Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
File: FfiJ_tAIX8IbCPy7slLDEG35mqg.mft (raw, json)
Hash identifier: +5Jh3ldZ6vnl2jLX6NL7dRlxivfjbH2SV95BKfsfqUM=
Subject key identifier: 2B:3E:67:FD:1A:AF:AC:1B:6D:01:5A:87:CB:6F:9B:43:52:86:24:F5
Authority key identifier: 15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
Certificate issuer: /CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Certificate serial: 0197B70E604141119EFEE862F0A41A2D7815
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:02 +0000
Manifest this update: Sat 28 Jun 2025 15:01:02 +0000
Manifest next update: Sun 29 Jun 2025 15:01:02 +0000
Files and hashes: 1: 88FJYTd8b-KHdvH7x_K99lUYWdQ.roa (hash: ghtnktZiVNaMUpHUfiZ1KkJiqbduMhbZsfbCJ/7Zf6E=)
2: FfiJ_tAIX8IbCPy7slLDEG35mqg.crl (hash: Sq59H6j92+hwr0IY+PwYdUjjJag33QT9AKF8LF60huU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:60:41:41:11:9e:fe:e8:62:f0:a4:1a:2d:78:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f889fed0085fc21b08fcbbb252c3106df99aa8
Validity
Not Before: Jun 28 15:01:02 2025 GMT
Not After : Jun 29 15:01:02 2025 GMT
Subject: CN=2b3e67fd1aafac1b6d015a87cb6f9b43528624f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:61:06:1f:8f:45:32:61:68:41:69:c6:f0:78:
b9:f8:4b:8b:88:37:03:a3:16:0b:0d:ab:f5:75:bf:
a5:43:07:e6:f6:74:5e:07:77:6c:dd:20:26:bf:6e:
5c:19:9d:75:28:ab:d3:a3:8d:e5:c8:02:61:cb:c8:
f6:4b:16:03:4d:0a:df:b0:dd:3c:93:11:84:e1:2c:
79:2a:48:05:59:01:cc:25:f7:db:54:10:de:6b:e1:
2e:dd:44:78:48:29:82:eb:0a:33:3e:54:69:a5:02:
04:e3:b0:55:99:65:81:7b:4c:93:39:2d:f3:11:85:
1e:9e:3f:8c:7a:09:b7:62:31:b1:83:c4:da:76:8f:
b9:af:38:51:cd:dd:6a:dc:f0:af:e2:ad:8f:7a:29:
2b:0c:a5:f4:dd:fd:42:78:1d:28:c6:71:41:b6:42:
97:72:5f:77:fc:1d:6d:96:d8:5f:84:4a:cb:27:9b:
47:f9:f8:16:4a:99:f3:20:12:f5:19:5e:7f:cf:84:
41:e1:d8:03:dd:6e:71:73:54:26:4b:af:05:ca:b7:
39:3a:5b:31:2a:d0:66:77:7e:b7:a9:45:0a:c9:14:
c2:7b:3b:cc:bf:73:b0:ad:1b:fa:65:d0:8b:a9:d9:
af:c4:27:50:3d:61:95:f1:e7:22:9c:cc:5e:74:aa:
0b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:3E:67:FD:1A:AF:AC:1B:6D:01:5A:87:CB:6F:9B:43:52:86:24:F5
X509v3 Authority Key Identifier:
keyid:15:F8:89:FE:D0:08:5F:C2:1B:08:FC:BB:B2:52:C3:10:6D:F9:9A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfiJ_tAIX8IbCPy7slLDEG35mqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/f952fb-9318-49b6-b946-1e3a195478e0/1/FfiJ_tAIX8IbCPy7slLDEG35mqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:b1:cc:47:16:3e:c8:96:b9:f7:78:55:cb:0d:c5:83:d0:fb:
a3:4d:07:e1:d7:86:e9:62:fa:ae:75:a4:83:2a:5a:f4:f4:c7:
b1:de:59:90:61:03:63:17:f9:ee:26:67:b3:1e:4e:ac:52:72:
b2:67:3e:f7:cb:5b:6f:58:ed:ff:4f:c9:38:68:fb:13:1e:64:
a7:a9:60:72:3f:f6:eb:5d:73:7c:d0:23:7b:49:a0:ed:0d:15:
44:06:3a:61:ba:11:7e:65:e8:ab:bd:f9:77:19:f4:2c:c0:df:
94:f8:79:80:d8:76:c7:b7:89:6b:91:33:d4:e0:88:06:2c:47:
f7:8e:23:e4:b1:54:9d:67:ef:ff:e3:86:a4:ff:31:c0:57:b9:
af:45:09:ea:55:43:7b:20:fc:a5:55:d0:6d:e9:c7:c7:67:01:
23:dd:fe:17:f8:e8:64:8a:80:9e:b8:38:19:3f:a1:b9:8a:f6:
0f:a0:70:ef:4f:60:14:37:d1:f2:67:09:3e:62:95:f7:0c:69:
00:70:da:aa:d1:78:e6:42:2a:56:6a:c6:70:c5:2e:03:21:a5:
0e:8e:b6:18:ae:0a:04:f2:e3:2d:59:6d:3f:8c:d2:e8:dc:82:
2f:e8:97:23:0f:ee:92:cf:ad:51:b2:1a:c7:c7:3f:6d:6f:35:
b8:a3:f9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:46 2025 by rpki-client