Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
File: F0G9doUTjcUdWmsM03gPRmtX_RM.mft (raw, json)
Hash identifier: wXyE2sydX/2UnGw21KkdRhAsXlCpjvFWsc45GXkinKI=
Subject key identifier: 2B:24:A7:2A:B7:52:94:EB:D9:3D:91:D3:A3:0B:BC:B2:4B:82:16:0E
Authority key identifier: 17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
Certificate issuer: /CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Certificate serial: 0197BAEB6CC537CCE986127F312801211586
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
Manifest number: 15BB
Signing time: Sun 29 Jun 2025 09:01:20 +0000
Manifest this update: Sun 29 Jun 2025 09:01:20 +0000
Manifest next update: Mon 30 Jun 2025 09:01:20 +0000
Files and hashes: 1: F0G9doUTjcUdWmsM03gPRmtX_RM.crl (hash: 33vJ3Gd8jkC4nQCVqpTq5PUTnFFhsyORmK8mt+VjQp4=)
2: YkiiV0RDHFC-BUQDCVg59T2UUOg.roa (hash: JgGDNNpAIzdyLgpjO8Q07wczCvQGkR61dSx5OtpD+HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:6c:c5:37:cc:e9:86:12:7f:31:28:01:21:15:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1741bd7685138dc51d5a6b0cd3780f466b57fd13
Validity
Not Before: Jun 29 09:01:20 2025 GMT
Not After : Jun 30 09:01:20 2025 GMT
Subject: CN=2b24a72ab75294ebd93d91d3a30bbcb24b82160e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:bb:3e:1a:1e:cf:82:89:2c:22:cc:79:d6:3b:
db:bb:1e:10:bf:4c:d5:a2:e0:9f:1c:fb:fe:52:d3:
6c:c5:d2:0d:6a:b0:0e:c9:fe:f3:27:39:e6:5a:c1:
a5:cf:49:59:2e:d6:b1:69:d3:bd:0f:53:e4:5f:2b:
6b:9f:14:ae:69:92:ac:a6:31:38:45:ea:f9:4d:5c:
97:b1:66:e7:bc:63:7d:0a:60:1b:3a:b8:a0:87:3b:
a4:ee:a9:80:ef:4e:4b:d3:75:4f:eb:8a:3b:2b:43:
03:87:1c:f0:59:94:f5:af:6a:15:cd:5f:fb:73:50:
cd:59:df:08:b0:ef:71:b8:4c:ae:19:a3:14:b3:82:
a9:c1:34:08:3e:c3:77:a0:ec:d4:ef:94:00:79:84:
42:a2:ce:bb:ab:59:75:fa:20:8b:e1:e1:5c:0f:26:
23:48:c0:75:ad:f4:d6:c2:17:3d:a8:c8:0b:9b:a2:
21:d5:64:a4:72:5e:83:30:da:c1:fb:30:b4:a0:eb:
5e:b6:31:f7:d7:90:00:59:6a:38:54:8e:37:90:8b:
64:29:20:fe:00:61:06:e7:2d:c0:d4:ca:74:6c:eb:
4e:11:22:bc:ba:f0:ca:d4:e7:06:ee:f0:d2:d5:1d:
a6:3e:e8:47:8c:e3:30:b2:32:7c:90:15:d6:7f:6c:
ee:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:24:A7:2A:B7:52:94:EB:D9:3D:91:D3:A3:0B:BC:B2:4B:82:16:0E
X509v3 Authority Key Identifier:
keyid:17:41:BD:76:85:13:8D:C5:1D:5A:6B:0C:D3:78:0F:46:6B:57:FD:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F0G9doUTjcUdWmsM03gPRmtX_RM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/df292d-959b-4ead-9348-29f09d893ae7/1/F0G9doUTjcUdWmsM03gPRmtX_RM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:ea:85:83:f2:b8:a2:3d:1b:f4:9c:b0:03:58:4d:67:c1:14:
d0:fa:2b:11:bc:17:15:cb:5b:49:11:73:d0:0f:ae:6b:fc:a2:
d8:ef:eb:aa:2d:16:a5:50:0f:73:36:81:89:19:85:97:15:78:
0b:e6:1b:38:58:de:8a:ed:cb:eb:71:e4:3f:f6:57:dc:ad:74:
ae:45:3c:10:91:3e:26:54:d5:08:ac:7b:51:bd:9e:4d:cc:f1:
50:47:7c:f2:6c:3c:dc:23:6c:25:c1:88:f7:08:f5:b2:d6:c1:
17:67:a1:0d:08:bf:67:ad:6a:27:e0:5a:94:9c:f0:17:ed:f0:
77:7b:9d:a1:8b:90:f9:31:06:f4:61:f1:c5:25:60:f1:c1:f1:
69:3c:0f:70:52:68:ba:a4:31:08:a8:8d:0c:ad:8d:76:4e:b3:
eb:6b:62:9c:82:6e:eb:3d:94:6e:3a:d8:41:f0:38:56:95:3b:
73:a8:49:13:97:18:01:77:d6:1a:d0:59:09:3b:bc:75:d4:1a:
1a:1c:20:40:dd:c5:e6:10:67:8c:17:0a:b5:94:53:82:e4:b1:
db:42:6c:7a:5b:3c:84:e6:9d:d5:a7:cd:43:4f:4a:39:7d:97:
33:fd:23:01:bc:cb:40:ae:9b:e4:ff:9a:dc:76:be:2a:bf:4e:
02:d2:e7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:05:51 2025 by rpki-client