Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
File: 94Bqw18urALMoEbWUPsivv7mjUM.mft (raw, json)
Hash identifier: DplfnSw9/AIOr+Pd7AEr+Pj9VtdldeqJTAme0jCkJYI=
Subject key identifier: C0:94:B6:7D:67:C7:C1:0D:0C:72:34:B8:70:2D:DA:C0:36:AC:90:BF
Authority key identifier: F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
Certificate issuer: /CN=f7806ac35f2eac02cca046d650fb22befee68d43
Certificate serial: 0197B5FC73B8F30F65AC8DBD673CC49A1AF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 10:01:50 +0000
Manifest this update: Sat 28 Jun 2025 10:01:50 +0000
Manifest next update: Sun 29 Jun 2025 10:01:50 +0000
Files and hashes: 1: 0PPKwxGiNMBSbhAVhmxpYBAC0QY.roa (hash: WQQqIrp440ZZBY56ooFkJtOlObbPJTfYbhMoRZRs5sc=)
2: 94Bqw18urALMoEbWUPsivv7mjUM.crl (hash: B/Z3ThrtoIeSz4MVPxbcxvDf8CuGB+IqcM8AK5VkL3Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:73:b8:f3:0f:65:ac:8d:bd:67:3c:c4:9a:1a:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7806ac35f2eac02cca046d650fb22befee68d43
Validity
Not Before: Jun 28 10:01:50 2025 GMT
Not After : Jun 29 10:01:50 2025 GMT
Subject: CN=c094b67d67c7c10d0c7234b8702ddac036ac90bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:5a:c8:2b:27:de:55:71:ef:cf:76:79:58:d2:
1a:10:59:6a:2d:eb:84:8d:f9:0f:24:08:eb:57:9c:
87:b8:c3:d5:a0:a7:28:09:05:8e:52:f7:57:5a:4b:
1f:e9:30:d5:e3:f9:d4:d9:a4:73:4e:44:e6:37:52:
d2:59:84:98:e4:df:d9:4d:a9:17:ec:49:fe:4e:e8:
b7:b5:0b:92:1d:28:c3:95:74:26:db:b6:23:6c:d0:
bd:7e:af:2f:80:2e:c2:49:b0:5d:ec:86:ce:64:0f:
b2:c2:94:13:ec:29:8b:3d:e1:91:ee:2f:0f:ed:a3:
e2:d2:5c:66:26:90:37:4a:be:a3:f4:a8:88:06:d0:
16:87:0f:5f:76:17:b5:c5:9f:3e:b2:56:0a:ca:d2:
3f:b9:ed:c4:ab:13:bf:fb:c4:d7:26:91:b2:60:14:
a1:b0:51:d3:cd:9f:d2:25:ab:1a:71:f4:4b:67:55:
7e:34:3f:3b:98:bd:ea:45:47:94:96:70:2d:9d:6e:
2c:37:5a:db:9d:66:07:da:55:f8:67:fa:3c:da:f0:
4d:db:5a:32:20:d4:47:ec:f7:e6:79:be:e6:bd:33:
65:1d:82:24:32:88:e4:3c:1d:e3:df:44:c6:d6:04:
1d:0b:74:7b:0e:fe:b1:05:de:f4:0e:33:84:bb:22:
7d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:94:B6:7D:67:C7:C1:0D:0C:72:34:B8:70:2D:DA:C0:36:AC:90:BF
X509v3 Authority Key Identifier:
keyid:F7:80:6A:C3:5F:2E:AC:02:CC:A0:46:D6:50:FB:22:BE:FE:E6:8D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/94Bqw18urALMoEbWUPsivv7mjUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a4fa90-c27e-4bea-8b07-a735ca1084b7/1/94Bqw18urALMoEbWUPsivv7mjUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:dc:84:23:bc:e0:d5:9a:4b:3a:82:44:f8:f0:f6:95:b2:92:
0e:c2:33:6a:71:eb:e7:17:a6:ff:4e:54:45:18:6a:6c:e0:f0:
8c:f0:a9:11:3a:2f:01:01:c3:96:f1:41:8f:b9:04:0b:93:17:
5e:74:b5:90:03:20:19:66:e7:35:7e:d9:d2:2d:75:d7:46:b4:
f3:27:79:cc:b8:71:6a:7b:ce:de:19:df:ae:67:42:31:d1:61:
b8:20:71:09:e4:63:d2:2d:8b:ae:0e:93:80:fa:78:0f:89:a4:
3f:80:80:81:6d:17:20:61:e6:92:6f:ed:fc:d0:db:c9:6f:b8:
17:7e:82:4c:61:1e:04:c4:47:8d:67:52:c4:ac:68:b6:6c:6c:
9e:b2:de:b1:b4:71:70:a8:b3:d7:a0:33:19:b2:ea:4f:c5:97:
ff:25:03:74:78:1e:45:95:b2:9d:b9:b6:ba:cd:fc:e2:32:b9:
1b:e1:a0:24:21:f3:cc:46:6a:dc:23:42:f8:46:7b:d4:6f:4b:
d1:4b:60:fb:42:81:28:75:6a:1e:de:ba:4d:2d:0a:d9:6c:93:
61:58:a2:7e:a1:a3:1f:9d:12:ce:50:7b:46:ba:8c:57:81:65:
61:ef:79:42:a0:b7:20:45:48:12:a1:7b:05:9b:fc:c1:74:25:
0a:5d:d0:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:52:00 2025 by rpki-client