Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
File: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft (raw, json)
Hash identifier: O4YlqZqc87Wn6iQFXIROlM8R1El6IpbZhOuIr2Atzwo=
Subject key identifier: FC:B4:47:3C:2C:25:3D:B6:5B:B4:31:62:EF:19:FB:CC:27:FA:E1:AF
Authority key identifier: 69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
Certificate issuer: /CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Certificate serial: 0197B7B34917558D367833C8BC251CACEC85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 18:01:09 +0000
Manifest this update: Sat 28 Jun 2025 18:01:09 +0000
Manifest next update: Sun 29 Jun 2025 18:01:09 +0000
Files and hashes: 1: 5dz9Tw4bpiGr43q4HQtTf_7BsP0.roa (hash: 0VcdjRI2LyeRRm3QIQdFN5UYWsj35tdfOvua8dhZWaw=)
2: C-j834veFsj1jsTX7J6_TWAlAyM.roa (hash: 1/vufO4pJcMpVCQ6/N50OfHCZoID4FXv7ykneVDspNU=)
3: aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl (hash: uotOrJWoLQ9DT84busE7n12uFMEcD50wWJ4OKcKw0Ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:49:17:55:8d:36:78:33:c8:bc:25:1c:ac:ec:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=699c581aff3d0a90178cfab565a388ccd9bc01ce
Validity
Not Before: Jun 28 18:01:09 2025 GMT
Not After : Jun 29 18:01:09 2025 GMT
Subject: CN=fcb4473c2c253db65bb43162ef19fbcc27fae1af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:b5:41:6a:70:d9:f4:aa:78:e0:ba:ff:a0:87:
f3:5a:eb:35:b4:ff:a1:97:77:4c:81:d4:54:89:dd:
9e:38:4a:56:b1:40:03:85:d5:9f:d6:eb:37:d3:5b:
53:1d:2e:d7:a6:d8:2b:3d:dd:e0:f4:1f:df:56:e6:
76:3a:e2:ea:6c:18:39:91:65:04:03:74:07:7d:97:
56:60:a9:75:8d:eb:5a:40:97:74:95:34:32:de:49:
9a:76:02:57:8e:35:1b:ea:ff:78:b3:f4:ed:a9:3e:
1f:4f:95:33:c9:98:da:77:25:24:d4:f4:09:12:bc:
f6:de:da:04:6d:dc:04:15:6c:01:05:e6:5e:2d:79:
fb:f1:70:86:12:38:4b:cd:7c:38:b3:a8:1c:3e:cc:
79:4f:68:ff:b2:fc:8d:66:3b:10:4c:3f:a9:92:e8:
7c:b4:f6:7a:81:2c:f0:35:48:e8:9a:55:0b:68:f0:
fc:d0:60:18:ae:b3:d4:87:ed:26:56:94:d0:e6:f1:
cd:62:36:87:e4:9b:11:2d:80:f2:1a:f8:0c:cc:1c:
fc:1f:c9:05:e2:e3:1f:73:17:1e:53:86:a5:31:a8:
a8:b0:8d:66:29:58:e3:75:d5:d8:48:ae:04:97:cd:
52:33:89:cf:82:ed:3c:10:ef:2d:37:de:35:35:04:
9f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:B4:47:3C:2C:25:3D:B6:5B:B4:31:62:EF:19:FB:CC:27:FA:E1:AF
X509v3 Authority Key Identifier:
keyid:69:9C:58:1A:FF:3D:0A:90:17:8C:FA:B5:65:A3:88:CC:D9:BC:01:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/fb9d5e-a628-4f23-88a5-e5ddd2bb51c5/1/aZxYGv89CpAXjPq1ZaOIzNm8Ac4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:c6:99:19:7c:85:7b:11:aa:dd:3b:ea:32:4d:e1:ee:40:fb:
63:95:e6:0f:b2:70:1b:89:75:24:c3:da:36:00:6f:fd:2b:63:
5b:bd:b2:59:39:a1:f7:e7:d3:b9:a2:20:3c:3b:35:fa:ca:61:
07:7a:44:db:45:45:f9:c8:cf:b9:ef:cd:8f:b5:27:69:4d:14:
7c:5b:16:28:df:03:0f:99:59:97:b3:7e:dc:eb:77:12:7a:5b:
8b:85:ca:4a:31:fc:b5:e1:a3:87:50:24:8c:96:38:2f:b9:25:
8b:2e:46:70:e9:54:1c:57:23:29:7f:74:fb:c9:a0:83:57:48:
38:7b:3f:7a:f8:5a:26:37:18:7c:f0:fa:0c:6a:e9:70:a2:e2:
52:4a:db:ef:51:72:9c:6a:4f:a1:1c:7b:e2:38:a8:35:62:f3:
a3:57:5e:18:9c:52:a2:f0:c5:9d:0d:09:c5:45:57:53:cb:48:
1b:3d:d5:6f:e7:73:fc:77:b2:f5:f7:5e:d9:d0:7f:0e:c3:85:
2a:63:0f:2e:9b:3f:c9:40:41:e4:16:8d:dd:a1:13:12:72:80:
01:73:4a:84:a7:d5:30:dc:9d:b3:3c:86:9a:2e:be:0c:d5:1f:
31:85:74:bc:f8:52:ab:af:07:fb:34:b1:d9:94:99:cb:b9:55:
69:2b:5b:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:08:32 2025 by rpki-client