Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: XpfJldqEf1f9NcZZRO3u4KkfWoFcVCeI3rI8C7j5Wos=
Subject key identifier: 6B:2C:F8:C0:06:CB:F3:D4:73:B2:43:82:FF:F9:CE:4D:62:93:19:24
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 0197CCBA8ADF00BBEB6E05FFC7589D9547F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 15C1
Signing time: Wed 02 Jul 2025 20:01:06 +0000
Manifest this update: Wed 02 Jul 2025 20:01:06 +0000
Manifest next update: Thu 03 Jul 2025 20:01:06 +0000
Files and hashes: 1: W6ZuDAGnWoDaEzlWI7u6oQknSmA.roa (hash: OmbyY76V+595ZQjAafvVZcWcNGfzKgZ8Ut3VoJKhN9E=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: ujj4HOAxrtxi3MbPhoOxdK7iFnJ7jh1/xFvE+WyNFBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:ba:8a:df:00:bb:eb:6e:05:ff:c7:58:9d:95:47:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: Jul 2 20:01:06 2025 GMT
Not After : Jul 3 20:01:06 2025 GMT
Subject: CN=6b2cf8c006cbf3d473b24382fff9ce4d62931924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:61:c3:32:d9:5a:54:ee:fc:9e:65:27:de:0d:
17:a8:61:a9:ab:a0:bb:b8:98:6b:56:38:83:3f:a4:
6b:c6:e7:24:53:6d:5c:99:74:3a:22:4d:79:1e:32:
d5:2c:50:4c:ca:4e:56:c0:72:f0:a4:70:96:f7:f8:
54:ec:32:32:8b:42:97:29:e9:2a:15:57:12:91:27:
91:1a:36:18:2a:6d:f1:d2:01:76:e9:31:06:16:b5:
f5:f1:91:84:f4:7c:d4:ac:8a:1a:22:a8:fc:35:56:
a9:81:6b:c1:e9:e4:e4:70:02:0b:3b:bf:56:d1:2a:
f6:d4:50:83:42:45:50:43:c8:b0:44:0a:8c:aa:b6:
f8:93:94:e0:9f:78:26:ae:67:e5:ac:21:9a:41:66:
56:39:2f:9c:81:5a:e8:c8:fc:1b:ca:61:76:69:79:
98:fb:8d:20:4c:62:41:1d:3b:93:4b:e1:96:96:ff:
6f:91:d8:8c:20:f5:6d:fb:91:ca:14:07:c0:40:44:
1f:53:dd:84:bf:7e:17:3f:3a:bc:d8:25:fa:65:be:
d6:88:f4:29:95:7a:8a:73:8c:02:be:3b:69:61:b2:
a2:cc:57:81:5c:61:06:25:d3:16:3f:64:7c:1b:3c:
64:2b:ff:db:4a:cf:d4:b1:d9:9d:c5:24:bc:92:04:
6b:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:2C:F8:C0:06:CB:F3:D4:73:B2:43:82:FF:F9:CE:4D:62:93:19:24
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:ef:2a:cf:01:9e:e5:73:51:e8:0b:dc:53:42:5e:00:db:7d:
0d:4e:98:75:01:82:c8:f2:72:6f:18:ed:1f:c9:5b:72:87:f1:
5b:41:5d:a8:21:16:08:4f:1e:06:4a:29:f6:e8:a3:74:62:4b:
93:33:7b:a5:c8:04:a8:11:72:30:cc:cd:07:3e:1a:33:95:7f:
62:73:93:a9:6a:4d:0b:96:d3:a7:28:3b:ff:f2:46:33:9c:21:
bb:c9:9b:d9:aa:6e:6a:8f:d9:1a:f4:76:2d:df:6f:b8:39:f2:
2e:46:50:1e:f1:ee:e6:57:76:2c:ba:df:c6:a9:7b:3e:9c:ae:
fe:5c:66:43:9f:1c:99:04:4f:42:5f:31:07:4a:64:26:fb:62:
b7:a0:e4:53:5c:8b:1c:d6:dd:88:5e:68:7a:a7:c5:b1:3e:14:
c1:7c:61:b4:15:37:61:69:ba:9a:04:b9:20:79:ff:6e:2e:86:
7b:68:41:b7:f1:1a:04:14:e4:a1:22:b2:41:e2:e6:e7:1f:11:
45:a4:60:7f:39:30:a3:ce:ae:10:bf:d0:06:b1:23:7c:2b:2e:
9e:4f:24:b6:69:06:9d:6c:82:3c:e7:27:13:82:fb:66:69:39:
31:90:fb:20:54:4b:86:d0:6e:2e:2e:6e:b9:69:b5:a0:19:81:
d3:9c:59:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 06:28:37 2025 by rpki-client