
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
File: fsXxiW6aRDV8nXis831I9HgFINk.mft (raw, json)
Hash identifier: CcHWeGZ/hRTPrUrY4np6m+hcozmzMtS1tryf3eZDpWI=
Subject key identifier: 44:E6:54:93:37:C0:B2:22:34:FE:32:61:66:66:95:BA:28:6D:23:5A
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 01984966CEB7577246A2C56AA27FF0F0A65C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 01:02:11 +0000
Manifest this update: Sun 27 Jul 2025 01:02:11 +0000
Manifest next update: Mon 28 Jul 2025 01:02:11 +0000
Files and hashes: 1: fsXxiW6aRDV8nXis831I9HgFINk.crl (hash: 5HHnsuOIl276VFi9HxklTO9aFTQOhNls0AgrCCxrDFY=)
2: tIBVHEbpT3B92jmv17nHEdfPfME.roa (hash: F4q9q1phtloOjlG43lA2x7BlugORaBByvlUxXUgAa14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:ce:b7:57:72:46:a2:c5:6a:a2:7f:f0:f0:a6:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: Jul 27 01:02:11 2025 GMT
Not After : Jul 28 01:02:11 2025 GMT
Subject: CN=44e6549337c0b22234fe3261666695ba286d235a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8d:86:60:9c:53:09:62:7d:03:e2:4d:ca:96:
48:b5:54:92:d7:f6:62:ca:11:5a:2c:86:59:27:ff:
4f:7e:da:b5:15:7a:35:40:49:6b:8d:f2:b5:5d:d3:
00:9e:37:ef:72:1b:17:4b:64:cd:7a:33:20:ff:00:
5a:5f:96:57:e9:2e:4c:30:da:97:f4:37:33:ea:f7:
2d:c3:6b:59:76:ca:10:5c:f4:95:94:fb:68:01:eb:
f2:f2:73:22:58:a3:0e:6f:4d:be:55:af:21:ee:e8:
1b:a5:ef:cb:be:0d:05:17:5c:8e:71:15:c1:79:37:
09:a0:7e:05:8d:ab:e6:f8:22:ae:a3:8a:c3:4a:57:
d6:30:c7:0a:6a:c2:83:1f:4b:7b:f3:58:a3:be:70:
ff:7c:05:fa:5f:15:f1:8e:60:59:4c:cd:95:d8:51:
f4:16:e6:1f:4f:2a:eb:17:6e:ef:ce:f8:d6:77:c8:
7e:4c:99:09:2a:1e:85:35:77:e6:b7:b9:91:8f:01:
e3:1d:fc:c9:8e:14:3f:22:9b:c9:36:c9:92:34:f8:
53:1b:c8:bd:4d:d6:00:00:c2:19:93:8a:47:d5:95:
94:28:89:a8:8c:63:17:50:66:94:1d:1c:b3:a2:e2:
1c:81:81:71:3b:aa:6c:cb:64:e7:c4:57:51:fe:bf:
83:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:E6:54:93:37:C0:B2:22:34:FE:32:61:66:66:95:BA:28:6D:23:5A
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:c6:4c:5b:e1:de:76:d7:10:26:74:2d:8a:27:83:39:6c:c2:
4d:6d:73:df:c9:fd:e9:92:22:6f:6b:2c:4d:d9:e9:3b:2c:57:
45:86:c2:3b:dc:21:1e:12:91:61:8f:a3:7d:07:3f:38:df:a8:
c6:1f:20:9f:c7:e3:b6:d8:45:1d:75:e3:d0:dd:ef:c1:68:8a:
6f:2d:10:a7:76:ba:f4:2d:9f:32:d8:79:61:b0:33:83:92:d7:
46:32:94:40:84:8a:17:21:d1:61:a0:40:39:65:d0:2b:90:c1:
5c:7a:99:fa:1c:bd:6d:ae:c8:f3:08:cb:5a:60:69:26:79:8e:
b1:55:d0:2a:70:54:aa:c1:7b:53:67:7b:07:c7:44:4f:c3:34:
5e:56:64:bc:63:7d:00:84:28:97:b3:bc:4c:ec:43:b7:87:9c:
e9:f9:7c:b5:1f:f0:e4:ca:00:06:2e:c0:24:3d:c4:28:ff:af:
5f:e9:68:d1:15:5d:02:1d:4d:e7:84:0d:f7:3f:88:95:8b:12:
bf:89:ab:c5:5c:aa:22:bd:f2:fd:d6:f8:da:56:75:da:a8:b2:
8e:17:5a:51:c7:bb:eb:96:64:ce:85:3d:2d:a5:bc:5c:91:a4:
bc:8e:50:25:73:64:b7:cc:f6:6b:11:91:7e:29:41:d0:39:01:
f7:de:de:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:26:14 2025 by rpki-client