Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
File: fKBMxn75bZAi89C_xR6ttKS2PuY.mft (raw, json)
Hash identifier: dvkiLG1eCVFegccWAV4WxbhlGxRMAUaNsaX0v9pxKMQ=
Subject key identifier: BA:05:FE:1D:EB:D8:35:A3:9D:6C:77:93:45:F6:F1:CB:AF:EB:CA:C0
Authority key identifier: 7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
Certificate issuer: /CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Certificate serial: 0197B77C027D94C7BC66361BE10326D9B297
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 17:00:46 +0000
Manifest this update: Sat 28 Jun 2025 17:00:46 +0000
Manifest next update: Sun 29 Jun 2025 17:00:46 +0000
Files and hashes: 1: 4ekqJ0ShOsudm3NjqB8EzsLIznQ.roa (hash: bsmaITtT/q9ZrtwjMFlkhST+mxUMFa59Ikk72Us4Vtc=)
2: IVNXij-StlwFeQNzqAVOIR_s5UY.roa (hash: SitPl6cMloLrlgSBvA7o7zdkDMuevHChw+flrI14V8E=)
3: fKBMxn75bZAi89C_xR6ttKS2PuY.crl (hash: +Hxpm37mIRzbgX/+2ueOJRxpHCIgCx1FTL6fdyj0Y0I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:02:7d:94:c7:bc:66:36:1b:e1:03:26:d9:b2:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca04cc67ef96d9022f3d0bfc51eadb4a4b63ee6
Validity
Not Before: Jun 28 17:00:46 2025 GMT
Not After : Jun 29 17:00:46 2025 GMT
Subject: CN=ba05fe1debd835a39d6c779345f6f1cbafebcac0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:99:d0:a3:59:86:7a:11:1b:34:94:83:70:
99:c8:86:21:17:ff:e8:c6:d3:33:f9:52:83:93:1d:
20:97:f3:66:7e:56:58:60:a5:6a:11:29:56:d0:12:
c7:b8:ca:d8:4c:0d:6b:8c:5d:55:da:ff:9c:9a:4d:
da:2c:bd:f1:18:09:08:fe:6c:9d:db:ae:09:00:70:
5b:ab:a8:38:15:65:ec:33:78:51:1d:db:3d:fd:c8:
f8:91:f5:66:6d:ce:91:92:10:a7:3b:b6:3b:d8:2c:
57:9b:a8:bd:ae:18:c3:28:9f:4a:aa:56:b9:a1:f9:
3d:ef:0f:2f:b4:f0:29:ad:da:f9:a2:4e:47:57:41:
db:74:18:10:06:79:cf:a6:18:fb:e1:f7:40:92:8f:
4e:af:90:a4:c2:6e:70:47:e1:3c:00:b1:99:e4:cd:
70:67:6b:1b:96:20:a7:44:04:ec:de:6c:bd:a6:1a:
ef:30:5d:8e:fd:c8:bb:90:ac:15:0d:80:30:84:7a:
a7:d7:a1:2f:20:32:c4:a3:29:51:27:fb:55:72:5f:
80:a2:18:aa:c3:21:f1:b6:f6:77:52:c1:22:fe:67:
aa:5e:86:0e:08:32:5d:51:be:0f:f4:3d:2d:fb:5e:
0d:50:5c:fd:02:4b:78:6b:ad:78:f4:c1:ae:76:a1:
21:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:05:FE:1D:EB:D8:35:A3:9D:6C:77:93:45:F6:F1:CB:AF:EB:CA:C0
X509v3 Authority Key Identifier:
keyid:7C:A0:4C:C6:7E:F9:6D:90:22:F3:D0:BF:C5:1E:AD:B4:A4:B6:3E:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKBMxn75bZAi89C_xR6ttKS2PuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/9b94e2-d21d-4d81-8aea-a5568e0fbb6d/1/fKBMxn75bZAi89C_xR6ttKS2PuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:40:f7:b7:24:2b:1b:88:64:fa:ad:7c:75:c9:68:bd:b5:a3:
2f:4f:1d:4f:46:b1:b1:fe:86:40:da:a1:7d:14:6d:dc:e0:c8:
d3:8a:2f:69:e0:9a:d0:2f:91:16:91:aa:1f:51:54:7b:d3:22:
11:95:a3:84:9c:82:5b:5c:cb:69:40:99:4e:10:dc:79:51:ae:
2f:a8:43:91:3e:84:6c:cc:f8:ea:14:3c:f2:75:f8:14:77:6e:
16:7c:de:7a:16:b1:92:b1:13:e4:a3:ae:d2:2c:5e:76:bc:f6:
00:86:a8:fc:5f:2e:bf:13:6a:0d:b1:56:41:f1:93:13:e3:11:
11:e4:56:44:2c:5c:6d:0e:90:a0:5f:a7:1c:ca:b4:53:41:77:
99:0b:28:b2:a5:ad:da:58:9c:14:37:28:b1:23:b2:36:7e:ed:
e1:0e:83:51:79:66:87:c1:e9:82:4c:80:39:7c:b3:a7:cb:ba:
a6:d6:f7:c9:3d:79:a4:6c:de:66:83:d5:9e:9f:49:38:9e:b5:
bf:98:25:ce:07:f1:2b:8c:cf:da:11:a3:62:a2:80:99:a2:7a:
cd:17:5a:61:e0:9b:46:10:88:c0:44:4b:3f:76:50:5a:e6:6e:
64:ad:10:88:a1:80:92:82:b4:a4:8b:ce:82:b4:7a:40:50:cb:
5b:bf:30:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:18 2025 by rpki-client