Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
File: F8ID4_NlkjqEPTIgMXocaM903g8.mft (raw, json)
Hash identifier: H1kWWMEfrvCJGvZLS6TGe4+e7VcwRmUfgwAOYkrX3Xo=
Subject key identifier: 2D:D5:EF:AA:E0:AF:92:87:22:56:26:AA:E4:07:26:A8:29:F3:1E:B1
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 0197B77C6310D79768E4202161808C665FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 17:01:11 +0000
Manifest this update: Sat 28 Jun 2025 17:01:11 +0000
Manifest next update: Sun 29 Jun 2025 17:01:11 +0000
Files and hashes: 1: 4yNv1AmPL0eETqaVsG5JTwwRl3A.roa (hash: eTktrEnbGg3fLOei98QUmpv9AxL2dhvENDzZ4cYi6lk=)
2: AbDDieAjiM47QPI38uwxhNFokMk.roa (hash: KjxwOHLyj1c1EEBagKLxM0Nr+10mBGuGj4d5BS85kno=)
3: F8ID4_NlkjqEPTIgMXocaM903g8.crl (hash: fLhrTVS+65DISNKyXhfdcKD0UlZRw+1iWNJBarYX2pg=)
4: H5y3Q_dV-Hzo-AC0frra9lLxNUY.roa (hash: dJMeL3gMhdqpU5vNKVA+0HKM1TGv6/U20F1ajMJbf5s=)
5: W66fAxMpRHUTy0LH4NsEkImgDCE.roa (hash: AD4DNdRniTHPJR9jh88wIKBDDr7wVfxEb8cYqqVIi8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:63:10:d7:97:68:e4:20:21:61:80:8c:66:5f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Jun 28 17:01:11 2025 GMT
Not After : Jun 29 17:01:11 2025 GMT
Subject: CN=2dd5efaae0af9287225626aae40726a829f31eb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:37:8d:87:34:07:ad:63:8f:60:45:8b:52:89:
23:d6:7f:2d:5d:fa:33:6c:c7:66:89:21:12:75:12:
7a:29:9c:0e:39:f6:47:b4:2c:a3:3e:8b:80:67:ad:
fe:47:79:f3:8a:f3:9d:ad:ce:20:d1:4e:e4:1c:f5:
da:d1:47:58:29:5b:b3:0b:45:a5:af:2b:e1:2e:7e:
a9:1c:ab:72:eb:22:19:0a:74:fd:33:35:a7:b1:63:
9c:f9:0f:58:80:9e:18:f2:c2:2a:60:1b:24:40:1e:
2a:38:d2:82:d8:e8:f4:1c:16:cd:db:0f:f8:69:e5:
a0:6b:49:3b:4f:bf:04:2b:42:08:e1:69:13:a9:49:
74:fa:46:c6:f6:ea:6d:09:5d:20:3b:17:a6:1a:f7:
f6:3e:09:1c:e5:63:7d:95:89:a1:5a:b4:2c:38:22:
8b:d6:92:2e:86:73:3d:e0:2a:bc:61:35:40:4b:cc:
d1:c0:45:2f:fb:4b:f9:c2:6d:49:6b:ee:b9:b2:06:
8b:d9:e4:bb:80:c6:d2:c2:be:2d:20:98:7f:bb:d2:
fc:4d:1d:98:f9:6e:49:4c:e2:08:33:53:d0:42:79:
61:6f:e7:bb:a4:23:b2:85:68:28:3a:fa:f7:ad:02:
e6:08:7c:bb:be:23:7f:8a:11:4b:68:9e:49:52:11:
31:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D5:EF:AA:E0:AF:92:87:22:56:26:AA:E4:07:26:A8:29:F3:1E:B1
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:0c:00:9b:88:ab:30:50:2e:20:25:f0:67:89:15:83:61:f4:
6b:d3:fb:3e:1a:07:48:a7:0c:8c:8e:61:20:5b:45:96:e8:91:
ec:b8:51:8a:ac:53:64:1d:68:3c:69:60:47:dd:5d:60:2e:18:
20:fe:07:bb:58:0c:db:2e:68:30:fb:fa:28:8e:6c:c6:73:6b:
6b:db:de:1f:4e:87:a2:7a:bd:a2:5b:11:b9:88:5c:e8:14:6b:
15:b7:d7:c4:7e:b0:e1:d4:a3:12:0f:38:be:86:d5:c5:85:dd:
2f:29:6c:4f:2b:c6:c8:07:95:a7:15:32:06:ea:bd:60:53:ca:
22:fe:bc:44:b7:6b:06:ca:05:b6:4a:ac:03:1e:23:99:60:4c:
0e:ff:c6:8c:64:b5:72:88:27:ec:74:1f:31:d9:98:b4:6b:ef:
61:44:9a:a1:dc:fe:12:fd:05:d9:10:fb:a4:b9:83:41:a2:53:
d0:f8:c9:71:b8:0c:36:2f:66:c8:b3:4f:c0:6a:1e:9c:23:80:
d7:98:8a:54:a1:d7:c5:90:87:f9:a6:d5:1b:01:17:59:2a:3b:
c0:9b:67:74:88:1e:a6:a6:12:80:89:90:2b:55:13:e2:da:3c:
9b:a8:bc:ab:8b:53:fe:ec:46:7d:0f:67:53:28:45:15:e3:e7:
ae:e1:b2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:05 2025 by rpki-client