Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
File: dFkBtALUgvPW3Sko6oztLuts5BI.mft (raw, json)
Hash identifier: zNdL5cWMdBpaluE3+MKXEn9ntWbU91xbzHW6G7yT+48=
Subject key identifier: 47:96:55:04:F4:FC:CF:0D:93:82:AE:B3:72:8A:36:15:CC:77:A9:6B
Authority key identifier: 74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
Certificate issuer: /CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Certificate serial: 0197B77C13E48E1479B54904652CC2D13150
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 17:00:51 +0000
Manifest this update: Sat 28 Jun 2025 17:00:51 +0000
Manifest next update: Sun 29 Jun 2025 17:00:51 +0000
Files and hashes: 1: cx1g5onsIc-hAAu8dnSh1N5rp3U.roa (hash: CrKS5W6ytqqKToe/UhGDJrUzFXfuo+vTp+g8QhgmrYQ=)
2: dFkBtALUgvPW3Sko6oztLuts5BI.crl (hash: dFkiU0SPQyHaKDAM+/J3YUMfvXGFG/U0oIrnGQeDdr8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:13:e4:8e:14:79:b5:49:04:65:2c:c2:d1:31:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=745901b402d482f3d6dd2928ea8ced2eeb6ce412
Validity
Not Before: Jun 28 17:00:51 2025 GMT
Not After : Jun 29 17:00:51 2025 GMT
Subject: CN=47965504f4fccf0d9382aeb3728a3615cc77a96b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f4:60:47:3c:76:14:25:66:7f:ac:63:bf:93:
d0:b6:f3:ac:7d:0d:41:5c:da:ad:6e:ec:60:3f:de:
00:cd:00:d1:10:a5:76:ce:d0:6f:a5:fe:18:a9:9c:
5b:4f:8b:0c:c3:b6:21:bc:23:25:3a:32:53:65:88:
96:26:aa:13:71:36:84:a9:c6:ad:c1:6c:2f:39:a2:
2f:89:8c:58:a4:92:93:c2:56:d7:34:e2:74:ad:cd:
b8:3a:12:b9:4d:c1:88:56:bc:06:90:6d:f7:09:0a:
83:50:c7:54:b9:f4:75:4b:ef:3c:fe:b4:5f:79:30:
ad:51:bd:0a:5b:c4:1e:3a:d3:11:f3:31:1c:85:9e:
e1:e8:34:a1:ec:2b:b4:a8:a6:0f:82:4d:38:08:ec:
eb:5d:f4:0c:b4:3a:d1:74:b8:93:f8:bd:1e:1b:e8:
9f:a2:57:67:ad:95:22:0c:61:89:a1:c5:f1:7f:65:
49:23:9e:3f:12:e4:85:d3:0d:14:21:5a:b4:ac:92:
49:59:0f:36:7c:d2:f0:2b:b4:73:0e:e0:e3:74:91:
7a:f4:2d:a8:8a:8c:52:d2:b1:72:e6:30:90:6b:84:
8c:10:1f:ff:12:29:fa:15:f8:47:78:7f:ff:1a:09:
3c:94:4a:3b:50:45:ae:9b:2a:a1:c6:7b:ca:93:0a:
7a:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:96:55:04:F4:FC:CF:0D:93:82:AE:B3:72:8A:36:15:CC:77:A9:6B
X509v3 Authority Key Identifier:
keyid:74:59:01:B4:02:D4:82:F3:D6:DD:29:28:EA:8C:ED:2E:EB:6C:E4:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dFkBtALUgvPW3Sko6oztLuts5BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8fd6df-3012-4e46-bbd8-d7c36e15cf0e/1/dFkBtALUgvPW3Sko6oztLuts5BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:d5:c3:03:ab:ef:bf:40:83:06:a0:7a:f9:73:98:e0:b9:20:
45:82:eb:bd:20:79:78:07:de:f4:2f:bb:e0:95:58:cc:84:49:
1d:1a:1b:35:a0:ef:a9:a3:87:b3:93:f5:fa:01:18:ff:82:5e:
94:f6:df:a0:81:30:3b:51:2d:d4:3f:49:83:6a:97:83:da:59:
13:33:de:91:10:71:5c:db:40:22:21:e1:4f:3e:5d:4f:3f:0f:
96:e4:d2:d4:16:9e:88:2f:c7:46:62:b6:fb:b3:9a:33:56:9d:
f3:2e:40:86:b3:3f:9f:ce:6b:0d:de:fe:e7:27:ad:a7:4a:f3:
2f:b7:b1:e0:db:93:5c:99:6e:0e:36:48:d0:72:d0:cb:48:2a:
2b:7a:cf:f9:00:ef:5d:bb:b7:5b:c3:a7:4d:dc:62:5d:1f:5a:
75:d4:93:74:0e:a7:34:21:f2:a8:9b:d5:b3:b4:59:c8:4f:03:
13:ff:5b:c9:5c:94:30:14:35:ab:89:eb:fb:bd:12:74:ea:b4:
da:12:14:cf:5f:d4:c3:5a:4a:86:57:15:b2:34:1a:9d:0a:7f:
20:f1:b3:cd:e3:cc:ff:6e:c5:89:2f:7e:fa:86:4f:39:c5:32:
90:3d:c1:de:1b:a6:8e:35:3d:ef:54:fc:fe:5f:05:0f:dc:02:
9d:d3:19:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:07:05 2025 by rpki-client