Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
File: idOpFFlzx5o-e5VTHj0N99KMSgQ.mft (raw, json)
Hash identifier: RkkRyhKM+CUdceyk5oLJdgCLzUxTho3mwF9z0H2FTF0=
Subject key identifier: 1E:5D:34:2B:01:3B:A1:C7:4E:D7:82:44:DE:BA:BE:C4:1C:D6:6E:B3
Authority key identifier: 89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
Certificate issuer: /CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Certificate serial: 0197B6D793DD572B9EDD5C81153B511423AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:01:10 +0000
Manifest this update: Sat 28 Jun 2025 14:01:10 +0000
Manifest next update: Sun 29 Jun 2025 14:01:10 +0000
Files and hashes: 1: 2PjElAAJU3KrVInjZlxeKaqsURQ.roa (hash: E5/GwvtnZzLjYWDNMf6Xqpe3KvrLvjhM7f3dCAih0vU=)
2: idOpFFlzx5o-e5VTHj0N99KMSgQ.crl (hash: LW0wEauC5kJGd22a2C8EQ1e1jNzG5ZbecB2x5+dfpZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:93:dd:57:2b:9e:dd:5c:81:15:3b:51:14:23:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89d3a9145973c79a3e7b95531e3d0df7d28c4a04
Validity
Not Before: Jun 28 14:01:10 2025 GMT
Not After : Jun 29 14:01:10 2025 GMT
Subject: CN=1e5d342b013ba1c74ed78244debabec41cd66eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:25:2a:4e:32:2f:82:f0:aa:d9:00:ad:0f:
21:2c:a8:47:3b:00:14:54:22:09:32:36:c8:86:e2:
4c:ad:63:a2:e7:41:31:63:93:89:b9:2f:1f:4f:d4:
ed:6c:23:32:70:39:c6:6f:e9:11:04:b6:40:4b:0e:
43:01:28:bd:ca:22:35:96:80:7f:96:f8:c9:80:37:
07:c5:25:30:b7:4d:db:a0:1b:aa:57:ab:c4:1b:99:
b6:43:2c:36:24:fb:7a:a2:49:f6:b5:74:97:8d:ce:
47:30:f6:61:26:7a:dc:f1:33:09:da:e3:67:49:55:
ed:ba:e7:1e:2a:d4:95:d2:af:bf:b0:91:a3:21:56:
72:e4:0b:52:fb:bf:0f:f7:e3:96:d3:c5:ab:5a:51:
de:17:5c:47:31:75:15:69:ee:74:84:bf:ab:c8:fb:
5e:ab:87:cd:84:50:9d:ee:c1:11:08:bf:04:c6:54:
85:be:60:23:50:48:ee:d0:94:cc:b2:f5:1d:1b:dc:
d6:35:72:bd:85:d2:d7:42:01:94:a8:2f:43:a5:89:
c7:1c:82:77:a6:9f:6f:45:c9:76:fd:4d:ac:5f:eb:
20:cb:ab:54:20:61:ce:dc:51:f0:c8:97:be:8e:09:
a1:0c:ad:0c:7c:24:12:37:e5:85:94:ea:a7:4d:a5:
69:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:5D:34:2B:01:3B:A1:C7:4E:D7:82:44:DE:BA:BE:C4:1C:D6:6E:B3
X509v3 Authority Key Identifier:
keyid:89:D3:A9:14:59:73:C7:9A:3E:7B:95:53:1E:3D:0D:F7:D2:8C:4A:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/idOpFFlzx5o-e5VTHj0N99KMSgQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/8c0f0c-19c7-4eaf-96f5-7d40c11a9500/1/idOpFFlzx5o-e5VTHj0N99KMSgQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:60:df:18:fa:ec:08:32:9d:46:46:4a:ee:9a:3c:d8:05:a5:
33:5f:d2:ad:ff:4b:e1:68:ad:5a:33:df:7c:62:a5:83:1a:1f:
96:9d:ea:ef:e4:78:e1:a8:1b:38:61:db:d7:f6:c0:9b:1c:de:
d9:ba:3e:71:12:17:df:51:85:d0:5e:20:9f:1c:45:4a:a0:bb:
da:d3:ac:b2:b1:50:22:8c:d2:d5:4b:87:2b:59:06:13:da:38:
48:ac:21:ba:cc:b3:f0:07:97:e9:96:9e:64:4d:ba:ca:e9:26:
28:0c:31:db:57:93:c7:26:d1:56:01:d5:a3:71:53:e5:86:b9:
c4:71:c6:92:44:5b:e7:d2:60:2e:7c:da:e3:5f:84:b6:99:aa:
a3:0d:6f:14:e1:ab:50:0a:e0:c7:c4:90:a0:b4:5a:b5:93:30:
07:06:b0:08:31:7d:f6:2b:43:58:aa:82:f6:80:9c:84:0f:ee:
18:4d:1d:15:14:8d:86:a3:da:44:1a:3c:cc:d8:25:b3:ea:d9:
be:34:86:30:bd:cd:42:ef:fe:0b:2e:56:77:da:27:47:2c:49:
30:7d:a1:38:e7:ed:e1:a5:e2:f3:2e:e0:07:8b:77:29:0f:66:
a2:36:cf:d2:d6:2e:e5:2b:4a:d0:14:72:02:e9:03:5c:de:71:
dc:6a:2f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:31:24 2025 by rpki-client