Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
File: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft (raw, json)
Hash identifier: PmHD52LGrTPhcj3/Bc2rqcQZTyjW3r/2z212qZfrJ4U=
Subject key identifier: 5C:6D:F6:1E:C6:7D:C7:7F:C4:E2:07:C9:F2:09:EE:D4:8B:EB:F4:17
Authority key identifier: 7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
Certificate issuer: /CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Certificate serial: 01978CFF21890FE403B662F69F5E2E0FDB1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
Manifest number: 15A0
Signing time: Fri 20 Jun 2025 11:00:19 +0000
Manifest this update: Fri 20 Jun 2025 11:00:19 +0000
Manifest next update: Sat 21 Jun 2025 11:00:19 +0000
Files and hashes: 1: W6ZuDAGnWoDaEzlWI7u6oQknSmA.roa (hash: OmbyY76V+595ZQjAafvVZcWcNGfzKgZ8Ut3VoJKhN9E=)
2: fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl (hash: NpGvrEyjJg2VjvboVnGkLB/kE9BL5l5Z8UA/A2rn8AE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 04:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8c:ff:21:89:0f:e4:03:b6:62:f6:9f:5e:2e:0f:db:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e13414bdc2312400dfa9f50650d51ee0443df16
Validity
Not Before: Jun 20 11:00:19 2025 GMT
Not After : Jun 21 11:00:19 2025 GMT
Subject: CN=5c6df61ec67dc77fc4e207c9f209eed48bebf417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:57:2f:b3:19:ce:a7:45:fd:71:e0:ec:10:
c6:d2:02:10:bc:43:60:93:ff:44:10:1d:9d:a6:e1:
1b:0e:40:b0:0f:06:6d:d8:90:0d:4e:e3:f8:98:31:
10:f9:fe:16:5a:ee:94:8a:18:22:a4:12:4f:86:eb:
50:cb:c3:c2:bb:54:fe:08:47:e9:71:8d:41:0b:46:
2e:84:17:24:d1:df:c9:d2:f7:de:46:23:e8:05:8b:
7e:33:18:58:f4:bb:88:84:98:a0:e0:9d:1c:58:d9:
f1:1a:79:d6:93:96:bf:80:59:f8:de:ad:c8:c0:9b:
17:15:f1:8a:19:1a:01:cf:07:e0:48:55:b4:b9:68:
13:a2:52:84:a3:9c:8c:23:68:f7:1e:a2:3d:b3:2a:
19:d4:9a:f3:28:fd:04:a7:8d:87:9b:1f:e1:21:be:
8e:11:08:23:6a:de:23:3d:4c:5d:4a:04:2e:52:0e:
b1:b2:da:ca:91:24:d8:66:4d:1b:98:1f:a5:56:17:
0b:cb:e7:93:79:91:90:78:db:83:e6:ce:94:f1:72:
1e:b1:90:c1:1d:ad:85:d6:7b:b2:eb:d0:76:28:1f:
2f:9e:97:c1:27:d9:58:8b:45:4d:e1:1a:a2:82:88:
60:12:a2:c9:97:aa:7d:a6:37:8f:b5:48:c9:76:4d:
38:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6D:F6:1E:C6:7D:C7:7F:C4:E2:07:C9:F2:09:EE:D4:8B:EB:F4:17
X509v3 Authority Key Identifier:
keyid:7E:13:41:4B:DC:23:12:40:0D:FA:9F:50:65:0D:51:EE:04:43:DF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/44c365-6ced-45d9-865d-04fcecad70ec/1/fhNBS9wjEkAN-p9QZQ1R7gRD3xY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:1a:a3:6d:11:b0:b2:0c:c4:8a:36:8b:cb:59:d6:23:13:45:
f7:87:7e:22:4b:38:d1:aa:72:74:d9:04:63:20:e7:f3:f6:63:
38:41:d4:45:35:64:01:95:36:da:4e:66:74:8b:a0:42:63:14:
d1:70:32:08:03:6c:e2:8e:17:2a:2e:5f:52:bf:14:fc:3a:40:
17:58:69:08:2a:06:94:72:52:04:05:1d:e6:b6:73:c9:2a:f9:
9f:a8:e9:5c:bb:46:cd:bb:62:21:49:46:4e:5a:46:23:84:b5:
27:1a:6d:da:eb:92:fe:9f:a2:87:ad:ec:01:14:e6:f3:5a:33:
21:7a:be:51:c7:8c:fb:14:88:77:d9:e9:38:1f:f7:f4:bc:c2:
3b:3c:14:60:b0:61:5c:20:53:33:92:c8:c0:8b:d3:86:d3:e3:
df:d9:a4:50:a3:e1:6a:ce:4f:09:f3:a4:c3:6d:ca:8f:ed:e8:
17:13:52:e8:ed:fa:13:04:1b:2b:b7:dd:bd:d1:fb:36:4e:af:
38:bb:6f:1e:95:67:ab:25:9b:ab:2c:d6:bc:62:08:35:2b:33:
5c:8b:e0:78:5f:4a:00:c3:b8:bb:5d:50:30:24:c1:9e:8a:8a:
53:d3:01:9f:3d:a2:95:6d:8e:67:f5:47:67:57:4e:e6:83:ea:
73:3d:55:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 14:34:57 2025 by rpki-client