Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
File: fPl3gtbyAqcBg2capjDHOrozMH4.mft (raw, json)
Hash identifier: mz4eBPyKbQRJKtewo9aWdcv2uh28xMRIrd9PcKBoSoI=
Subject key identifier: 89:8C:68:65:C0:35:CF:4C:1B:B3:3A:49:83:57:4F:C9:0F:2B:A4:7B
Authority key identifier: 7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
Certificate issuer: /CN=7cf97782d6f202a70183671aa630c73aba33307e
Certificate serial: 0197B70E4E0390ED244B2FAED089C38E39C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:00:57 +0000
Manifest this update: Sat 28 Jun 2025 15:00:57 +0000
Manifest next update: Sun 29 Jun 2025 15:00:57 +0000
Files and hashes: 1: fPl3gtbyAqcBg2capjDHOrozMH4.crl (hash: QCbxP5UVFsvpzs8J84Zl5otwYc8RscTUfEPUAe3ilH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:4e:03:90:ed:24:4b:2f:ae:d0:89:c3:8e:39:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cf97782d6f202a70183671aa630c73aba33307e
Validity
Not Before: Jun 28 15:00:57 2025 GMT
Not After : Jun 29 15:00:57 2025 GMT
Subject: CN=898c6865c035cf4c1bb33a4983574fc90f2ba47b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6f:62:db:4c:ba:a2:4f:82:7a:61:9b:54:45:
1b:8f:35:34:e7:72:6a:ef:37:9b:c7:41:d0:c3:e1:
df:07:d2:8f:9c:7b:61:80:ec:14:d4:4a:32:5b:bb:
d8:92:ac:63:02:82:e6:42:ea:7c:6b:ad:44:27:bc:
b1:46:97:93:35:32:8f:fd:fb:3a:1d:bd:3c:a4:a1:
51:35:c1:d5:04:b9:6e:1b:c3:1c:b2:2d:df:e5:61:
42:85:e4:ef:5d:05:91:b5:6d:7c:fc:86:32:62:cc:
70:59:74:18:d0:b3:3b:18:4a:c9:27:30:0a:33:66:
7e:f8:3f:e5:73:58:b3:cf:75:31:ce:56:e3:22:02:
a0:b4:f9:85:4e:6d:1b:c4:33:b2:0f:63:a0:ff:4a:
d9:52:80:1f:a3:d2:06:f5:b5:86:28:4e:51:66:3a:
55:77:bf:c5:0f:42:08:ed:8f:c7:7b:ad:d6:f2:0b:
15:c1:a0:56:9b:1f:41:42:49:44:2a:44:06:99:a1:
de:c5:35:41:76:3f:24:98:dc:32:67:db:5b:bc:09:
d2:d8:16:ef:48:b8:77:7c:eb:3c:c8:be:26:39:53:
f1:a9:18:5f:ab:23:78:54:34:6b:f4:6c:60:58:3e:
32:ff:5d:d5:a0:ad:d9:84:2a:c5:84:3b:ba:cd:29:
09:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:8C:68:65:C0:35:CF:4C:1B:B3:3A:49:83:57:4F:C9:0F:2B:A4:7B
X509v3 Authority Key Identifier:
keyid:7C:F9:77:82:D6:F2:02:A7:01:83:67:1A:A6:30:C7:3A:BA:33:30:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPl3gtbyAqcBg2capjDHOrozMH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/15ed7a-d307-4a21-b86b-31a17b3d964b/1/fPl3gtbyAqcBg2capjDHOrozMH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:7f:a8:b2:23:38:c3:6d:de:3a:cd:da:72:f7:c0:ed:9b:52:
0e:6e:c7:73:b4:fa:70:13:ca:64:b8:70:69:f2:bc:53:7f:80:
53:e7:31:75:cd:1c:4d:02:e9:1c:a7:58:4e:5c:99:81:b4:b9:
33:84:53:f9:a5:37:5c:1d:09:f7:f8:48:2e:89:1c:b0:66:cb:
fc:9b:9c:11:a2:c8:e4:c2:05:61:e3:fb:d3:ed:80:e8:7c:b6:
ae:e4:a8:03:26:3d:ed:01:71:6e:60:84:b2:5d:ab:d6:30:8f:
34:76:93:a2:fb:d4:09:4b:68:10:bd:1f:45:c3:22:6c:de:78:
40:da:e4:a3:01:71:ce:5f:89:09:a7:7b:64:7d:c8:f1:f9:ce:
b9:08:d7:0c:41:96:57:8c:65:6c:d0:57:a1:2a:91:c3:ed:75:
52:ab:49:64:32:0f:5b:6b:13:85:9c:bd:47:8c:89:5e:f1:b8:
57:81:59:82:12:90:d8:b8:5f:9b:09:e9:c2:37:ea:59:07:4a:
6a:27:54:f7:26:d1:9d:26:90:83:4c:02:83:95:51:cf:84:dd:
c1:21:e7:97:f1:89:31:3e:c9:75:6a:03:83:8a:77:ad:a6:57:
6a:a1:7b:d9:4c:90:d3:61:ad:f9:f3:b3:2c:c4:17:11:d7:be:
ed:75:de:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:40 2025 by rpki-client