Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
File: fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft (raw, json)
Hash identifier: vU2zXfc0yHE1QRNvZK813cumLk5OTACuPMaGe5uVHDY=
Subject key identifier: CF:49:89:E6:9B:8C:E9:E2:B5:2E:18:87:EE:CC:E0:38:A1:5D:5B:FC
Authority key identifier: 7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
Certificate issuer: /CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Certificate serial: 0197CCF17B3D93B3D1F044D538A09BAF60DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
Manifest number: 15BE
Signing time: Wed 02 Jul 2025 21:01:07 +0000
Manifest this update: Wed 02 Jul 2025 21:01:07 +0000
Manifest next update: Thu 03 Jul 2025 21:01:07 +0000
Files and hashes: 1: JcAhZrilsZkvSyojajHWDjOF_6I.roa (hash: W7eqhWRP/GcuUd5Q71f0zaMk5StnfS4hfdbNGseVYE0=)
2: fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl (hash: yRxMM/nT0KYXhgaKOrNTe3wIF5ObAbW5WAkRkDuYJdI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:f1:7b:3d:93:b3:d1:f0:44:d5:38:a0:9b:af:60:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec610d215d3891342bc32872a50f4d0cfa9dc9f
Validity
Not Before: Jul 2 21:01:07 2025 GMT
Not After : Jul 3 21:01:07 2025 GMT
Subject: CN=cf4989e69b8ce9e2b52e1887eecce038a15d5bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:15:b3:3e:11:4e:47:9e:5f:cc:88:a8:aa:a4:
5f:26:da:83:05:8b:05:00:28:77:dd:8c:4e:12:38:
c2:49:b7:50:3f:1b:67:ae:05:f8:b0:90:37:2d:47:
e8:77:3c:40:a1:89:b4:15:d5:21:20:04:13:ba:5d:
bf:8b:24:07:0e:fa:ae:51:9d:8d:a0:ce:06:91:33:
f6:a3:d8:60:40:b7:5f:b3:f5:34:c9:e5:7e:77:e8:
21:68:ff:e5:1a:5c:a7:ed:b4:92:20:d5:6c:59:16:
19:c2:90:7f:56:e2:42:eb:1a:d7:2f:be:e1:8a:6e:
a1:89:74:92:0e:44:d7:db:1b:b8:73:3a:bb:88:f8:
5e:58:6e:1c:95:b7:9a:92:f5:71:77:f7:44:06:9e:
5d:1b:db:1b:fd:77:8d:b6:3b:e1:7a:b2:60:27:af:
50:7e:31:f9:6e:64:8a:0e:98:a5:9d:0f:37:9a:01:
fa:30:51:c3:5c:69:80:ac:01:cf:2d:03:32:11:98:
7d:fd:a5:2d:75:f5:56:d4:f7:90:7c:b8:8a:2c:95:
31:db:56:8f:4f:cb:06:e7:b0:65:aa:b7:a3:a2:f1:
a3:b0:38:15:8d:2e:92:c4:94:d8:6d:27:54:57:b6:
b4:ac:88:87:08:0b:35:52:bc:a9:02:b7:8e:89:53:
82:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:49:89:E6:9B:8C:E9:E2:B5:2E:18:87:EE:CC:E0:38:A1:5D:5B:FC
X509v3 Authority Key Identifier:
keyid:7E:C6:10:D2:15:D3:89:13:42:BC:32:87:2A:50:F4:D0:CF:A9:DC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsYQ0hXTiRNCvDKHKlD00M-p3J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/22911c-ce51-438b-86cf-e856613d2b10/1/fsYQ0hXTiRNCvDKHKlD00M-p3J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:e6:8a:23:6b:16:ad:27:19:7d:c9:d5:2b:81:6c:af:e9:cc:
7b:76:a2:5c:51:61:e8:b1:fc:54:dd:56:2e:d2:24:ff:39:fd:
7e:c8:8e:58:72:41:94:2f:e6:d3:b6:63:dc:2b:7b:6b:8f:12:
ca:8c:f3:14:ce:b3:95:28:88:4f:08:6f:89:e3:99:ad:2a:73:
b5:09:d5:e5:e0:fc:10:26:0e:ec:aa:e6:c3:f5:4d:69:64:e2:
10:bd:ec:c0:8b:df:2b:9b:54:45:3b:44:67:8d:ab:37:9c:72:
f1:0c:01:65:2c:b4:e7:fc:61:80:5d:15:72:21:31:14:3a:36:
6b:98:c7:aa:a8:f2:8c:11:56:cb:5f:a7:08:d8:64:41:7a:9b:
35:e4:58:d9:84:21:2a:86:47:7e:27:de:9d:15:b3:4a:5a:41:
1e:9e:f1:06:18:0a:cf:73:6b:aa:46:21:45:49:58:5b:11:99:
ef:11:67:ce:3a:93:bd:03:29:1a:5d:73:34:fb:f5:c7:fa:d9:
a2:93:c3:67:0b:0e:f4:c3:31:c6:80:ac:30:29:b5:eb:2c:a4:
ab:45:42:50:00:55:e6:a3:ba:be:86:1d:4e:e9:83:a2:ab:eb:
79:e0:b8:a4:86:ed:fc:7e:d7:c0:a8:9e:67:8a:dd:83:26:26:
b5:9e:9b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 00:13:44 2025 by rpki-client