Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
File: _74lZWXhwnxLJlYBkOmXgoaoK1I.mft (raw, json)
Hash identifier: 0dCq5dV/r3xuPq2uyKGCQFaQ2I4yDYfaxaISbKZSndo=
Subject key identifier: BA:43:13:8D:3E:C5:20:75:94:F1:19:6E:03:EF:6D:32:0F:98:A5:15
Authority key identifier: FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
Certificate issuer: /CN=ffbe256565e1c27c4b26560190e9978286a82b52
Certificate serial: 0197B6D75B1080EEE1096CDFBE2600172059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:00:56 +0000
Manifest this update: Sat 28 Jun 2025 14:00:56 +0000
Manifest next update: Sun 29 Jun 2025 14:00:56 +0000
Files and hashes: 1: 6uqfHy5orm23cTKFvyLzjaOscrk.roa (hash: eSkR1Rx3FREDyMUFDl/Eczx/rYW2EV6fDcTDwEKXsM0=)
2: QHm-ELioCU7VmYr3xnJI2hFroko.roa (hash: NmW3C8NKCGbqhRm0Xt94BQ/c4oqnG0YmYAOJMru4dYw=)
3: _74lZWXhwnxLJlYBkOmXgoaoK1I.crl (hash: zb2T0QJbxD762b4vxaYZ4N3eQUDaZbzr5nCCkEYsbI0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:5b:10:80:ee:e1:09:6c:df:be:26:00:17:20:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffbe256565e1c27c4b26560190e9978286a82b52
Validity
Not Before: Jun 28 14:00:56 2025 GMT
Not After : Jun 29 14:00:56 2025 GMT
Subject: CN=ba43138d3ec5207594f1196e03ef6d320f98a515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:99:56:88:07:ae:45:8d:6b:74:4c:40:88:05:
de:4f:23:01:f2:de:22:7f:9b:78:96:e5:74:76:9d:
e2:56:b6:e6:be:58:da:4f:20:e2:5d:2e:61:b3:dd:
c2:df:89:67:1c:56:9b:8a:78:07:6d:39:dc:7d:62:
d8:77:a6:9f:bd:f3:0d:c7:f4:1d:49:21:68:aa:72:
b8:07:0d:8a:5b:35:8a:13:a2:d4:80:f0:85:6c:c2:
aa:56:bb:07:ff:81:b4:60:99:49:3d:e7:9d:0a:8e:
f6:13:c7:6c:a6:e0:50:a0:2e:57:fb:86:98:97:ca:
81:6e:2a:57:03:85:f7:99:5c:08:e9:da:12:0e:2c:
76:b7:0e:fb:75:97:b2:81:d9:57:58:a1:83:89:09:
55:09:93:a5:48:c0:bc:5e:a4:3b:b5:4c:73:8d:c0:
19:f3:31:fe:96:a1:84:af:4e:b5:a0:2c:8e:d2:8c:
cd:a5:a3:65:0a:03:e0:8e:aa:09:1c:36:82:74:fe:
fd:d3:03:c2:2e:f6:c9:93:77:e1:2d:fd:4c:9d:5f:
b0:e4:9a:a2:25:82:93:b0:05:3c:27:be:fa:97:bc:
4c:6d:7a:ef:c6:58:f0:4c:86:0c:d0:81:59:2d:0f:
79:08:67:ab:be:2f:bb:d5:bc:97:e9:08:74:ab:96:
a4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:43:13:8D:3E:C5:20:75:94:F1:19:6E:03:EF:6D:32:0F:98:A5:15
X509v3 Authority Key Identifier:
keyid:FF:BE:25:65:65:E1:C2:7C:4B:26:56:01:90:E9:97:82:86:A8:2B:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_74lZWXhwnxLJlYBkOmXgoaoK1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/27c928-02fe-4052-9d65-b1fc2083c906/1/_74lZWXhwnxLJlYBkOmXgoaoK1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:04:3e:f0:87:0b:d3:56:2b:8b:9c:fa:34:d8:b8:6e:00:0d:
1c:51:fb:b7:a2:f3:ad:78:d7:b6:34:c2:f1:05:f0:b5:df:63:
fd:f1:ca:77:5e:be:b3:aa:fe:e6:49:f6:28:0e:ef:27:8d:ac:
d8:e3:d0:19:a2:02:7c:63:b4:05:96:e0:af:81:4b:6a:d7:73:
59:f8:88:48:f6:76:0c:82:7b:35:a9:c7:7b:12:01:6d:4b:3d:
bf:20:0a:bb:14:ea:29:81:27:c2:a1:39:2a:df:69:7a:d6:75:
7a:80:51:cf:1b:59:9f:b3:c9:82:8d:9d:a9:e8:7b:6a:a9:f2:
4f:73:ce:ab:3c:69:10:ac:d2:11:53:9d:4a:f2:f0:2b:bd:9b:
ae:e3:4b:30:8c:3a:2f:17:cc:88:3e:a3:e3:b6:ed:e4:e2:51:
e3:a1:aa:3b:ec:18:32:1e:40:46:e0:dc:95:9c:13:a1:52:c6:
ec:ab:32:ac:25:97:e7:8a:c8:be:21:f2:53:88:98:1f:5f:b8:
a4:58:ee:81:9b:0b:ee:df:02:f5:26:ee:ed:20:88:73:f4:8e:
be:ed:f2:a6:ff:9e:42:5b:5e:27:d9:3d:10:17:3a:68:8a:2e:
c6:11:85:59:f5:5f:fa:1d:41:c5:a1:72:2d:0a:9b:ed:69:29:
15:4c:34:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:05:58 2025 by rpki-client