Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
File: FpCXDdu3YZzIIYbdtTbrTomF0t4.mft (raw, json)
Hash identifier: FQU+MO/FvsenCM4kEYsY4pcdB5p/zzpvvllV8wAObR0=
Subject key identifier: 96:2A:AC:20:98:72:C9:51:76:17:25:98:7E:75:A8:B0:BA:2A:CA:F8
Authority key identifier: 16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
Certificate issuer: /CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Certificate serial: 0197B7B36194A0322F8E4A7978AB401C2BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
Manifest number: 15BB
Signing time: Sat 28 Jun 2025 18:01:15 +0000
Manifest this update: Sat 28 Jun 2025 18:01:15 +0000
Manifest next update: Sun 29 Jun 2025 18:01:15 +0000
Files and hashes: 1: FLzhahX1RfEQksVef8HwMw5EmEI.roa (hash: 3r/+kxvTsJcUwXkCOUAwIQMliVjMUukx9o6NgfAcfNk=)
2: FpCXDdu3YZzIIYbdtTbrTomF0t4.crl (hash: GmPRZkkKZmszEzEuRK+MK1NXjC8OFP9jFiYZjYvW9r0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:61:94:a0:32:2f:8e:4a:79:78:ab:40:1c:2b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1690970ddbb7619cc82186ddb536eb4e8985d2de
Validity
Not Before: Jun 28 18:01:15 2025 GMT
Not After : Jun 29 18:01:15 2025 GMT
Subject: CN=962aac209872c951761725987e75a8b0ba2acaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1c:e2:f1:24:3d:67:01:12:6b:68:17:78:39:
08:7f:9c:41:e3:4b:35:e7:d8:e0:13:1e:2b:b3:55:
6e:e4:f0:b2:6b:33:2e:60:18:7e:62:a7:8c:a1:79:
94:c2:2c:6e:a4:0f:ac:13:1b:1d:bf:e1:01:7a:1f:
ee:94:0c:f3:11:c0:b9:5e:73:a2:8d:e2:cd:49:89:
13:11:8a:5d:dc:fe:71:1b:d3:16:e5:e1:fd:d0:b5:
7e:dd:2f:92:2c:3b:6b:ac:22:19:14:f0:73:6c:fa:
56:54:4e:5d:b2:f3:d3:5a:2c:77:27:fe:97:74:2f:
43:81:d6:d1:67:87:4c:a2:e0:b9:d7:60:1f:c0:01:
c8:45:f4:66:fa:21:f4:25:c5:ed:e0:5f:79:7e:7e:
10:28:c5:cb:c5:27:b8:bd:ea:28:c1:e4:fc:88:43:
20:53:ac:0f:5f:72:dc:57:25:bd:cd:4a:10:46:cb:
66:44:b0:88:d1:62:ce:32:bc:1f:db:4d:ad:23:fb:
c4:6d:5b:ae:8c:ff:01:4f:06:50:a3:67:99:39:25:
78:24:d9:20:1e:08:d5:e1:22:bc:be:b7:ea:bf:ab:
73:45:b3:90:e7:1e:27:1f:a4:23:53:52:13:38:a9:
25:10:c2:38:a8:2a:76:81:e8:36:6b:50:3b:9f:7a:
32:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2A:AC:20:98:72:C9:51:76:17:25:98:7E:75:A8:B0:BA:2A:CA:F8
X509v3 Authority Key Identifier:
keyid:16:90:97:0D:DB:B7:61:9C:C8:21:86:DD:B5:36:EB:4E:89:85:D2:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpCXDdu3YZzIIYbdtTbrTomF0t4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/2e8537-36be-498f-8155-cc03bd315ff9/1/FpCXDdu3YZzIIYbdtTbrTomF0t4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:f6:30:94:52:8e:99:6f:41:10:6d:70:8c:38:a6:fa:cd:ae:
cd:c9:10:3a:c1:be:57:8c:4a:c9:f4:41:cb:96:95:bc:c5:fb:
5f:dc:4d:98:b1:7b:69:7f:89:87:6c:f5:1b:5e:0b:ee:60:8f:
02:27:1b:9b:95:0b:61:8e:26:89:71:75:e0:e4:b9:dd:c2:60:
93:b1:a9:a0:a4:f7:5b:43:3a:6b:f2:45:ff:35:bb:3e:7c:43:
bb:b9:08:13:e1:c2:b4:e5:58:b8:fb:2f:1d:91:68:16:b2:85:
83:5f:cf:ec:3f:4c:75:b2:f6:93:c6:be:9a:33:8e:1f:84:1e:
ee:2e:b7:43:6d:55:48:81:2d:04:00:db:63:dd:55:06:ef:b3:
7c:5b:81:50:3e:bd:45:52:97:82:2b:32:f7:a1:9a:2a:44:50:
30:39:cf:fd:02:99:22:cf:a3:d4:20:0a:d2:5a:a2:78:03:7a:
1a:7e:1f:21:6a:8d:d1:9a:9b:31:13:54:2c:90:44:4a:bf:31:
63:58:50:25:f6:8c:db:0b:9c:a6:9f:10:15:d9:8a:21:b4:83:
d5:42:9e:b5:78:2b:d3:6b:41:9f:aa:40:2b:dd:32:37:20:11:
41:ce:a3:02:9c:fc:c6:9f:f6:1c:54:89:c6:eb:9e:95:bb:ee:
c7:2b:80:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:58 2025 by rpki-client