Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
File: _PXwgDHjWvlUXTrT0TjK0QOW4so.mft (raw, json)
Hash identifier: ovqA+DezmVHK9sXwmt/uUDTTvRn1S3kcznmaPg6gSgI=
Subject key identifier: 4C:F8:B5:F2:33:5D:72:10:78:02:77:22:C9:C3:2B:CD:09:0E:78:3B
Authority key identifier: FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
Certificate issuer: /CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Certificate serial: 0197B8211FBF65A5E9CFA3FE01B0B87B1584
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 20:01:07 +0000
Manifest this update: Sat 28 Jun 2025 20:01:07 +0000
Manifest next update: Sun 29 Jun 2025 20:01:07 +0000
Files and hashes: 1: 27ql0pmKcM7odOuyt-r9IUbz8H0.roa (hash: 8BtUKmV8OD/wNsVNWexZC4Gh5lDDpl/q9sI4sznft7k=)
2: _PXwgDHjWvlUXTrT0TjK0QOW4so.crl (hash: WuTdLzchGDIohojRjmkbKZynbt0ZjX6k+8vT7UCXk/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:1f:bf:65:a5:e9:cf:a3:fe:01:b0:b8:7b:15:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcf5f08031e35af9545d3ad3d138cad10396e2ca
Validity
Not Before: Jun 28 20:01:07 2025 GMT
Not After : Jun 29 20:01:07 2025 GMT
Subject: CN=4cf8b5f2335d721078027722c9c32bcd090e783b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:62:f9:82:bb:3e:a0:1d:60:43:7b:26:5d:d3:
4b:0f:ad:74:ab:3d:79:05:02:61:c0:25:3f:36:8f:
40:8e:4f:fd:dc:9f:f0:f1:87:71:b8:e0:51:35:53:
64:c5:89:46:1e:97:36:63:0c:8a:ed:41:78:fa:4e:
e4:ea:72:32:a3:8a:02:2d:fa:ef:fc:cb:df:5e:36:
e5:70:2e:e7:b8:76:1c:96:bd:67:ea:1e:11:54:4b:
c5:c7:8f:7d:29:c1:62:d2:9d:8c:e2:f7:79:ae:b5:
12:e5:6f:48:2f:5c:25:61:a5:1a:4c:c2:77:10:0c:
04:c0:72:3b:a6:85:d4:e5:25:35:69:76:78:5a:57:
b2:0c:f3:d8:75:96:00:9d:8f:69:75:e7:41:1c:bb:
e7:01:29:b9:76:8a:f3:6d:76:31:26:1c:da:df:03:
b2:d9:c9:4c:ae:f2:72:e1:d9:9e:9a:5d:ab:85:d8:
cc:5b:09:3d:13:45:ed:e4:09:f6:15:09:60:d2:03:
75:51:b8:b4:c5:5e:d0:e8:f1:c5:62:c7:6f:e6:8d:
5e:91:1c:ed:82:3f:ec:32:0a:09:22:d1:17:f3:20:
96:4d:44:25:d5:83:49:a1:79:b2:57:19:e0:f1:46:
1c:5c:b1:3e:c5:62:46:60:22:95:2b:1c:7c:14:88:
5d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:F8:B5:F2:33:5D:72:10:78:02:77:22:C9:C3:2B:CD:09:0E:78:3B
X509v3 Authority Key Identifier:
keyid:FC:F5:F0:80:31:E3:5A:F9:54:5D:3A:D3:D1:38:CA:D1:03:96:E2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_PXwgDHjWvlUXTrT0TjK0QOW4so.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b7bdf6-9df4-4d4f-8d95-bcbfb1898eba/1/_PXwgDHjWvlUXTrT0TjK0QOW4so.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:29:69:1e:1a:77:85:f9:55:c6:9c:fd:ac:8a:c0:d8:28:a9:
e1:33:82:c8:80:91:0f:23:0d:08:3c:84:ef:dd:56:db:ef:25:
83:9a:e2:40:91:ee:6d:e9:1f:74:0e:30:ff:65:72:f2:29:d5:
a0:29:82:b0:60:db:19:f8:b1:71:5e:23:ce:af:1b:0b:d0:1c:
f6:93:5b:2e:a6:97:dd:54:5f:b9:ce:ee:aa:61:d2:0e:ba:58:
5e:e6:26:a8:83:42:81:89:32:04:b3:27:7d:62:6e:75:8d:90:
8c:4a:bb:12:3e:ac:2f:76:92:a3:8c:07:ad:42:75:d4:90:54:
64:28:c8:bb:a3:de:46:e5:05:f0:b6:4f:3d:05:96:13:6d:de:
fa:fe:97:ff:76:f2:67:d8:a7:8a:f8:18:24:f3:73:71:d1:b4:
de:f3:a5:75:4a:a9:69:50:da:63:b9:89:86:f5:38:d6:10:70:
27:50:69:44:56:e1:2f:2c:39:6d:79:d5:6b:ea:32:10:56:b9:
1b:85:c4:95:75:ae:88:5c:39:26:7c:cf:82:6c:6f:93:2b:da:
5e:74:b2:09:75:e7:5d:dc:dc:0e:09:88:28:eb:f3:ee:9a:3e:
3e:c8:16:9f:3f:af:c0:02:4e:e5:a9:51:0b:28:2c:2d:c4:b2:
33:dd:c1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:48 2025 by rpki-client