Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
File: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft (raw, json)
Hash identifier: aZ6pqDRsAENhIbato6mhRlxI1bw+rITFjUihQ/Mesq4=
Subject key identifier: 65:73:65:87:9D:C7:FF:32:7B:F9:E2:F7:DB:80:B6:22:7F:03:DA:0D
Authority key identifier: 16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
Certificate issuer: /CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Certificate serial: 0197B632867129457015A605E83635D72A55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 11:00:53 +0000
Manifest this update: Sat 28 Jun 2025 11:00:53 +0000
Manifest next update: Sun 29 Jun 2025 11:00:53 +0000
Files and hashes: 1: 1-TdRJj4h2RmubOdxb9rkHHG6bhc.roa (hash: IbIK2UxlwKjCUY9QjIcWsizwAMtE57kEDfBifLf6mzQ=)
2: Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl (hash: fJupiZPa8XCXGefyYHWL8emv07LTu5wCRfSGF4rf4Go=)
3: QR0Kgwt3HCwjc-xcqO7iblC-rKY.roa (hash: 0rkvAXImNg4dab81A4VmHvprnFlgPXRICVp6eT39HwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:86:71:29:45:70:15:a6:05:e8:36:35:d7:2a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16497d8453c5ee3ebbb388e1a47a195ff30fe009
Validity
Not Before: Jun 28 11:00:53 2025 GMT
Not After : Jun 29 11:00:53 2025 GMT
Subject: CN=657365879dc7ff327bf9e2f7db80b6227f03da0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:33:43:dd:d0:7a:1f:04:6f:5a:67:f2:47:
d9:9c:b7:06:24:09:6d:b6:a9:f2:ad:2f:bc:11:4b:
2a:f5:12:85:36:a5:a3:de:70:d5:a5:3b:27:16:82:
1c:d8:f4:3f:f9:92:12:09:2d:dc:e5:27:0e:bc:8a:
7e:e9:11:c9:bc:e0:24:42:75:61:c3:de:d7:f5:ee:
47:64:1b:33:65:15:3f:1b:f2:80:9f:d9:96:ff:31:
7e:17:c5:a6:64:79:e6:60:dc:ed:40:ea:f5:86:f7:
2f:3f:e5:ba:f9:da:f3:11:65:a8:33:8e:bc:31:9e:
88:66:1b:65:b0:b4:81:b5:03:d1:51:1e:23:93:2b:
9d:6e:7e:42:ba:aa:09:ee:11:52:8d:5e:f0:1a:a2:
cb:97:d0:ff:53:67:65:ed:ab:cb:63:de:22:18:07:
41:10:b8:5d:a2:ea:62:c1:50:11:68:3f:ec:43:f9:
d9:7a:c7:34:2c:a3:8e:b1:7e:7c:41:d0:1a:21:0f:
4c:ba:cb:a5:f8:05:dc:18:bb:e0:af:24:4b:4b:59:
27:e1:56:4f:96:7c:34:ff:2a:6d:35:bd:80:10:c2:
2d:17:c0:29:ad:79:86:8f:f9:05:d0:94:27:5e:ee:
5b:95:ce:da:cd:4f:ac:f3:26:f3:4a:31:96:b6:0e:
10:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:73:65:87:9D:C7:FF:32:7B:F9:E2:F7:DB:80:B6:22:7F:03:DA:0D
X509v3 Authority Key Identifier:
keyid:16:49:7D:84:53:C5:EE:3E:BB:B3:88:E1:A4:7A:19:5F:F3:0F:E0:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/c97fcf-1a8d-4ac9-bfea-b234dd6ed637/1/Fkl9hFPF7j67s4jhpHoZX_MP4Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:6b:50:bd:6b:a7:8f:28:b1:79:03:ed:74:7d:6c:3a:77:dc:
b2:75:77:6b:99:44:74:43:77:d6:bc:b0:77:d6:5b:ee:fe:1e:
9a:09:15:12:2c:d9:3d:ea:7a:f9:39:12:21:f0:03:eb:e2:53:
ad:15:fa:81:59:91:c5:80:9c:4c:3b:f1:db:d6:33:45:b0:4d:
eb:60:77:56:5c:a6:da:3b:9c:c3:8b:76:33:74:7c:f9:72:40:
c2:48:f7:9b:1c:5f:fb:ef:e5:28:fb:9e:49:48:77:f3:ec:56:
fe:f0:30:a4:a8:81:4f:46:75:ac:99:e0:38:9f:e5:e7:76:22:
1c:2f:a8:67:53:62:03:63:0a:ea:a9:0f:4a:8a:f0:f4:68:40:
d2:6b:c2:4a:bb:03:9b:e4:a3:b5:4b:b4:d6:19:da:b4:24:1d:
5d:62:2b:89:ce:2f:f7:bc:9a:4f:10:30:f1:fc:63:d9:06:5b:
f0:0d:7f:73:b0:63:6a:56:d3:e9:74:fb:30:cb:8a:db:83:b8:
1b:7c:2a:71:4a:01:06:41:0c:ca:0c:f6:74:98:31:f8:fb:61:
08:bc:8d:91:2a:5d:29:27:4b:ae:8d:e6:3d:68:dd:03:16:4f:
eb:fe:e9:31:27:7c:e8:0a:25:c5:f0:89:08:1c:89:cc:ec:b2:
7a:8b:e2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:05 2025 by rpki-client