Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
File: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft (raw, json)
Hash identifier: lfWxwYQ4fvYYdcf57C6v+W47OgfXaW088YhzjbOzjio=
Subject key identifier: 73:5C:EF:F5:67:E6:CD:EE:9D:22:BC:08:27:E5:46:BA:82:21:E6:34
Authority key identifier: FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
Certificate issuer: /CN=fde72d43f4c82b1146737b116197231830bf65d6
Certificate serial: 0197B6A09014F744A707C45AC6B38A05FBE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:05 +0000
Manifest this update: Sat 28 Jun 2025 13:01:05 +0000
Manifest next update: Sun 29 Jun 2025 13:01:05 +0000
Files and hashes: 1: NEbsKu77gYfpibY3_TC8dQH80XA.roa (hash: aeVQJbng3C7RHWncwne+AehQ3FDANQdssqp/Bjc9vag=)
2: _ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl (hash: epegAnYE8DEKvmV8b2b1RZVdLN3/3ImthfXytCyDWQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:90:14:f7:44:a7:07:c4:5a:c6:b3:8a:05:fb:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde72d43f4c82b1146737b116197231830bf65d6
Validity
Not Before: Jun 28 13:01:05 2025 GMT
Not After : Jun 29 13:01:05 2025 GMT
Subject: CN=735ceff567e6cdee9d22bc0827e546ba8221e634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ee:32:37:a7:88:02:a1:e6:e7:e9:58:77:e0:
7b:4c:07:0e:97:83:68:74:4d:0d:6a:6b:a6:28:8f:
a6:ab:64:1d:ac:8a:41:76:df:87:8d:64:f8:7b:b6:
27:63:6d:c4:b3:cf:19:25:7b:0d:8b:4b:44:07:f3:
ce:ad:b9:02:cd:16:47:87:3b:ce:be:6e:27:c6:b2:
2f:d0:18:92:3e:97:fb:fe:ac:6c:91:fc:c0:93:70:
83:a0:60:d9:db:29:92:c1:e7:35:af:f0:73:b6:4a:
6a:3b:64:51:2b:66:6b:36:97:9f:c0:3d:b1:5e:c2:
f7:d8:22:e6:29:be:85:be:d3:ec:d4:f1:bd:9d:78:
69:57:a8:69:1b:d8:e1:e9:b5:d9:1c:29:02:8f:69:
39:86:ee:b5:1a:6f:36:21:a4:cc:71:4a:a4:46:2e:
08:a0:29:a5:e9:5c:cd:4b:c8:ed:f8:ea:be:b2:7f:
b8:69:dc:79:a3:73:a2:46:4b:b6:65:6e:d0:06:ef:
96:37:40:30:84:80:a2:19:11:1f:18:99:9d:50:b9:
72:44:e0:f8:68:21:04:fb:74:6d:30:96:56:1c:cc:
b7:bc:f6:a7:8c:f7:18:ff:fb:33:4b:2c:18:68:bc:
4f:a4:39:a9:85:55:eb:7b:12:35:d6:ae:bb:8b:e1:
31:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:5C:EF:F5:67:E6:CD:EE:9D:22:BC:08:27:E5:46:BA:82:21:E6:34
X509v3 Authority Key Identifier:
keyid:FD:E7:2D:43:F4:C8:2B:11:46:73:7B:11:61:97:23:18:30:BF:65:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/debc29-5b2b-4bab-b4f7-e1c9198cdd88/1/_ectQ_TIKxFGc3sRYZcjGDC_ZdY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:13:c0:33:3a:e9:cf:a1:e0:21:d6:27:19:a0:4a:c2:83:dd:
35:00:32:f7:e3:c8:ce:8d:fc:2b:7d:8c:1b:0b:5a:da:9b:6f:
d2:91:71:ba:97:d7:b0:b9:f8:0c:8e:c3:ec:9e:e0:a0:cc:e4:
4b:e7:70:ab:c5:96:2e:7a:ef:c7:74:4f:56:09:7b:db:84:d8:
ea:f3:32:c9:02:0a:c9:e5:db:cd:98:37:d7:58:73:ce:9a:79:
5d:2a:39:23:1d:fe:fa:f8:b6:5e:28:5a:24:eb:67:2e:35:07:
85:ee:10:5e:64:f5:ec:0c:d5:6d:12:3e:5d:83:fd:3f:9f:bf:
c6:04:1c:db:d7:5e:40:78:27:e3:91:ba:1e:a6:8a:05:0a:61:
df:aa:68:21:59:2d:c0:3a:05:67:92:7d:c0:7a:27:60:ae:ac:
c2:72:a3:dd:47:53:d1:80:9a:72:0b:06:a8:8a:ae:31:de:c7:
52:77:40:db:8f:a9:07:70:29:3f:5f:0a:2d:27:d1:31:f5:ae:
27:9b:86:a3:e4:6f:e6:97:13:16:bc:9f:03:c6:02:9e:e8:f1:
4c:d2:ea:47:21:2a:fd:37:2f:7f:96:a7:d7:f3:2f:03:d8:f0:
91:59:cd:6b:54:74:c1:76:e6:4e:fc:09:c9:ae:d6:74:af:73:
d7:42:d6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:20 2025 by rpki-client