Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
File: F88SpliemYyb7BOa-PznCsR1rXI.mft (raw, json)
Hash identifier: exlMJS5Dz50f8CsLxStrHlIl7YVYOHBI9cO4PHPxBeE=
Subject key identifier: E2:46:FC:DD:E3:C4:D3:96:D9:E9:7A:37:C9:27:46:E1:3A:75:C3:19
Authority key identifier: 17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
Certificate issuer: /CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Certificate serial: 0197B745AF97FE1C5C6DE2DD9685553C80EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 16:01:26 +0000
Manifest this update: Sat 28 Jun 2025 16:01:26 +0000
Manifest next update: Sun 29 Jun 2025 16:01:26 +0000
Files and hashes: 1: F88SpliemYyb7BOa-PznCsR1rXI.crl (hash: 3FEz2Y1MR6GBzR/hEtPQOLNYtBZKaKKY4ESMUNeDn7w=)
2: dAIhcdZ8fwYvVo-M_emgqHoK7ZU.roa (hash: SjeXAqHoVFgHw2EHHXptMICe3kneOtC1TL1zW8otQdA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:af:97:fe:1c:5c:6d:e2:dd:96:85:55:3c:80:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17cf12a6589e998c9bec139af8fce70ac475ad72
Validity
Not Before: Jun 28 16:01:26 2025 GMT
Not After : Jun 29 16:01:26 2025 GMT
Subject: CN=e246fcdde3c4d396d9e97a37c92746e13a75c319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1a:bf:1c:61:a2:f2:a8:2e:23:0e:c1:42:9a:
a5:3a:ff:10:00:ad:cf:af:0f:85:1e:08:cf:64:a8:
38:34:da:2b:59:79:d8:41:56:c4:3b:e5:74:2d:f5:
bc:8b:3c:56:be:ff:20:19:af:b2:f0:64:48:50:75:
b2:75:4f:be:65:ca:cf:79:d7:e4:9b:3b:0b:ad:46:
c8:bf:7a:67:71:31:2e:3b:1f:ef:d4:c5:c1:e6:24:
40:92:97:5d:69:d9:15:9f:de:21:47:7f:a9:31:a9:
46:0f:4a:d7:f5:f6:2a:73:d4:5e:ea:4c:0e:df:18:
44:e1:76:89:6d:6b:13:d3:d3:74:ca:db:67:67:e5:
b6:37:ab:28:4a:89:4d:51:fc:f3:58:63:e5:40:0a:
eb:1b:50:06:01:40:43:1c:0d:b0:13:1d:91:67:4f:
d2:a7:64:3a:3b:80:12:8a:48:ce:e2:2a:2b:82:88:
96:ef:d2:07:3d:55:d8:8e:40:5b:b0:39:d4:13:56:
02:48:e2:ce:f9:18:3b:f8:e7:ae:89:35:86:7d:22:
b9:f1:93:23:2e:53:36:d5:95:e5:69:fc:e1:9f:1f:
ab:b9:fd:0c:48:b9:60:1c:16:b1:49:ca:1c:73:cd:
b9:57:ab:23:39:65:e3:b3:21:a0:68:2d:1b:1f:58:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:46:FC:DD:E3:C4:D3:96:D9:E9:7A:37:C9:27:46:E1:3A:75:C3:19
X509v3 Authority Key Identifier:
keyid:17:CF:12:A6:58:9E:99:8C:9B:EC:13:9A:F8:FC:E7:0A:C4:75:AD:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F88SpliemYyb7BOa-PznCsR1rXI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/9bdf34-729d-4be0-b15f-5de0871182ba/1/F88SpliemYyb7BOa-PznCsR1rXI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f1:72:89:89:f8:6c:a1:1d:a8:74:47:3c:0b:e0:bf:16:f6:
77:e2:67:3a:e7:8b:3f:bc:5b:e0:87:e1:e1:38:72:17:39:6f:
d3:2d:83:b1:ae:31:c0:62:ce:24:8b:c2:04:88:54:31:5d:15:
5a:c5:d6:0a:2b:85:ed:f5:05:84:7e:13:45:1b:fb:dd:42:59:
15:6b:eb:73:39:63:ae:c9:04:fc:b0:90:73:ab:a4:15:d1:2e:
36:01:e4:e2:a1:9a:b8:b0:8f:a7:95:77:90:66:83:d8:15:53:
5f:60:0b:fe:f9:b7:aa:55:80:f6:e3:29:94:6e:81:31:46:e7:
ed:e0:42:2c:d3:8c:af:d5:9d:d0:c3:d0:1b:6c:22:4f:8d:2c:
c2:0b:4d:a2:20:2b:d0:0d:1f:19:b8:3e:3b:3d:c4:b6:7f:6c:
b2:3b:62:cc:d4:57:bf:67:db:de:22:08:49:61:ea:b0:16:36:
60:0e:40:d7:b4:c9:a0:2e:4a:95:59:fe:13:06:93:21:c8:38:
0f:0e:47:59:02:25:16:c0:51:ee:6c:a4:3f:74:9d:de:ae:e5:
cd:c2:ff:0d:9e:1c:70:89:62:b4:5f:d7:29:ef:aa:c6:44:d0:
80:9e:32:6f:0b:fd:3f:40:f6:8c:0d:a3:a5:0b:43:fa:92:2f:
9b:40:3b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:22 2025 by rpki-client