:69:75:
37:36:bf:e7:19:6d:29:2d:b7:b7:d6:cc:30:b8:3d:
05:a4:d7:d9:2d:3d:09:ac:7d:0a:c3:b4:6c:c9:e4:
40:6e:67:59:7f:88:02:ad:16:dc:1e:f6:bc:b3:93:
c4:0e:cb:24:53:31:e7:25:67:fc:a4:40:90:4d:36:
6d:61:9a:7f:9a:ee:e0:6f:c1:93:67:31:e0:e7:e8:
74:bf:31:0b:df:ce:40:7b:18:51:f1:9e:d9:0a:13:
46:7d:a2:46:d3:4d:b7:c8:54:9e:44:2c:83:70:cf:
9d:a0:b0:0d:aa:b2:c4:8d:f6:fd:fa:18:92:0d:48:
a2:8d:ef:f4:56:ff:13:54:f9:30:e5:ec:ab:2b:8e:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DF:DD:9D:A4:0A:3E:D8:6B:FF:DC:ED:C0:86:E4:55:94:79:DD:BD
X509v3 Authority Key Identifier:
keyid:FB:B0:A2:58:10:D0:26:46:65:6F:90:9C:44:EB:2B:A9:39:D2:32:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-7CiWBDQJkZlb5CcROsrqTnSMgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/34cc12-c824-4499-a5af-29ef17540222/1/1-7CiWBDQJkZlb5CcROsrqTnSMgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:da:40:1e:af:59:98:bd:b5:b8:27:fc:01:f8:46:7d:a7:a9:
90:6d:40:6a:44:4f:64:ba:bf:52:50:15:c6:8a:ff:ef:03:b9:
d5:77:d8:1e:95:68:e2:cf:22:91:09:ad:b6:0e:8e:0b:c7:f9:
b2:44:e9:5d:93:77:bf:a5:89:ee:71:b9:7b:7b:fc:5f:3c:85:
bb:2a:d8:c3:ad:1a:9c:c8:5b:59:ba:f4:64:68:8d:a9:cf:35:
5d:e6:f9:f0:e2:4e:b2:b9:5d:02:57:c9:81:21:9b:78:7c:ab:
d8:08:2c:8e:e3:00:dc:4e:c3:8e:16:3f:cf:3b:02:93:ef:94:
13:f1:6e:f6:16:79:9c:3f:76:51:bc:2a:56:b3:dd:f2:59:d2:
04:44:1a:6a:95:81:9f:2b:6d:30:c5:10:92:94:f7:e9:fb:2a:
93:b4:05:04:c4:64:d5:47:f9:2e:ed:e5:34:88:9a:a2:c7:77:
1f:50:5a:ba:b5:b4:56:6f:81:22:01:a8:22:4a:f1:82:4f:ad:
e9:99:2e:f3:f3:db:b2:f0:e4:df:4c:72:79:16:41:1d:fa:be:
1a:20:8c:05:a7:21:dc:f7:d8:06:af:e7:ca:68:d7:cb:28:47:
1a:9c:05:1d:66:3c:48:c4:8d:a1:69:fe:87:5d:36:56:0d:d6:
b5:bb:b4:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:59 2025 by rpki-client