Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
File: _cv3oqQ7GA1yKzdjHoea-huaXts.mft (raw, json)
Hash identifier: eWGISeHi+I5WvDGMJwGq4osuEfKbstD77eQyeejIPUQ=
Subject key identifier: 52:19:A1:AA:E8:3B:98:D9:36:18:F3:FC:CC:7D:E9:14:91:2F:93:82
Authority key identifier: FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
Certificate issuer: /CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Certificate serial: 0197B77CAA68D19A4C2C03C8B0680C7ACAFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 17:01:29 +0000
Manifest this update: Sat 28 Jun 2025 17:01:29 +0000
Manifest next update: Sun 29 Jun 2025 17:01:29 +0000
Files and hashes: 1: _cv3oqQ7GA1yKzdjHoea-huaXts.crl (hash: n8LZBbHWWjef/EgWiBGEpkfOTNzMkFGl9imdohbWzG8=)
2: t-4cbJi-Ew3u3ipzgXiueic4IR4.roa (hash: bVpOfO45u9FlgP+T8GAth2ynXzQ4yeosDEHag/U9nSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:aa:68:d1:9a:4c:2c:03:c8:b0:68:0c:7a:ca:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdcbf7a2a43b180d722b37631e879afa1b9a5edb
Validity
Not Before: Jun 28 17:01:29 2025 GMT
Not After : Jun 29 17:01:29 2025 GMT
Subject: CN=5219a1aae83b98d93618f3fccc7de914912f9382
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a6:13:23:46:a3:f6:f9:66:61:2d:75:14:6e:
6d:ac:08:a4:43:51:f7:40:2d:27:68:e1:5c:65:34:
7c:8a:b2:4b:74:e2:82:1d:e7:49:f8:63:cc:a5:e7:
4c:14:f9:47:d1:87:c5:be:4d:ef:ca:a2:ed:f2:ce:
42:05:26:c0:cb:ea:ee:fa:d3:39:9c:59:0b:c4:f6:
7d:01:99:f5:1a:36:9e:1a:42:45:e2:eb:84:51:fb:
a8:42:92:d2:fc:52:08:c6:b7:13:c9:38:4d:90:02:
c0:8d:5f:82:dd:f5:34:45:64:43:17:db:1d:c1:65:
eb:a6:6a:79:3b:c9:ec:7e:04:9f:29:ef:51:20:7f:
4e:66:74:96:09:e7:0f:dd:86:f6:f3:0f:74:52:ac:
bc:7e:21:33:20:fc:c1:73:65:34:8c:bb:2c:e3:c2:
7e:3b:a2:8f:f4:15:3e:ae:77:dc:eb:ab:45:b2:8d:
0c:83:38:4f:61:3e:75:ab:98:18:ae:c7:d4:80:ba:
7d:10:7e:17:bc:3c:69:ed:db:ee:06:61:6b:c5:b0:
55:01:71:54:10:bc:a6:7b:be:3d:9b:a1:a9:56:b3:
1a:72:dd:1e:41:3c:d5:ea:46:b8:b5:bd:31:ab:a2:
a1:0f:2a:90:57:7b:e9:f4:ee:20:ae:b9:a3:25:c9:
40:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:19:A1:AA:E8:3B:98:D9:36:18:F3:FC:CC:7D:E9:14:91:2F:93:82
X509v3 Authority Key Identifier:
keyid:FD:CB:F7:A2:A4:3B:18:0D:72:2B:37:63:1E:87:9A:FA:1B:9A:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cv3oqQ7GA1yKzdjHoea-huaXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f9a93c-0d69-44ec-8445-f58a5b88c73e/1/_cv3oqQ7GA1yKzdjHoea-huaXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:03:60:34:6f:a2:15:eb:13:59:39:5d:ec:4b:24:a2:46:a1:
e6:5c:80:68:ac:9e:19:65:2c:b5:07:7f:3e:f0:97:33:bd:92:
98:12:84:49:72:37:f6:e9:6b:64:28:c7:e5:e3:a6:29:9d:82:
9f:5d:0f:71:87:2c:ed:83:0c:e6:f4:89:bf:a9:c9:b8:92:50:
11:7e:f0:62:0b:e6:33:62:34:ff:61:42:55:e8:f3:8c:c6:be:
35:4b:6c:c6:f8:20:d1:46:81:fc:7c:f5:80:e8:d6:17:5f:95:
e9:c5:71:56:1d:57:ba:14:05:f2:e2:7a:9d:3d:50:be:80:60:
6b:5b:91:b6:14:05:41:bc:cf:e1:9c:dc:41:9c:e8:1f:21:c1:
eb:40:d2:04:e5:21:9c:f3:87:14:7e:58:8a:b1:ae:74:3d:d7:
2d:bc:70:7c:37:45:e9:32:38:dc:65:be:cf:7a:36:ca:5b:bb:
11:1b:7b:2c:a9:e8:3c:4b:39:cd:a8:80:bf:9b:a9:33:a1:ae:
86:a4:8d:cb:f0:92:7b:b7:8e:24:78:c9:bb:66:93:51:f7:bf:
ea:24:12:a5:16:5d:4e:82:f5:52:7b:8a:55:f0:af:ac:5a:db:
41:0a:03:88:85:d2:17:4e:1a:6b:40:e3:b1:9e:c0:ac:ad:0b:
57:f9:17:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:09:36 2025 by rpki-client