Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
File: 1_fxawWhEjFRpnekesLY2QYd85A.mft (raw, json)
Hash identifier: CUYQguz2qQt6b9uXjWjGHBQSKgib2vE23jyFmBMGhFI=
Subject key identifier: DD:4F:18:07:36:8B:6E:B8:5B:E5:97:9A:4B:80:98:E2:A8:B0:C6:25
Authority key identifier: D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
Certificate issuer: /CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Certificate serial: 0197B77C036153FBA109142F9F00F8793F31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: 1_fxawWhEjFRpnekesLY2QYd85A.crl (hash: NARtvZFxc+YR06dqlPq1Glk5cw8p1edIGwBoO4xzZ6w=)
2: Om_TmuMO8XG3pBM8gxAFde2dWMw.roa (hash: FbjCGDaIAC98JtiXhpiG2iZAAlR6dEBdv+iVw78RCUo=)
3: VZwnOlrac1s2Zb9Y96cCEjN1ihI.roa (hash: VbMoQoBhuySW3f8b4z7vMMYAoL+G6xfxVZmjVv4iceM=)
4: pY1evXi7L-RhS1kANnlGqZjoa4g.roa (hash: MHMoXswoxGYwux8eQ8dSbb24gK19/XF6bugh3G8kZT0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:03:61:53:fb:a1:09:14:2f:9f:00:f8:79:3f:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7f7f16b05a1123151a677a47ac2d8d9061df390
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=dd4f1807368b6eb85be5979a4b8098e2a8b0c625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:18:9b:a8:69:68:a1:fc:96:84:a4:e4:68:03:
6c:c8:dd:3c:55:de:62:95:4a:a5:6e:78:93:7f:8b:
50:31:c6:e3:aa:7e:af:d5:d3:8f:6a:30:ea:31:29:
fd:ff:cb:c9:68:29:0a:8e:a3:4b:5d:b6:aa:e5:0e:
5d:07:f5:16:18:1f:e8:46:a2:c6:3a:b3:9d:6e:6d:
46:63:5a:d8:05:33:5a:03:5d:be:88:82:b2:82:3a:
34:61:6c:d4:96:e6:59:67:07:3a:aa:bc:79:a8:8c:
e1:4b:42:6a:18:e4:f7:12:6a:27:27:e7:54:dd:22:
46:de:89:c9:bc:90:a3:53:3e:8d:dc:b7:58:b4:0a:
fd:83:c7:03:8c:99:1e:b3:1a:44:85:7c:fa:44:8e:
19:ad:27:50:02:3a:ee:9f:b3:b5:70:c9:a8:7e:0f:
40:d2:82:bb:12:29:61:3a:3e:c3:34:de:a7:cc:b8:
e3:71:5a:32:66:ec:e2:29:45:be:71:f5:ab:62:14:
92:77:ec:dd:99:47:cc:81:d4:92:e6:87:f1:8f:9e:
38:9f:b8:5c:39:8b:38:02:24:06:83:38:ee:56:5f:
aa:b7:42:70:91:d5:a0:39:07:3a:2b:6b:e0:f6:9c:
7b:d9:8a:78:1f:68:b0:af:bc:c1:91:e2:73:c3:ee:
87:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4F:18:07:36:8B:6E:B8:5B:E5:97:9A:4B:80:98:E2:A8:B0:C6:25
X509v3 Authority Key Identifier:
keyid:D7:F7:F1:6B:05:A1:12:31:51:A6:77:A4:7A:C2:D8:D9:06:1D:F3:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1_fxawWhEjFRpnekesLY2QYd85A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0227b7-54ca-4f56-be26-6cbe949532e4/1/1_fxawWhEjFRpnekesLY2QYd85A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:8a:5e:0a:2c:18:29:70:31:85:90:67:fb:67:1f:f2:61:90:
4f:ed:86:58:03:43:f4:a0:42:06:47:6a:aa:05:4c:2f:b6:e1:
3b:27:6a:54:ec:94:e2:37:ea:a2:ec:af:58:f4:0a:b6:48:c5:
91:c6:53:73:91:fa:c1:9d:30:cd:01:2b:2f:fd:f9:89:82:d8:
b6:45:a5:bd:b5:1c:d0:63:26:64:10:24:7d:74:f8:7a:5f:3b:
92:2b:13:83:d0:63:0e:24:ed:07:46:e9:6e:5d:f3:38:81:be:
ce:76:2a:2e:9f:f2:96:e7:e9:11:50:4c:ed:97:ac:e0:dd:4a:
23:9b:39:f1:a2:3a:94:6d:2b:f9:67:49:1c:08:dc:43:e4:ec:
16:00:8d:f9:bb:b6:4d:e5:63:b4:62:8f:63:cf:d6:3c:65:16:
5b:99:81:45:5f:10:ba:03:96:49:f0:a3:6c:a0:5e:15:df:e7:
e6:a5:1b:60:3d:55:64:36:24:23:93:18:68:08:c6:05:8b:13:
4e:3d:a9:fc:05:e8:bf:7b:42:55:00:0c:57:89:05:6d:30:82:
e1:fe:ca:b4:45:35:de:9b:a4:69:d7:29:0d:8d:32:20:87:6a:
ef:3c:c0:ee:ff:53:34:2f:cd:e5:46:b1:23:e3:08:bf:c5:fe:
de:d4:18:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:28:56 2025 by rpki-client