Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
File: 1--2UOaTkstMuS-5kfzthBVsWnj0.mft (raw, json)
Hash identifier: r/hteIeoyBycQ0kcyovfiDdTV9kHJJXStBzfsDcDGbg=
Subject key identifier: 2D:A6:B8:B6:BC:A0:A1:12:E0:91:29:15:A0:55:77:04:F2:76:40:A9
Authority key identifier: FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
Certificate issuer: /CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Certificate serial: 0197B70EF6FD51468E1312CEA248474B1DF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: 1--2UOaTkstMuS-5kfzthBVsWnj0.crl (hash: RK2LGiyTb7Bd9X+pZIj7XHxQMQCgSAYTsd3wgwzKf9k=)
2: 61waeYhYDVs6iShTSFPZPK9QSkM.roa (hash: QQBDA8/+LK2nAVHB2ah071aV/uPCqnuOIT4KbDJAkyE=)
3: dCHPtj1Enu9C_p2jfaqFMRHkj4c.roa (hash: xa0IfezLBVX21PV8VhLDZSxsFF3gEUGakSX8RC4YWfQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f6:fd:51:46:8e:13:12:ce:a2:48:47:4b:1d:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbed9439a4e4b2d32e4bee647f3b61055b169e3d
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=2da6b8b6bca0a112e0912915a0557704f27640a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:63:75:17:4c:d0:1d:cd:5f:b1:29:91:b3:f4:
d6:5b:01:c6:5f:dd:ab:0a:3f:71:e7:21:65:42:88:
44:46:80:8d:59:2c:01:a1:08:22:01:6c:bc:a9:21:
37:56:5d:4a:4c:0e:ef:39:48:3c:b4:9e:1b:e7:c5:
08:e1:ea:aa:5b:0b:73:d6:04:48:a8:c3:6b:ce:fa:
7f:d4:93:2d:07:a3:49:b1:7a:c5:37:ba:af:f2:18:
2a:3e:e7:45:68:91:53:93:f0:7e:d5:85:d8:1a:85:
87:bc:b7:8f:49:73:8f:94:cf:bb:ce:68:3d:ec:de:
95:ef:3e:c1:25:b3:2e:66:2c:8a:97:e1:bf:c5:16:
1c:11:c7:e9:cb:7a:ac:82:cd:08:91:5e:74:50:d6:
1e:3f:1a:60:a3:ec:03:c6:d1:72:f7:09:d5:c1:b5:
7d:da:c0:90:8a:66:25:09:ed:c4:dc:1e:ed:03:42:
2f:83:d3:2f:98:de:30:42:f0:c8:c2:0b:a8:bc:73:
5b:f2:d1:40:d5:a9:5a:d2:fd:55:23:ce:80:9c:5b:
c3:e0:eb:59:bc:31:f3:90:ea:98:fd:d4:b7:df:0e:
67:42:e1:62:ad:d5:a6:fe:c1:cb:89:ae:7f:f9:ee:
44:d0:58:c6:4d:29:d0:fd:2e:90:e2:2b:75:79:76:
12:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A6:B8:B6:BC:A0:A1:12:E0:91:29:15:A0:55:77:04:F2:76:40:A9
X509v3 Authority Key Identifier:
keyid:FB:ED:94:39:A4:E4:B2:D3:2E:4B:EE:64:7F:3B:61:05:5B:16:9E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1--2UOaTkstMuS-5kfzthBVsWnj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/d07c07-b962-4f4b-a3a0-b51b35def6de/1/1--2UOaTkstMuS-5kfzthBVsWnj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:4c:96:66:8b:3b:2e:93:be:81:44:54:01:1a:bf:d8:0f:bd:
4e:dc:4e:1e:c8:f6:1d:df:cd:62:cb:22:8f:76:11:07:b3:7a:
b2:37:4a:70:fe:28:ee:24:fb:2b:d5:c8:a8:48:a4:d1:54:1e:
5f:ff:66:cf:0a:2c:74:3e:9a:98:73:71:e4:17:10:59:e7:6f:
f8:62:a7:be:a7:aa:14:d5:85:48:c3:f3:b0:d3:ab:ed:f2:6d:
4e:34:3a:ea:c8:89:af:f6:0a:16:05:f2:c4:96:a6:ee:8a:90:
73:d9:17:fa:69:34:46:db:d9:cf:50:1d:b1:4e:ee:71:b7:d4:
4f:d4:74:98:a2:b3:42:b8:12:e6:ca:64:a9:02:cb:44:f2:99:
31:4a:2f:ce:ac:4e:12:6a:e2:57:59:3d:41:ec:a4:ec:89:d6:
0c:e6:98:2c:4f:d5:be:e8:dd:59:cf:28:cf:ef:61:c5:53:fd:
7f:4b:12:08:96:73:ee:36:40:f4:83:5b:0e:7e:32:a4:c7:28:
d9:80:2d:1f:e1:40:86:a8:ff:ff:26:51:56:d1:f8:18:93:54:
76:79:f1:06:09:92:e8:fa:5d:c3:26:13:a8:24:fc:18:ec:17:
77:86:39:01:ce:79:66:28:bb:ce:b7:2c:5a:71:44:17:29:cb:
83:93:55:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:30 2025 by rpki-client