Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
File: FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft (raw, json)
Hash identifier: YikjyzvNjvGyi+SCjTTaw2bLrSYEhcVdOpLEEK3BpUE=
Subject key identifier: 05:92:F5:E8:B0:04:31:AB:C9:2F:32:4F:C7:4A:8F:FD:1A:29:8E:9F
Authority key identifier: 15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
Certificate issuer: /CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Certificate serial: 0197B74579CA80336B891B0B09CFBC50B0F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
Manifest number: 0E3B
Signing time: Sat 28 Jun 2025 16:01:12 +0000
Manifest this update: Sat 28 Jun 2025 16:01:12 +0000
Manifest next update: Sun 29 Jun 2025 16:01:12 +0000
Files and hashes: 1: FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl (hash: A2pqmZmprMRvzSwJbhvC4Szf1l7nOYaH5b0iBpBUC0E=)
2: saR7C8jPhSxxp1U0l0fw1iLpggA.roa (hash: YzILylPp9VZQ/IVzqGiVAC4yp8xtNGEqB65NyOh5ynQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:79:ca:80:33:6b:89:1b:0b:09:cf:bc:50:b0:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f215ad274f35b24ac6a060b2f09399711bc17f
Validity
Not Before: Jun 28 16:01:12 2025 GMT
Not After : Jun 29 16:01:12 2025 GMT
Subject: CN=0592f5e8b00431abc92f324fc74a8ffd1a298e9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d8:fe:8e:02:30:52:0b:aa:74:0d:97:44:4a:
f2:27:1d:08:ab:d4:cc:83:bc:3b:c9:75:63:79:8d:
df:d1:9d:92:b3:b3:16:dd:3f:54:8b:96:2f:02:29:
14:92:29:e7:46:17:2e:93:15:20:19:41:f9:34:99:
ca:ce:31:47:72:6d:70:12:52:b2:76:8d:cf:8b:3a:
3d:f7:48:28:a7:2f:d5:e0:cb:a3:1d:80:67:79:b4:
78:61:42:80:19:90:a7:33:9b:7d:4f:20:3e:c4:18:
b2:f3:05:38:16:ba:8a:12:62:58:b8:11:73:71:96:
2a:a3:78:dc:68:a4:5b:a8:95:2b:6c:64:15:53:eb:
5a:1c:11:f0:1e:40:93:ab:87:69:93:cf:84:a4:dc:
a6:b8:f8:0f:2d:6c:be:bc:4c:98:ea:af:22:08:c2:
83:2b:bd:81:d9:9c:07:e9:8b:eb:c7:c0:97:de:b0:
05:cd:8c:48:d7:f3:10:14:43:25:49:e3:52:62:9d:
5a:2c:55:65:69:8e:20:45:e3:d3:2f:30:10:a4:4f:
3d:10:94:5c:a3:60:35:c9:e7:7a:1c:40:71:e5:a6:
28:6b:c3:dd:12:1e:92:af:ab:68:f0:70:53:04:aa:
e5:43:80:89:50:6e:5a:aa:ca:70:f5:fe:9c:f6:40:
e1:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:92:F5:E8:B0:04:31:AB:C9:2F:32:4F:C7:4A:8F:FD:1A:29:8E:9F
X509v3 Authority Key Identifier:
keyid:15:F2:15:AD:27:4F:35:B2:4A:C6:A0:60:B2:F0:93:99:71:1B:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfIVrSdPNbJKxqBgsvCTmXEbwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/93e20f-8878-4058-8e01-ad01e30a61b2/1/FfIVrSdPNbJKxqBgsvCTmXEbwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:4f:1e:8a:d6:75:ef:43:4c:fe:67:37:65:d9:4d:36:7b:da:
b5:17:ed:aa:99:cd:4a:e4:fb:18:c0:7e:df:bd:ea:fa:9a:4f:
25:f3:9f:a5:03:c8:a8:39:8e:52:2a:5b:48:1e:7e:1a:0f:1a:
62:cb:e9:8a:c2:f0:d4:f8:38:11:51:6e:27:56:f2:4d:aa:2f:
70:e2:de:c5:27:1c:36:8c:77:aa:f2:4c:6a:be:77:ba:38:0e:
24:9f:8a:b6:3d:bd:1d:c9:9a:c0:44:ea:25:e0:a0:97:71:0f:
43:6f:83:04:80:68:1a:3c:62:39:9c:00:95:94:5e:57:ae:f6:
fe:d3:c8:91:ef:c7:34:18:f4:26:1b:eb:c6:a8:ec:57:8d:3d:
97:60:df:7d:a0:d6:e4:24:5b:5a:b7:95:0e:01:a8:88:4b:6c:
82:18:b8:09:93:b5:47:b6:30:71:ef:28:3a:cf:77:f1:af:3b:
a3:15:7b:ea:1d:94:77:c0:5e:f8:49:b0:2b:ec:5d:12:6a:4b:
a0:a3:0a:92:ad:25:15:9f:17:e8:ce:03:8c:1e:f7:33:8b:83:
e3:df:b9:a5:14:31:f4:9a:7c:fc:4a:5c:95:e6:bb:45:75:08:
e6:48:fb:e2:4d:6c:21:50:75:8f:47:bb:4b:14:f1:69:68:dc:
de:dc:81:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:49:35 2025 by rpki-client