Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
File: FS_tsCWmy9JIaEGaDLVinUhjWRc.mft (raw, json)
Hash identifier: nE2gr4LmS8ZRC99Jsy5PCWa4fWnpEKZAiCoiKQDAmo4=
Subject key identifier: 22:49:28:82:6A:C4:9D:89:96:46:DE:DC:A0:02:84:0C:E1:96:7B:AD
Authority key identifier: 15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
Certificate issuer: /CN=152fedb025a6cbd24868419a0cb5629d48635917
Certificate serial: 0197C9F1949EF92E395D287280FDB96D9C8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 07:02:21 +0000
Manifest this update: Wed 02 Jul 2025 07:02:21 +0000
Manifest next update: Thu 03 Jul 2025 07:02:21 +0000
Files and hashes: 1: FS_tsCWmy9JIaEGaDLVinUhjWRc.crl (hash: 9zxs+dlUQa/d7AxX5nJ8vQV930F+fkbItI4yXmbY+7M=)
2: H3v3Ir1uutigtDSCgvKQTveRQl0.roa (hash: 4A8WQpggwPpKrs7preaxNPkzpvVHS+MZyP8Wyyn6QVw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:94:9e:f9:2e:39:5d:28:72:80:fd:b9:6d:9c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=152fedb025a6cbd24868419a0cb5629d48635917
Validity
Not Before: Jul 2 07:02:21 2025 GMT
Not After : Jul 3 07:02:21 2025 GMT
Subject: CN=224928826ac49d899646dedca002840ce1967bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:d4:7f:34:ca:ab:d8:ed:39:27:40:80:97:37:
af:d6:16:bc:f6:63:76:6c:7f:b2:36:2b:e5:53:3a:
8a:07:40:e6:b9:24:dd:c6:8f:41:74:c2:72:f5:a0:
8c:d7:a2:38:4a:dc:0f:18:30:48:1f:9a:78:6f:18:
0f:9a:57:e0:04:f0:2a:b7:56:2e:f5:06:ec:92:23:
02:41:ce:49:14:6a:64:bd:73:a9:86:dd:a6:b6:98:
03:f3:2a:05:db:61:d8:19:e6:18:2e:93:e9:04:95:
32:8f:b9:6d:71:8b:2c:1a:bf:85:0c:2d:54:c0:da:
1f:71:4b:88:2f:56:49:14:d6:98:91:8e:6f:af:d1:
10:74:89:b1:d1:48:36:29:0f:44:74:4f:78:c9:49:
1b:6d:88:c9:df:dc:f9:0b:24:d7:e5:1e:2f:1e:fd:
b2:3c:ab:b1:b3:1a:a7:9b:d4:bd:9d:c4:8e:1e:c2:
94:05:36:9d:5a:6e:dd:e0:d6:08:22:a0:1a:6d:50:
03:01:66:49:81:35:81:e2:9f:32:4e:3f:d7:b4:4b:
0b:04:16:cc:66:b1:3b:ca:17:32:d1:57:f7:f4:0a:
d5:2b:8c:b7:8a:15:3b:dc:c3:c5:64:a6:23:cd:9f:
3e:62:e9:46:0a:50:26:77:0e:08:8a:a7:73:61:7c:
e6:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:49:28:82:6A:C4:9D:89:96:46:DE:DC:A0:02:84:0C:E1:96:7B:AD
X509v3 Authority Key Identifier:
keyid:15:2F:ED:B0:25:A6:CB:D2:48:68:41:9A:0C:B5:62:9D:48:63:59:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FS_tsCWmy9JIaEGaDLVinUhjWRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/a59b6d-0239-4211-9bbb-1a21219e9100/1/FS_tsCWmy9JIaEGaDLVinUhjWRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:fd:7d:a1:6a:a4:85:9c:2b:61:03:d3:e4:69:57:54:a1:97:
36:b0:bf:ad:65:36:24:62:7c:da:53:f3:56:50:16:e0:b5:44:
d9:0b:0f:2d:23:32:67:8b:39:35:13:f5:74:d4:64:48:72:ea:
97:b9:f7:8c:d6:2d:71:e2:cc:86:de:8f:24:35:4a:b2:4e:02:
91:31:8f:53:54:99:53:8a:f4:27:43:94:52:03:dd:c4:f5:cb:
12:5d:b3:41:b4:e7:d0:0a:b7:01:81:b5:ae:cf:6a:c0:4b:f7:
0c:ee:96:49:e6:69:ba:76:fa:ff:83:d0:de:13:f6:41:b1:82:
4d:a6:63:15:8b:d1:41:96:a7:ee:72:1c:f8:6f:e4:fc:65:75:
88:67:03:c5:99:47:70:51:2e:eb:68:6c:d2:2a:45:ea:71:5f:
b8:32:e8:d2:9f:91:0b:23:01:39:3b:4a:18:d3:d5:78:42:27:
02:30:c6:9e:bc:6a:36:90:10:ed:01:8c:6c:b6:70:ed:92:c0:
8b:06:77:dc:00:ad:ad:25:d9:ae:05:8d:12:3c:01:ae:29:2f:
5a:9a:d8:89:2e:05:f0:09:e8:e1:c9:cb:32:ea:04:f9:b8:2a:
37:fa:6a:c8:e1:76:75:42:c8:0c:52:8f:c9:c1:ae:aa:fa:e8:
28:a5:be:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 13:41:09 2025 by rpki-client