Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
File: fiyz0KZBdpx4AcSBYSAVwsyztlU.mft (raw, json)
Hash identifier: wlJNaYG0HoUyK3zETP4SgYZX8fezm6sMQXuPPGYQkEc=
Subject key identifier: 95:AF:31:9B:44:99:77:91:6F:9A:A1:E7:4B:5F:69:71:A8:C5:64:0F
Authority key identifier: 7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
Certificate issuer: /CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Certificate serial: 01977941C25674F81CE767A6EB22E58DBE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
Manifest number: 1599
Signing time: Mon 16 Jun 2025 15:00:42 +0000
Manifest this update: Mon 16 Jun 2025 15:00:42 +0000
Manifest next update: Tue 17 Jun 2025 15:00:42 +0000
Files and hashes: 1: M3Ha07iuSnJt99v-sGLNUx8BBLI.roa (hash: IIpH3NsZ7PItLDv9GEILJ6qdrVTgVESMLfrKLW1hfuA=)
2: RP3f5WWvkrYQJc7jqMUs8Y1XTtU.roa (hash: hk9tzETRgkzSw8scjlpsIlP6fKBNwXAqFAfpPNKquL8=)
3: SinlQ5z34pUrW8vj7b8roBMhucc.roa (hash: l2JuiUg6/TaOO5OR8orwqynZnR5QYj967JWl5ck7FYw=)
4: fiyz0KZBdpx4AcSBYSAVwsyztlU.crl (hash: jRdt5Usmbsv7TnJr5xgPWpGAou1Z2WE/C5hHMDB9hkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:41:c2:56:74:f8:1c:e7:67:a6:eb:22:e5:8d:be:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e2cb3d0a641769c7801c481612015c2ccb3b655
Validity
Not Before: Jun 16 15:00:42 2025 GMT
Not After : Jun 17 15:00:42 2025 GMT
Subject: CN=95af319b449977916f9aa1e74b5f6971a8c5640f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:e4:ec:18:1c:8b:9e:17:db:2b:54:bd:39:5c:
93:8d:50:44:a6:17:ae:cc:2a:1e:39:cf:a8:cb:fe:
c1:da:a8:d5:f9:42:c3:96:68:af:fb:e1:ee:6d:ce:
fd:1b:e5:08:c4:bd:12:e6:be:63:dd:49:25:f6:b9:
01:aa:63:ae:55:e4:d6:cd:6d:0d:53:34:a9:fb:c9:
bf:36:3d:ce:2e:25:6a:92:e4:00:14:9f:be:87:23:
2f:ca:82:3c:c2:82:38:ec:34:b8:75:77:b4:25:f5:
02:bf:db:2e:68:ba:cb:d4:65:da:33:a1:23:f0:2b:
7a:c1:32:d2:67:c7:bf:d0:d6:03:a1:67:e8:f3:bc:
c3:52:25:56:2d:72:fb:f1:66:8f:a3:d8:df:ea:ab:
5e:bb:96:de:bb:cc:26:93:15:3b:ec:34:18:4c:48:
6e:6c:d5:16:89:6c:a4:33:88:48:e3:b7:5f:db:80:
53:ea:30:b3:d6:f9:ae:76:c4:c5:7c:b9:20:76:cd:
5d:8a:06:3a:d2:09:46:54:34:a6:ab:a3:00:52:e3:
65:8d:da:49:ca:17:e2:97:31:b0:f9:ab:b6:0e:41:
e4:c6:bf:e0:fd:e9:39:90:f8:57:b9:cf:2d:40:99:
97:76:9e:d9:17:a3:b0:ed:e8:c3:69:63:95:5f:b1:
88:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:AF:31:9B:44:99:77:91:6F:9A:A1:E7:4B:5F:69:71:A8:C5:64:0F
X509v3 Authority Key Identifier:
keyid:7E:2C:B3:D0:A6:41:76:9C:78:01:C4:81:61:20:15:C2:CC:B3:B6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiyz0KZBdpx4AcSBYSAVwsyztlU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/431df1-09f4-475c-a045-f5bb2843c89e/1/fiyz0KZBdpx4AcSBYSAVwsyztlU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:0e:88:90:c8:16:e1:0a:18:2e:e3:b0:69:ca:b9:d7:b3:e0:
16:3d:5b:2b:90:d4:74:8e:1d:e1:67:58:20:6d:d2:e6:e4:b0:
64:88:71:10:08:42:c9:86:52:36:90:99:65:b3:65:a6:9e:99:
09:77:e3:16:7e:5d:69:fa:8b:98:92:df:ec:e9:47:94:35:65:
59:84:3a:0c:1a:6b:54:bf:b0:2f:58:4c:a4:3f:0c:ca:ff:3b:
51:40:04:94:82:05:05:00:19:55:63:2e:58:4d:3d:4b:75:e9:
78:33:09:27:14:24:1e:9a:1a:d5:2e:33:75:94:8f:16:27:e0:
e9:69:93:6a:a8:04:a1:cf:b0:06:7f:49:76:83:ef:e0:fa:e4:
22:64:19:c0:8a:73:1f:96:8d:50:10:10:68:cd:91:78:74:85:
6a:32:3f:dc:25:7a:2e:c5:34:c4:30:14:c1:a7:02:29:d0:f8:
8d:a2:fa:16:09:bd:b1:4d:d5:f8:30:09:53:92:b5:36:a0:24:
c0:c8:47:33:57:e8:c5:f7:8b:69:9e:29:d2:07:de:fd:00:4a:
15:25:da:c5:36:b9:18:26:b3:32:89:5d:79:d7:ec:8f:7c:b0:
0b:90:9a:58:b2:0a:a9:5d:fb:33:cf:28:d7:d7:ad:ec:bf:91:
65:9c:9d:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:05:58 2025 by rpki-client