Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
File: Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft (raw, json)
Hash identifier: EHLR3U5FyFPgqzkcUJ/kVbIpmIPL2RQV0rJdIttarAU=
Subject key identifier: 4B:12:F9:AF:8C:7A:30:EE:FD:35:1E:95:A9:E5:7A:93:E3:BD:1A:37
Authority key identifier: 15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
Certificate issuer: /CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Certificate serial: 0197B890284D896402A822AE204967FD800B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
Manifest number: 15C8
Signing time: Sat 28 Jun 2025 22:02:24 +0000
Manifest this update: Sat 28 Jun 2025 22:02:24 +0000
Manifest next update: Sun 29 Jun 2025 22:02:24 +0000
Files and hashes: 1: 1tY0n_P9pCmxuMHMwVN4kuuE9Yw.roa (hash: OMoFTls8LA8ewzB3QD+33fEfQjFe6IrAty5YO50hD+U=)
2: 3qpur1zwBPkajyupQYlxerl-sX8.roa (hash: P/ij/bhS3D5UPNfyBQsnXDUHMAdZt5V8V+OvOjXddRE=)
3: Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl (hash: f3Qdn3HJo1xYinYs2Y89B8HAs+svmUhjHTsSy2t6aD4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:28:4d:89:64:02:a8:22:ae:20:49:67:fd:80:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15dc3cb1e07d714b725f51a66d1dcfd87ae1c51a
Validity
Not Before: Jun 28 22:02:24 2025 GMT
Not After : Jun 29 22:02:24 2025 GMT
Subject: CN=4b12f9af8c7a30eefd351e95a9e57a93e3bd1a37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:eb:d5:c9:5e:35:d5:bd:16:7e:63:8d:e4:c3:
eb:5a:5d:7b:fc:31:53:26:0c:09:0c:de:31:f8:0e:
5a:6c:39:2c:cf:0c:db:5e:7c:bb:63:e8:72:50:3b:
ab:85:3e:47:9e:cd:82:0e:5b:41:fe:23:ca:a7:98:
dc:f2:a2:20:4e:1d:cc:7d:94:e9:86:ad:5a:51:45:
0c:97:87:c2:fb:dd:cf:77:27:cb:40:29:da:eb:66:
94:1d:78:75:2f:c6:a8:fb:73:43:e5:71:f2:d3:c2:
6f:56:5c:b7:6d:d0:62:2c:89:2e:6a:b2:03:95:1b:
57:82:c4:d6:7b:90:82:08:c2:40:19:06:b8:49:f5:
82:16:56:f7:b4:66:e3:a8:a1:6e:da:9b:08:31:4e:
77:07:82:51:41:dc:98:a3:79:5c:f8:bf:0a:03:d8:
66:e6:16:96:c1:9c:a9:22:0a:79:b5:53:ac:f7:3e:
73:7e:ae:ae:1c:dc:ff:69:3d:ae:e0:79:2d:d8:d1:
b3:2a:ce:59:77:a0:5d:fe:a0:df:7e:c7:4a:b0:0e:
45:bd:94:ae:97:1e:8f:b2:d6:4d:5a:45:52:3a:36:
30:e2:5c:05:c5:18:b7:a9:cd:0f:27:27:7e:12:a7:
e9:5d:a9:00:3c:be:26:ab:40:a3:6d:93:4e:16:b1:
eb:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:12:F9:AF:8C:7A:30:EE:FD:35:1E:95:A9:E5:7A:93:E3:BD:1A:37
X509v3 Authority Key Identifier:
keyid:15:DC:3C:B1:E0:7D:71:4B:72:5F:51:A6:6D:1D:CF:D8:7A:E1:C5:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fdw8seB9cUtyX1GmbR3P2HrhxRo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/a9cc5d-69e0-4597-ad64-fe2cb431cf2f/1/Fdw8seB9cUtyX1GmbR3P2HrhxRo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:9f:c5:70:77:a9:8b:4e:57:1c:c6:f5:6e:9a:26:77:86:13:
28:48:bc:b1:30:8c:19:8a:5a:9a:68:ca:25:f6:82:bf:ec:03:
fa:d3:a0:3f:bf:f7:be:47:d4:71:e5:98:93:77:0e:d8:12:1b:
61:95:89:4e:dc:bc:5b:32:c2:8c:9f:8d:25:4d:06:cd:1a:2e:
0b:5f:18:d1:fc:30:c4:6b:f8:ae:05:98:89:40:1b:66:59:a9:
64:a8:a6:15:55:b0:cf:e9:5c:17:df:9f:b7:94:de:57:41:a8:
02:01:64:c3:6a:c0:6f:be:ad:6a:d9:60:71:14:0a:53:8d:b0:
f6:cb:eb:f9:ca:9c:af:c4:ac:c9:97:82:b5:5a:d5:be:45:8a:
4a:9f:b3:eb:9d:e6:bb:1e:14:81:c1:54:92:d5:f0:4f:13:42:
ee:34:92:53:08:6a:d7:4a:ef:de:66:9e:53:02:88:7a:6d:c0:
78:be:b2:86:a0:eb:28:f6:d1:07:78:76:f3:b9:bf:ac:05:35:
a6:bb:19:96:79:72:d4:ad:b6:47:ce:c7:c9:84:24:ba:fe:90:
b5:b3:cb:53:9d:e3:2e:08:43:35:30:92:c8:57:36:6a:ff:9f:
ee:67:34:aa:f8:a2:fb:e7:6d:4a:2a:71:08:bb:54:00:24:bd:
c5:ac:71:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:23 2025 by rpki-client