Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
File: _4ztOwmpBeuWhpxY9mtPi1kVA7A.mft (raw, json)
Hash identifier: Ne8z6UiIuP9ZEZVmRB2TEHFbW2z6V4SP1mTRWKBIfjE=
Subject key identifier: ED:44:87:7E:3D:AF:77:0A:75:07:D1:DD:5E:CA:C7:35:23:D8:6E:77
Authority key identifier: FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
Certificate issuer: /CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Certificate serial: 0197B6A09201417C45006BCCCDBB8CC14B10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:01:05 +0000
Manifest this update: Sat 28 Jun 2025 13:01:05 +0000
Manifest next update: Sun 29 Jun 2025 13:01:05 +0000
Files and hashes: 1: _4ztOwmpBeuWhpxY9mtPi1kVA7A.crl (hash: zXOGUaitMYxNlN+9XMPnE+ZlTZpkDtuBSXoAgbcfSdw=)
2: xOQc72Z94YWZ0x4WXA9ac2DfTkA.roa (hash: JOazIpcEkdoXe7dHpDJ/1wfs3pC+0YfgMICoYiHagPk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:92:01:41:7c:45:00:6b:cc:cd:bb:8c:c1:4b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff8ced3b09a905eb96869c58f66b4f8b591503b0
Validity
Not Before: Jun 28 13:01:05 2025 GMT
Not After : Jun 29 13:01:05 2025 GMT
Subject: CN=ed44877e3daf770a7507d1dd5ecac73523d86e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:26:de:da:ca:47:65:f0:dd:f7:10:cd:37:b9:
26:02:10:95:b7:35:42:0e:99:58:57:8f:8c:3d:73:
7e:a8:80:7f:be:a6:a1:31:9e:fe:04:8c:a4:8d:6b:
cb:ba:61:82:f0:c9:ca:ed:45:c3:08:5b:23:1b:fd:
4c:69:34:42:95:be:a0:3c:13:e1:a6:58:c3:f8:4c:
52:20:00:93:10:0a:d4:7e:c5:ab:14:68:8a:51:43:
a7:6a:bd:04:86:07:a5:39:5c:51:15:2e:96:e0:3a:
07:e2:37:91:79:df:bf:bb:15:a3:b2:bc:8b:32:78:
ae:b3:76:9a:03:aa:38:c3:17:65:b4:9c:2b:8e:4d:
04:56:3b:f2:bd:c7:3a:ee:12:e4:e0:3a:59:cc:90:
cd:96:2f:02:dd:5e:47:2b:67:60:a8:ff:69:a3:7f:
97:50:5d:d6:6b:c5:f7:d0:04:82:32:9e:47:07:15:
1b:77:05:0f:c8:ea:d8:5e:1a:b3:f0:22:69:70:b5:
9d:e1:bd:01:fc:b5:b2:94:6f:45:8f:8d:3c:71:0c:
ab:fc:86:7b:71:5b:e8:ea:ba:bc:17:0e:02:7d:1c:
58:36:07:98:bd:3c:6b:82:07:9d:f8:cd:47:a1:77:
3b:f8:0e:2b:15:81:f2:5c:dc:6d:ef:64:e3:a1:68:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:44:87:7E:3D:AF:77:0A:75:07:D1:DD:5E:CA:C7:35:23:D8:6E:77
X509v3 Authority Key Identifier:
keyid:FF:8C:ED:3B:09:A9:05:EB:96:86:9C:58:F6:6B:4F:8B:59:15:03:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_4ztOwmpBeuWhpxY9mtPi1kVA7A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/01608d-08f1-4ab5-a926-be561ccded2c/1/_4ztOwmpBeuWhpxY9mtPi1kVA7A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:71:d9:49:c3:b9:91:7c:b9:15:4b:50:f5:5a:f4:cf:07:69:
5f:91:98:63:02:2a:8e:bd:0e:bb:70:91:97:78:8c:fc:fb:25:
a4:ff:93:69:d1:b5:15:cb:79:17:8f:4d:0a:b5:63:39:03:91:
ee:b9:88:d2:cb:52:db:41:f5:51:c0:af:89:56:7b:c1:c2:a8:
37:06:7c:8c:8d:1e:a8:cc:1e:53:2c:95:4e:a8:fb:24:91:96:
1c:31:47:94:94:a0:6f:a4:3a:eb:62:35:14:cc:b8:f9:fd:32:
13:84:08:cf:2e:67:ec:a3:e5:7a:85:60:e6:ad:3c:10:4a:c7:
6b:e7:fa:ee:be:93:75:2d:25:e3:c8:34:ec:20:73:ed:70:e3:
3d:43:07:16:b3:74:c7:17:79:96:ae:06:c3:f0:25:90:f6:d5:
ac:09:b0:02:9c:25:d6:5f:36:f0:e9:91:02:3e:f6:26:fd:a4:
e3:12:fb:bd:45:fe:0d:c8:05:02:9b:8e:b9:36:aa:3f:6e:ba:
5d:16:f7:31:96:3e:72:53:fd:ef:cd:02:0d:dd:00:c9:04:74:
31:91:5b:a5:46:5e:23:4f:b8:bd:13:de:8a:03:85:88:ce:31:
c4:8a:e5:7b:32:57:aa:26:fd:96:78:16:ed:c2:d1:4a:9e:d5:
c2:c4:e3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:06:40 2025 by rpki-client