Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: LlM7ywpwdw+cDyhlUtwUmimegfkjcJqQDhB62pFHUQY=
Subject key identifier: 6D:87:5B:23:96:79:09:43:51:0A:37:52:7D:AA:E9:A0:1B:3B:F8:CF
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 0197B6A14DD890263EBF612CAC1FFFE97A79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:53 +0000
Manifest this update: Sat 28 Jun 2025 13:01:53 +0000
Manifest next update: Sun 29 Jun 2025 13:01:53 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: HRiD+9fn1rozQ7pSi+FDr0qwGZNHJBomtCRcoVnn/LY=)
2: H3v3Ir1uutigtDSCgvKQTveRQl0.roa (hash: 4A8WQpggwPpKrs7preaxNPkzpvVHS+MZyP8Wyyn6QVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:4d:d8:90:26:3e:bf:61:2c:ac:1f:ff:e9:7a:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Jun 28 13:01:53 2025 GMT
Not After : Jun 29 13:01:53 2025 GMT
Subject: CN=6d875b2396790943510a37527daae9a01b3bf8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c7:20:d1:51:a5:0d:fa:db:7e:aa:bf:86:01:
b3:89:89:76:fa:97:45:87:18:ad:bc:6d:a6:3d:e6:
fb:e4:c4:a6:46:18:6f:4c:40:04:bd:e5:9e:73:d9:
6c:cc:c2:ae:dc:9c:f0:73:1b:b2:a1:7b:cb:d8:39:
c9:de:04:4b:6a:c5:80:e5:33:d6:23:38:0f:43:f7:
b8:8e:f1:04:1c:ef:a1:3b:23:28:cf:27:26:dc:4d:
b1:92:d4:2f:f3:d0:95:25:5f:a8:5d:02:65:de:db:
ba:b4:59:7f:f3:c7:8f:fb:4c:0f:57:81:9e:16:24:
1b:8a:27:40:84:28:52:84:22:8e:c4:9b:02:16:f9:
eb:b2:54:da:92:ce:51:6a:db:c6:b7:f8:e3:ef:5a:
2c:c6:0f:74:3c:3d:24:ab:0f:7f:e6:93:51:7c:53:
64:14:1e:7a:57:d3:ae:03:52:04:4f:63:cc:0c:46:
e6:28:e0:69:d2:a2:85:48:7b:3a:91:e9:53:6a:a9:
c2:83:85:ee:ed:91:d0:38:7e:e1:b3:6f:19:49:b0:
21:44:b2:cc:05:db:5a:b3:3c:62:fb:4b:3f:fd:8b:
5b:7b:32:83:b5:1c:1a:b8:b7:35:b4:d9:ac:c1:15:
f1:6b:ef:9d:fc:92:50:ed:37:6c:f8:55:fc:f4:2f:
7f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:87:5B:23:96:79:09:43:51:0A:37:52:7D:AA:E9:A0:1B:3B:F8:CF
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:86:2a:6f:fd:5f:fd:9c:76:a7:ab:e5:99:d8:4d:e9:10:ad:
e4:38:73:b2:fd:0a:2b:66:7b:ca:c4:f4:0c:25:55:b0:08:c5:
af:72:3a:f9:c7:26:43:e9:eb:5c:e8:ca:f2:fe:ff:6e:4d:56:
7c:67:b2:23:d3:f5:bb:81:b3:51:fd:2d:6e:d2:12:e8:c3:56:
75:61:57:69:9a:bd:10:9a:9f:1b:13:3e:ea:c8:98:9a:75:0c:
63:5b:1c:12:62:dd:70:a2:11:09:15:50:a6:ff:80:97:b5:11:
ea:52:5a:81:d9:82:cd:7b:25:df:4f:b8:5d:fc:d7:bf:8b:1e:
0e:f0:50:a8:d2:18:51:6e:8c:dd:23:e4:07:3e:36:96:e6:62:
4c:d0:a5:a2:0f:a5:92:09:c2:f5:32:eb:30:84:64:09:33:a8:
30:84:1f:0f:22:e8:14:6f:60:18:48:d9:ee:ad:1e:f6:da:92:
90:d8:62:05:e0:61:a7:26:32:49:d2:02:42:60:85:4c:4e:98:
9c:c4:b3:a4:5c:dd:e4:45:0f:4a:c0:7b:f6:a4:f7:74:f2:79:
49:c1:ed:e4:50:5d:06:b2:ec:3a:0a:33:d9:fb:a9:94:f8:7d:
66:47:38:31:63:78:f7:22:c2:cb:30:80:92:99:87:3e:c2:a7:
a1:91:af:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oU3YkCY+v2EsrB//6Xp5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1MmZlZGIwMjVhNmNiZDI0ODY4NDE5YTBjYjU2MjlkNDg2
MzU5MTcwHhcNMjUwNjI4MTMwMTUzWhcNMjUwNjI5MTMwMTUzWjAzMTEwLwYDVQQD
Eyg2ZDg3NWIyMzk2NzkwOTQzNTEwYTM3NTI3ZGFhZTlhMDFiM2JmOGNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlccg0VGlDfrbfqq/hgGziYl2+pdF
hxitvG2mPeb75MSmRhhvTEAEveWec9lszMKu3JzwcxuyoXvL2DnJ3gRLasWA5TPW
IzgPQ/e4jvEEHO+hOyMozycm3E2xktQv89CVJV+oXQJl3tu6tFl/88eP+0wPV4Ge
FiQbiidAhChShCKOxJsCFvnrslTaks5RatvGt/jj71osxg90PD0kqw9/5pNRfFNk
FB56V9OuA1IET2PMDEbmKOBp0qKFSHs6kelTaqnCg4Xu7ZHQOH7hs28ZSbAhRLLM
Bdtaszxi+0s//YtbezKDtRwauLc1tNmswRXxa++d/JJQ7Tds+FX89C9/4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2HWyOWeQlDUQo3Un2q6aAbO/jPMB8GA1UdIwQY
MBaAFBUv7bAlpsvSSGhBmgy1Yp1IY1kXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9hNTliNmQtMDIzOS00MjExLTliYmIt
MWEyMTIxOWU5MTAwLzEvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9hNTliNmQtMDIzOS00MjExLTliYmItMWEyMTIxOWU5MTAw
LzEvRlNfdHNDV215OUpJYUVHYURMVmluVWhqV1JjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc4Yqb/1f
/Zx2p6vlmdhN6RCt5Dhzsv0KK2Z7ysT0DCVVsAjFr3I6+ccmQ+nrXOjK8v7/bk1W
fGeyI9P1u4GzUf0tbtIS6MNWdWFXaZq9EJqfGxM+6siYmnUMY1scEmLdcKIRCRVQ
pv+Al7UR6lJagdmCzXsl30+4XfzXv4seDvBQqNIYUW6M3SPkBz42luZiTNClog+l
kgnC9TLrMIRkCTOoMIQfDyLoFG9gGEjZ7q0e9tqSkNhiBeBhpyYySdICQmCFTE6Y
nMSzpFzd5EUPSsB79qT3dPJ5ScHt5FBdBrLsOgoz2fuplPh9Zkc4MWN49yLCyzCA
kpmHPsKnoZGvVw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:52 2025 by rpki-client