Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
File: _l28QbEed7xEvSxzVVS1tCWNDDM.mft (raw, json)
Hash identifier: pxrSeO48elBORRZv24EgwWvjGnCZSM8ieTyAY+7Blsg=
Subject key identifier: 13:B3:AE:8B:BD:89:BB:46:C1:EE:A3:19:87:F6:DB:DF:6D:67:9B:6C
Authority key identifier: FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
Certificate issuer: /CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Certificate serial: 0197733F78637DA8F09607A56695B264ED29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 11:00:28 +0000
Manifest this update: Sun 15 Jun 2025 11:00:28 +0000
Manifest next update: Mon 16 Jun 2025 11:00:28 +0000
Files and hashes: 1: QQYnKZZEKh0t39rLRqceu8xA4vU.roa (hash: PxxqnNy49Cu4ltRHNTmmrI+SwKZQqPOvx1a9kq3y6xs=)
2: _l28QbEed7xEvSxzVVS1tCWNDDM.crl (hash: vcmaulJ518mCkjJPpo1RENy+dvybhhQtLdRQb27D6sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 11:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:3f:78:63:7d:a8:f0:96:07:a5:66:95:b2:64:ed:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5dbc41b11e77bc44bd2c735554b5b4258d0c33
Validity
Not Before: Jun 15 11:00:28 2025 GMT
Not After : Jun 16 11:00:28 2025 GMT
Subject: CN=13b3ae8bbd89bb46c1eea31987f6dbdf6d679b6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:11:7b:81:aa:1d:d8:cf:07:7d:da:8e:9e:
a7:79:4b:0e:28:c8:62:03:20:78:6f:21:bd:88:41:
85:c3:bb:b6:c4:e9:81:76:16:43:04:06:d7:44:54:
f1:a2:eb:bf:ac:47:ee:7c:95:b1:63:a5:9a:fb:d5:
a7:36:9e:cd:65:04:90:ca:80:55:29:6d:db:c0:a5:
85:f0:a0:e8:f8:54:e2:b2:5c:cd:83:b8:56:e5:d2:
62:c7:dc:11:d3:fa:84:50:78:ce:5d:b5:bc:4f:94:
a4:a0:3a:4c:f1:c3:dc:03:3b:78:9e:87:78:a1:f6:
c5:fa:34:c3:9c:b6:2d:23:f4:85:ab:8b:2d:c2:24:
33:d3:4c:77:9b:67:7e:64:45:f5:c2:b5:ef:26:98:
39:50:b9:64:1c:49:f6:cc:73:0c:6c:b0:bf:62:03:
3a:20:41:fe:98:56:bf:7b:df:12:0c:da:3c:5e:3a:
bb:f8:d9:50:c8:26:85:1e:eb:a1:03:97:21:2d:62:
8f:a1:90:5c:4c:bf:45:fc:e7:d0:0f:bd:4e:15:9a:
e7:55:d6:53:4a:63:ff:cb:79:4d:d6:82:c4:13:17:
7e:fe:b3:06:0d:9b:fd:27:6e:66:fc:2d:91:88:66:
8c:a1:42:c0:d2:ff:b7:1b:c9:97:a4:bf:4d:70:31:
b6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B3:AE:8B:BD:89:BB:46:C1:EE:A3:19:87:F6:DB:DF:6D:67:9B:6C
X509v3 Authority Key Identifier:
keyid:FE:5D:BC:41:B1:1E:77:BC:44:BD:2C:73:55:54:B5:B4:25:8D:0C:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l28QbEed7xEvSxzVVS1tCWNDDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/084d33-9fed-4620-b46c-88a63148026f/1/_l28QbEed7xEvSxzVVS1tCWNDDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:b7:60:a2:3b:37:5c:2d:aa:1e:fa:40:50:6a:39:79:07:fe:
28:e0:39:ea:a1:b7:cd:d0:6b:c1:ca:c6:d1:c4:ca:d7:8b:55:
f2:cd:d5:55:41:4d:54:9e:73:2e:29:d7:05:1b:ec:46:43:3d:
ab:1d:de:d9:e2:b7:25:a2:47:6d:8c:57:bd:d6:29:15:3e:e2:
f0:75:d4:60:87:ee:90:fd:d5:40:5d:e9:eb:08:b3:0f:b4:d5:
03:90:5b:f3:92:6b:b2:6d:56:eb:19:ee:cb:0f:75:fe:1c:25:
cf:cf:33:c4:51:d8:7f:3d:a3:cb:a9:16:37:2a:b1:d8:9b:1c:
3a:0a:5e:54:f4:0a:36:52:92:7d:a3:99:bc:bf:f6:a4:c0:14:
53:f2:1f:c2:16:91:9b:d3:11:82:a4:9d:a4:22:ca:34:52:ed:
cb:34:42:0a:f6:6e:99:74:fc:ea:e3:1e:dc:b6:04:d2:76:30:
2d:77:48:f3:c8:2b:ce:52:c2:9c:34:34:36:84:b8:17:3e:79:
ef:17:c1:82:a0:da:be:4b:d8:4f:cb:33:36:ec:43:bf:1f:e1:
fd:e3:29:1e:2b:f4:72:a3:bd:12:6b:38:9d:88:6a:d8:cc:ca:
a8:1f:d7:64:c1:73:2b:50:fc:8d:2b:c7:f4:7f:fe:70:f0:e0:
4d:4e:15:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:42:25 2025 by rpki-client