Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
File: RDSBQfxG3AGHCHy8hlVumkSe4ec.mft (raw, json)
Hash identifier: bl4bsr+enfL0iyo8T/eC+VSAYKOvpArFOPGsQVZIY+E=
Subject key identifier: 46:89:6E:54:FE:5B:F3:DA:C2:30:2A:84:B7:75:6B:11:65:5D:D2:66
Authority key identifier: 44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
Certificate issuer: /CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Certificate serial: 0197B6327D61813C4F49C37A2B840670FFC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:00:51 +0000
Manifest this update: Sat 28 Jun 2025 11:00:51 +0000
Manifest next update: Sun 29 Jun 2025 11:00:51 +0000
Files and hashes: 1: HUIjR9WK2Lr5ogt7lVoiyA1Q06s.roa (hash: PMZpn3mSe7dzqUCZsgF/pY1r/L52E+g3ibBHFvHVhL0=)
2: RDSBQfxG3AGHCHy8hlVumkSe4ec.crl (hash: p9eKpU9ZVTGfnZ75KJCLZgagl6l5PtvrCsH1rCp+k60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:7d:61:81:3c:4f:49:c3:7a:2b:84:06:70:ff:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44348141fc46dc0187087cbc86556e9a449ee1e7
Validity
Not Before: Jun 28 11:00:51 2025 GMT
Not After : Jun 29 11:00:51 2025 GMT
Subject: CN=46896e54fe5bf3dac2302a84b7756b11655dd266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9e:34:f7:49:f0:25:b3:6d:8f:bd:0a:ed:83:
b2:92:9e:c2:95:03:28:34:7f:a1:6b:5b:70:d9:83:
71:74:78:9f:ef:91:85:3d:49:3c:89:d0:29:70:9f:
47:0d:d3:f5:bd:73:36:fa:59:11:81:38:ff:0e:42:
47:c9:40:e8:0f:60:71:18:33:ac:96:82:0a:c2:74:
16:fb:a2:87:de:96:70:d1:cc:36:7d:58:ed:ce:f7:
1a:d6:48:a7:92:0f:86:e7:e6:bb:cb:db:bd:28:18:
25:d4:1b:a4:97:63:37:15:7a:0e:0e:61:16:a0:80:
f4:bd:63:ba:82:92:3f:92:88:4a:6e:10:65:4f:a9:
35:55:e6:19:71:13:21:ad:75:14:cc:1c:5e:a5:ba:
ad:46:f7:67:9e:a9:c3:ba:b2:51:a9:3b:cc:df:4d:
85:65:84:42:c5:a4:71:a9:4f:86:02:5f:e8:75:70:
92:2a:ce:be:56:28:b7:6c:a0:f0:98:d6:d4:d4:91:
82:66:11:a9:f7:00:92:1c:a5:79:78:41:33:1d:c9:
8c:54:fd:1b:9f:b4:e4:84:d5:0a:82:b0:a8:1d:48:
b7:54:0d:8b:86:c0:0f:8e:ba:68:ea:fb:7f:29:8d:
1c:b2:80:1b:7e:84:7e:e2:8e:0f:b4:5b:f8:04:df:
f0:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:89:6E:54:FE:5B:F3:DA:C2:30:2A:84:B7:75:6B:11:65:5D:D2:66
X509v3 Authority Key Identifier:
keyid:44:34:81:41:FC:46:DC:01:87:08:7C:BC:86:55:6E:9A:44:9E:E1:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RDSBQfxG3AGHCHy8hlVumkSe4ec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/22fa42-b02f-4311-90fb-45a112a1e7ac/1/RDSBQfxG3AGHCHy8hlVumkSe4ec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:be:cc:d3:bf:6a:3b:7f:18:d5:1f:f9:5c:92:8b:3d:69:11:
eb:ab:b5:5d:a5:5e:3e:c3:3e:d3:1a:32:c0:c7:0c:90:a6:59:
b0:96:e2:4f:8b:73:fc:eb:c6:47:71:4a:5b:0d:91:22:27:d7:
e5:49:28:b4:d5:19:18:ba:c9:2f:ea:d6:62:97:de:84:27:7c:
7c:f2:0b:f1:c0:69:10:94:b3:04:f2:68:4a:50:25:08:ae:6d:
20:f0:30:5f:f4:fd:c3:02:8b:3b:62:e8:7f:80:c5:63:43:67:
bf:84:51:5e:47:39:4d:2c:91:b4:19:42:42:d7:a1:e7:ad:50:
f1:32:7c:37:b2:3c:9e:cb:0a:73:23:dc:84:ac:1f:a9:7c:88:
2d:04:07:2a:31:98:0e:6f:7f:38:c3:c8:9c:8e:54:6c:a5:09:
69:95:5d:eb:4d:11:89:71:29:e1:fd:1c:d3:ce:a9:d0:f0:fd:
7c:de:ad:8c:2e:42:89:d4:1c:93:0c:02:a8:b6:34:5a:47:c4:
06:bb:32:d4:99:73:bc:0d:b7:e9:9a:93:6c:1d:ce:8d:95:68:
c6:6b:47:24:7d:ae:54:db:95:21:37:3d:7b:ab:fb:34:87:94:
7a:9d:14:c1:de:60:b8:f8:10:73:03:4c:c0:b9:ae:bf:4d:ec:
dc:d0:61:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:47:43 2025 by rpki-client