Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
File: Fni0n5riXx4SdTSxkVBErH0NnnM.mft (raw, json)
Hash identifier: KtDe6FUGqllDw/JhUdJpbdH7FwRFL9pISadiiLouurI=
Subject key identifier: 1F:B4:79:E7:88:54:C5:5A:4E:33:DD:68:71:28:F1:11:9C:DF:95:1B
Authority key identifier: 16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
Certificate issuer: /CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Certificate serial: 0197B745589A1BFB01BF4E12B15506A76C0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 16:01:04 +0000
Manifest this update: Sat 28 Jun 2025 16:01:04 +0000
Manifest next update: Sun 29 Jun 2025 16:01:04 +0000
Files and hashes: 1: Fni0n5riXx4SdTSxkVBErH0NnnM.crl (hash: cdt5WPWzSFsBnuqzZqpT2cPZGoHCAa1rCMhp4YINdok=)
2: WEXs_7mi3mpWOcUG8wP1gKvlFMA.roa (hash: +bGwwC+VYAEY8cjrkr182bmVAbIXzAvAjxcOXwPk5RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:58:9a:1b:fb:01:bf:4e:12:b1:55:06:a7:6c:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1678b49f9ae25f1e127534b1915044ac7d0d9e73
Validity
Not Before: Jun 28 16:01:04 2025 GMT
Not After : Jun 29 16:01:04 2025 GMT
Subject: CN=1fb479e78854c55a4e33dd687128f1119cdf951b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:dc:55:e8:f9:90:6c:c3:f2:51:86:fb:22:2d:
f9:05:28:c7:9f:a3:74:03:68:2e:7e:45:2b:5e:87:
70:97:31:c9:d1:2f:40:1d:a8:e3:20:d4:d4:6e:52:
b7:e7:0e:34:8a:fa:7a:db:89:92:41:b5:d4:d7:bc:
94:81:88:43:0e:e0:25:2b:7e:13:dc:9d:fc:38:21:
40:e6:f4:0b:45:30:6b:8e:7a:e7:41:80:1f:d2:4a:
bb:92:dc:6f:6b:01:13:ae:66:22:70:47:fa:24:39:
16:8d:9f:07:83:9b:69:12:23:24:cd:e6:b2:29:5b:
c7:f1:fe:d8:93:b3:7b:ba:c9:33:c2:fc:7e:5c:0f:
63:fd:8e:39:6f:14:60:25:37:da:f5:6b:e4:bb:94:
10:f3:e6:98:9e:39:1a:ef:19:1e:ac:8b:16:5a:2b:
bb:35:14:83:37:a4:b3:7c:74:b6:81:be:42:a6:26:
e6:51:2e:cd:a4:80:6c:ae:89:8d:67:95:c2:b3:22:
71:03:e5:8a:28:e1:a6:0c:44:af:52:73:29:a8:35:
5d:4a:ef:10:27:9f:23:c6:0b:1f:24:0e:60:bc:a8:
c9:49:a5:86:87:98:73:62:67:db:5b:08:10:b1:05:
77:28:6d:d7:65:ee:4c:4d:59:55:48:d3:ed:10:44:
ed:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:B4:79:E7:88:54:C5:5A:4E:33:DD:68:71:28:F1:11:9C:DF:95:1B
X509v3 Authority Key Identifier:
keyid:16:78:B4:9F:9A:E2:5F:1E:12:75:34:B1:91:50:44:AC:7D:0D:9E:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fni0n5riXx4SdTSxkVBErH0NnnM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/0f71f3-7e13-4713-b232-7454a19d32d1/1/Fni0n5riXx4SdTSxkVBErH0NnnM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:fa:11:d2:e3:b1:a2:11:11:d9:8e:51:f3:89:71:46:a3:69:
8c:f1:4b:6c:99:64:46:98:75:95:83:68:ba:40:7d:b4:67:30:
d2:a0:25:83:a3:bc:4f:4b:03:ea:ce:25:11:69:52:0a:42:d9:
7d:7a:87:f6:fc:5b:8b:10:07:9f:61:fa:bf:21:3f:ff:b1:58:
ab:2d:5b:4a:82:7e:ec:a9:61:25:15:10:b8:bc:e0:d6:98:ef:
09:b6:56:32:83:35:74:7f:24:78:f7:98:4c:bd:f8:6e:cc:52:
57:8d:65:02:a2:11:ec:b1:99:f2:e1:74:b3:a3:46:b4:7e:9c:
44:40:5d:6c:9e:05:bb:52:bd:bc:f7:57:c2:b6:2b:f9:3a:8a:
da:c1:99:84:e7:3b:53:43:bf:ec:90:18:52:62:2b:fd:9b:06:
9e:23:02:df:8f:7c:b3:fa:2e:00:52:45:84:a3:cb:b1:38:95:
e2:ca:bd:b8:d3:3f:9f:72:ae:92:6d:c1:82:75:09:94:45:be:
66:ca:2a:a8:b8:7b:ca:8a:a8:46:25:29:8e:25:e2:0c:4d:59:
0c:43:36:de:ce:b4:a0:29:30:c1:e9:69:a2:2d:5e:d0:0d:8b:
e9:6b:93:4f:f7:46:45:0f:f7:e2:45:e1:ff:46:80:2e:29:63:
8a:36:d8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:11 2025 by rpki-client