Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
File: 22QfyQPVtMyXFkkySks05PgkIsU.mft (raw, json)
Hash identifier: E6vqTJIkGb1QQhw+5s6UEwi/SNnIWV0CtwjcjKNl7wk=
Subject key identifier: AF:11:5E:F8:6F:89:65:A8:A3:F7:85:2D:AC:F2:DE:66:0A:34:D9:E7
Authority key identifier: DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
Certificate issuer: /CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Certificate serial: 0197B6A0DDA7169AB7E7AFA0A27D8B2B0AC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:25 +0000
Manifest this update: Sat 28 Jun 2025 13:01:25 +0000
Manifest next update: Sun 29 Jun 2025 13:01:25 +0000
Files and hashes: 1: 22QfyQPVtMyXFkkySks05PgkIsU.crl (hash: IrWa6LJxiemx3FMDLuipGgY+NgJMkVSBr8lwD9ZyuUI=)
2: 825nFrz3u6HGU-YZ6CH8LLOr_XE.roa (hash: jl6qorIEanDMcWiaTBA0q+h0ZRVRtDHwIH2xPi3aeGw=)
3: 8mzSvC4v5Ni41t8FB8aiAfYjJcI.roa (hash: QyI7qjDJOZQBTsa2Xsr+TTNwnCK4F/pFTnriXbmvjf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:dd:a7:16:9a:b7:e7:af:a0:a2:7d:8b:2b:0a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db641fc903d5b4cc971649324a4b34e4f82422c5
Validity
Not Before: Jun 28 13:01:25 2025 GMT
Not After : Jun 29 13:01:25 2025 GMT
Subject: CN=af115ef86f8965a8a3f7852dacf2de660a34d9e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4c:b3:10:fb:df:a3:d8:de:14:92:09:61:83:
25:e6:e1:85:28:61:11:0b:f7:c5:7e:24:9f:7d:d3:
18:2f:a5:39:d8:d0:da:dc:2f:36:77:69:16:f0:c0:
29:b7:64:02:3c:86:93:43:61:fd:89:cf:1d:5f:80:
a6:1a:81:b3:de:51:83:78:ac:62:e5:fd:32:ec:1c:
c6:fe:50:c6:15:f7:95:a3:9a:af:98:57:85:64:4a:
86:82:07:67:3f:39:a2:c7:40:5e:51:20:6f:bd:90:
ab:de:65:37:27:b4:18:e0:4d:17:ea:10:f1:fe:b3:
12:57:ea:5a:56:38:94:e9:cd:b9:b1:df:df:95:59:
ce:76:2f:b0:fd:38:4b:73:9a:9b:31:50:a9:02:2e:
fb:91:2f:ff:2f:6d:a6:bd:6a:df:75:a6:52:9d:1e:
bb:16:10:96:24:a9:90:49:12:ee:c3:2e:4b:6c:6d:
62:18:8a:fd:7c:c2:e7:5a:9a:d4:c0:7b:58:45:f1:
26:0e:90:c2:0d:6e:d0:a0:6a:62:91:31:5a:f6:9f:
ef:48:fc:cd:2d:42:3a:bc:d7:18:c9:17:95:65:1b:
e8:a7:ad:2c:2a:5c:cc:88:fe:f7:02:21:32:34:04:
c9:da:bd:e3:26:1c:39:4d:b3:4b:69:82:81:18:92:
c8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:11:5E:F8:6F:89:65:A8:A3:F7:85:2D:AC:F2:DE:66:0A:34:D9:E7
X509v3 Authority Key Identifier:
keyid:DB:64:1F:C9:03:D5:B4:CC:97:16:49:32:4A:4B:34:E4:F8:24:22:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/22QfyQPVtMyXFkkySks05PgkIsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/10095f-fd35-4a06-8f39-7fee591a209c/1/22QfyQPVtMyXFkkySks05PgkIsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:54:e8:e8:b0:bd:5d:91:b9:66:2f:51:7e:56:52:23:68:89:
1c:85:ba:63:fd:dc:d4:ba:ef:56:ee:38:4e:6e:79:2f:f5:47:
9b:d2:f3:14:a8:93:6f:42:0a:ac:6e:0a:38:c3:4d:0e:f5:a4:
1a:c6:f3:21:d1:a1:d8:34:e2:ad:7d:b7:0e:fc:de:b7:e1:ce:
e2:4c:fe:c8:1f:71:3c:77:7e:44:07:b7:18:cf:34:0b:bf:1a:
38:ce:ce:1a:f3:4b:22:e0:97:e5:ee:97:14:7e:a1:be:fa:17:
01:dc:10:e9:9d:14:aa:a2:fc:ba:61:1b:6f:87:f6:70:d8:8b:
a4:db:37:11:7b:6c:92:0d:f2:c9:02:96:d4:46:da:e2:a5:84:
a3:ad:4e:13:80:20:99:ac:ce:b8:74:a2:53:04:5a:b8:d3:58:
f7:d7:7b:d6:e7:28:9a:73:cf:4b:71:98:48:de:19:58:68:e4:
9f:75:46:94:37:2a:77:66:db:93:dd:15:28:22:63:ab:29:1a:
fc:b5:18:83:b6:48:fc:de:bb:84:02:99:ae:bc:4e:86:3d:ff:
cd:9c:e9:14:f8:4d:e1:15:5a:dc:5f:9d:59:54:97:19:97:1f:
65:db:a8:80:ff:53:02:f8:9d:26:93:1f:4d:be:7a:75:f2:37:
50:fd:01:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:47 2025 by rpki-client