Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
File: Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft (raw, json)
Hash identifier: 42CdzCCDiLfYO6G+fILWA8RsuEjdzDBqsmC7t1anxaI=
Subject key identifier: 94:59:9A:45:28:E3:B0:2B:38:44:9E:68:BF:00:9E:94:33:ED:41:D9
Authority key identifier: 15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
Certificate issuer: /CN=15fedc1705576d97fe4ad20291de198473d8156f
Certificate serial: 0198304BDEA61921610C5B6E0DB697F8645C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
Manifest number: 15F3
Signing time: Tue 22 Jul 2025 04:02:15 +0000
Manifest this update: Tue 22 Jul 2025 04:02:15 +0000
Manifest next update: Wed 23 Jul 2025 04:02:15 +0000
Files and hashes: 1: Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl (hash: PWCyxT+E0+sC3QsiGqnTJXJoeAZm6jBJcTxtbLA3vXY=)
2: Qv45l9CC_OtB7OS_57aAR1sJyvc.roa (hash: Mv6sqdxR24sbzw3gEqGiuaVF1p5QjBnxJTiW3StRP2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Jul 2025 04:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:30:4b:de:a6:19:21:61:0c:5b:6e:0d:b6:97:f8:64:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15fedc1705576d97fe4ad20291de198473d8156f
Validity
Not Before: Jul 22 04:02:15 2025 GMT
Not After : Jul 23 04:02:15 2025 GMT
Subject: CN=94599a4528e3b02b38449e68bf009e9433ed41d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8d:a7:a5:33:3f:c9:dd:e0:30:70:28:28:1a:
a5:2a:5a:77:ed:84:f5:8e:ca:87:55:d2:c4:ee:f9:
de:c2:51:10:72:e3:b8:c5:f3:d9:31:9b:ce:27:0b:
f5:e7:82:21:15:73:3e:1b:fa:14:61:fe:bc:df:9a:
33:13:96:1d:45:9e:96:2d:d1:d5:37:59:a0:2f:71:
fb:47:68:4d:fb:35:3c:05:3f:67:bf:1b:7c:54:3a:
d6:b1:6d:0a:89:6a:41:5c:96:9d:1c:d2:36:7e:fe:
28:13:74:dc:f8:d5:d1:e0:ba:3a:78:26:b6:ab:76:
9c:8e:8a:6f:1e:7f:d4:79:11:cd:50:5c:14:1a:e5:
1a:51:58:ea:d1:97:b1:6d:b3:7e:fa:92:70:09:55:
ce:93:f5:a4:09:79:4e:e4:db:d8:2c:23:70:22:ee:
ff:33:20:32:9f:35:b2:0c:a7:dc:64:1d:3f:b1:34:
e5:35:cf:af:97:fd:16:91:65:f6:f4:f3:72:8a:d6:
f8:9f:a7:db:c9:b0:80:0a:31:fb:5e:55:56:ec:70:
a7:a0:0b:be:b5:77:97:7a:96:bf:14:ca:9d:74:13:
92:80:e5:75:e5:6c:8c:e9:ec:0d:7b:c9:79:ab:17:
3a:34:fe:f8:55:07:79:e7:4f:d6:c3:1c:f1:c6:13:
ec:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:59:9A:45:28:E3:B0:2B:38:44:9E:68:BF:00:9E:94:33:ED:41:D9
X509v3 Authority Key Identifier:
keyid:15:FE:DC:17:05:57:6D:97:FE:4A:D2:02:91:DE:19:84:73:D8:15:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ff7cFwVXbZf-StICkd4ZhHPYFW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/e27eb8-af64-446e-88ec-d472e49f591e/1/Ff7cFwVXbZf-StICkd4ZhHPYFW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:36:dd:78:f2:12:9b:c0:e9:e7:e6:ba:5e:87:6f:de:dd:83:
00:cd:a5:58:85:17:e3:d8:6c:a6:b6:0d:60:99:37:55:8d:49:
00:47:0a:3e:f5:ae:1a:17:56:54:b4:1b:5e:0c:2d:57:22:93:
bb:41:bb:f8:c6:07:02:98:64:76:69:61:ea:4d:ef:66:20:05:
ee:f2:0f:4f:a4:94:48:de:32:c2:1d:a5:cf:6d:76:40:f0:08:
7c:9f:56:ea:bf:a8:77:67:bb:81:f8:b1:5f:a8:40:e4:2a:15:
92:2d:25:d9:0a:98:08:27:1f:b8:57:3f:6b:ff:d0:93:4f:5b:
ea:50:15:b0:ee:79:6d:b3:0f:da:da:41:f7:6b:ac:1f:f8:46:
9b:55:95:39:af:0a:f4:70:b2:1f:d6:15:81:2d:40:bb:2b:5b:
cd:24:93:4a:7a:63:77:8a:57:f6:6b:30:3d:39:0d:01:00:8b:
05:b1:5f:70:33:0b:20:2d:83:42:7a:2d:26:0a:38:ec:67:ea:
a8:db:1d:d6:0b:5f:5a:36:da:c9:27:e1:8e:9c:f0:f2:d6:ef:
b6:9b:7c:30:f2:9b:95:50:cc:c1:ba:40:7b:1d:38:90:b4:ad:
6c:72:8a:22:60:e8:e8:fc:89:eb:47:ef:db:6d:a0:ff:eb:ae:
8c:58:0a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 22 11:46:01 2025 by rpki-client