Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
File: Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft (raw, json)
Hash identifier: pWZbsG6U5+WNWsIir1QiPBX+28S4lFjldQf4TqMJTLY=
Subject key identifier: F9:DF:8E:73:0E:58:41:18:15:F5:A1:D4:6E:1D:61:E3:51:BF:BA:ED
Authority key identifier: 16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
Certificate issuer: /CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Certificate serial: 0197B74505190D37A5D9E768870F428724EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:00:42 +0000
Manifest this update: Sat 28 Jun 2025 16:00:42 +0000
Manifest next update: Sun 29 Jun 2025 16:00:42 +0000
Files and hashes: 1: 1-bqNZN34Z6tA08rjf9Ue9gz9z4M.roa (hash: ZBK1wDofmlTI3jgUly3vW6cc/crra2evnmHTHJR0jqI=)
2: Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl (hash: QDF+NwsNxQmBsTE4irb3wZNQL4LhvBaxQk32VN3tOCc=)
3: TVDjYzkETmBCT7v1_fe4s6H8gEU.roa (hash: zxaM+TU0HD4P7dxOW2gfkICzMAb8AYSlKoeUfD1Wv0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:05:19:0d:37:a5:d9:e7:68:87:0f:42:87:24:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16d96cf4109a4a85d1863bf54aa4fa3e81e0c0e6
Validity
Not Before: Jun 28 16:00:42 2025 GMT
Not After : Jun 29 16:00:42 2025 GMT
Subject: CN=f9df8e730e58411815f5a1d46e1d61e351bfbaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3d:6e:f6:64:7d:72:0a:5e:7d:3b:35:83:93:
e3:49:25:5f:95:cd:f9:1d:b3:d9:a5:5e:6e:1c:1d:
a2:7b:2e:64:aa:63:c1:d7:43:5e:12:34:1e:fc:17:
6c:31:c2:0f:db:1d:16:b0:f7:c4:ab:d1:d8:1f:cb:
5f:13:83:6c:1d:78:22:cb:b5:58:6d:82:21:0a:19:
29:9a:15:82:7e:fa:30:fb:5e:b9:ea:6d:77:4d:ed:
2f:7d:cc:46:28:23:0a:46:b7:08:55:e0:d1:4f:cb:
5e:0b:30:7d:3d:3e:20:d4:b9:73:3e:5e:cd:f8:0a:
c0:7c:09:84:d6:60:3a:64:17:9c:b1:71:e8:ff:55:
5f:82:9e:27:a3:78:41:15:57:a4:de:87:76:8f:ee:
ed:e9:98:7f:45:3f:df:90:d5:19:20:a7:bc:ed:64:
bc:74:ba:2b:a6:81:b3:95:ac:05:b3:ba:74:18:4e:
3a:31:f1:d9:4e:43:5c:0a:12:d6:62:8d:8b:9f:c3:
f0:90:b2:4e:44:b8:cb:6b:ad:aa:74:b3:a8:3f:e2:
c9:99:39:56:6d:45:2f:14:fc:f3:22:0d:e5:70:d8:
3f:d6:aa:b8:83:9b:2f:0c:6a:55:c2:d1:ca:07:eb:
44:12:e1:18:59:2d:cb:e9:69:95:cb:3b:00:f4:fe:
ec:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DF:8E:73:0E:58:41:18:15:F5:A1:D4:6E:1D:61:E3:51:BF:BA:ED
X509v3 Authority Key Identifier:
keyid:16:D9:6C:F4:10:9A:4A:85:D1:86:3B:F5:4A:A4:FA:3E:81:E0:C0:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ftls9BCaSoXRhjv1SqT6PoHgwOY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/136156-0753-4072-92b0-1407c08db582/1/Ftls9BCaSoXRhjv1SqT6PoHgwOY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:84:55:c0:72:f9:02:77:3f:39:9e:11:93:87:e2:b3:83:60:
3d:41:5d:d6:f7:b0:df:dc:36:2c:da:7b:10:5c:72:b3:b0:43:
b9:b6:5b:98:32:31:d2:e4:fb:a3:12:90:a9:2e:07:89:9f:00:
2c:06:58:bb:c1:d9:63:a4:2d:b5:4f:2c:5e:90:4b:51:17:1c:
82:db:1f:00:63:63:22:fa:5d:8d:50:ac:fd:90:f9:ee:0c:27:
24:68:54:60:ec:58:24:0e:4b:7a:34:73:5b:12:32:55:56:fa:
02:20:a3:25:61:1c:56:0e:5b:82:87:b8:12:9f:45:67:29:25:
1e:39:8d:84:d1:b7:54:fb:89:10:f6:42:9d:3d:d5:28:c5:af:
01:84:b2:e3:b1:0d:d9:b6:f3:54:96:d8:a7:54:9e:74:9d:f8:
62:79:55:c9:84:e7:16:e4:fe:a1:09:02:66:6a:2d:f9:f1:40:
df:8e:e9:9d:0b:98:72:6f:07:2f:7c:bc:7c:64:4e:39:27:64:
5d:72:03:f5:2d:6c:60:93:86:6e:8d:fd:48:2c:76:2a:ae:63:
d1:5e:14:95:c7:de:48:74:ff:9d:10:f2:5c:6e:4c:9c:c8:a7:
71:a8:de:95:e3:03:64:66:34:11:ff:d6:98:53:61:4d:eb:94:
cf:cc:f6:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:23 2025 by rpki-client