Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
File: FxnQvARM2qI0GAnQAPD8Th3ts0U.mft (raw, json)
Hash identifier: 9so9cIdodI0J9uagb64GYJ2VECa5/XFxPIp9QYSl0NY=
Subject key identifier: 46:32:5E:54:B9:5C:62:C2:A9:C4:4F:59:00:24:FA:02:89:5B:29:EC
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Certificate issuer: /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial: 0198499C446A2C99A596FE386B340D58C363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 02:00:34 +0000
Manifest this update: Sun 27 Jul 2025 02:00:34 +0000
Manifest next update: Mon 28 Jul 2025 02:00:34 +0000
Files and hashes: 1: FxnQvARM2qI0GAnQAPD8Th3ts0U.crl (hash: rRFz+Kv41kgHImMvfKUciB6miBrn6b5Hk1ji6nHH6OU=)
2: qrHcalRy_JXYvUIS1tkkzHH6ZPM.roa (hash: B5LhQQeMhbxhyP/euiUVZeJTjZ4f803srjRMUk59y8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:44:6a:2c:99:a5:96:fe:38:6b:34:0d:58:c3:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Validity
Not Before: Jul 27 02:00:34 2025 GMT
Not After : Jul 28 02:00:34 2025 GMT
Subject: CN=46325e54b95c62c2a9c44f590024fa02895b29ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:6a:b9:dd:72:6a:56:16:53:8c:c6:ab:0c:f2:
44:a0:c9:1a:ad:e9:12:88:1a:0b:ed:22:83:4a:7f:
d1:21:5f:24:2f:60:fd:f6:f5:93:cc:90:c8:68:f2:
af:c0:9d:2a:c6:3c:b5:a1:0c:25:0e:9a:ff:4e:9b:
5e:b1:b4:7a:d1:02:f4:fa:e9:8d:b1:98:ef:6e:53:
8b:74:8e:b5:47:11:d0:00:cc:43:dd:fb:0c:02:8b:
be:1e:e8:29:2e:48:9f:c9:32:59:e7:56:ee:87:0c:
08:8b:c2:65:cc:2e:73:3e:90:bc:90:81:0b:c9:94:
41:4c:cd:19:7f:71:ee:7c:2d:f1:65:11:7f:42:79:
e6:d7:6e:b3:c2:f8:9c:7d:17:a8:d4:62:9b:f5:f3:
27:e4:28:47:dc:77:59:b6:e0:5f:90:e7:a3:6c:a6:
8d:f8:ce:ce:90:9f:c7:b8:5c:e6:a8:db:0c:53:a7:
c6:23:2e:6d:ca:87:57:fb:80:cd:7b:b7:4c:4a:65:
10:e7:36:ab:3f:6d:bd:7e:ce:92:a9:36:61:23:6d:
24:86:0f:ef:93:19:3b:1f:f2:40:bb:9f:ec:9e:bb:
96:19:79:69:44:b7:02:d6:e7:e6:aa:1d:98:ed:bb:
3b:48:1b:20:16:72:71:e5:fe:7a:98:14:fa:20:70:
04:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:32:5E:54:B9:5C:62:C2:A9:C4:4F:59:00:24:FA:02:89:5B:29:EC
X509v3 Authority Key Identifier:
keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:27:a8:c2:9b:fe:e7:a3:8a:c2:f6:85:c5:a8:02:a2:fa:5b:
2b:a3:a2:13:19:b6:3d:de:42:3b:30:9d:50:77:ff:d8:3d:9c:
72:de:3c:6b:23:99:b5:0d:f3:b5:58:8d:86:68:84:1c:2a:6c:
e4:e8:20:cf:0b:cf:9e:c4:d3:5b:ab:9a:e1:96:79:8b:6e:f0:
7f:bb:11:61:03:8d:a2:6b:4f:a7:3b:5d:18:85:2e:59:79:f8:
4f:f9:a7:bd:c6:53:90:40:64:3b:7c:6c:b1:b2:ee:b8:29:32:
ec:5e:de:16:c8:70:f3:73:0b:0b:36:08:2b:b0:1b:4b:d5:79:
11:96:ff:53:e5:e6:5c:2b:c0:0d:14:7d:2f:83:5a:98:71:58:
83:6e:17:30:c0:57:ad:0f:d2:1a:3c:68:51:65:8f:b1:86:f2:
c3:c6:79:fc:51:40:d8:97:5d:86:79:f3:04:a0:eb:ef:35:e9:
98:c5:70:ae:c3:82:88:54:78:39:8e:32:78:e5:a5:31:28:c2:
38:82:77:63:bc:cb:17:3b:68:32:16:f0:72:98:5b:5c:73:cf:
e7:ee:7c:25:26:ab:11:cb:3a:bc:33:c0:b1:ce:04:c8:ba:bf:
b7:dd:b3:4a:42:ad:74:12:8b:9a:9f:fd:a4:65:c4:6a:69:73:
60:f4:94:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:22:32 2025 by rpki-client