Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
File: FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json)
Hash identifier: CBWATRThH602TlbMaViO/1p6GVHcP9JQPXSd4/IE2Eg=
Subject key identifier: 7E:52:68:3C:36:8D:36:D3:A6:AC:3E:4B:CB:02:E7:1C:51:12:EE:D5
Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
Certificate issuer: /CN=157b320830ad06ea71a726e9b8b3c473241219db
Certificate serial: 0198537AF7BA62A71AEFBEFA638329787E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
Manifest number: 0A94
Signing time: Tue 29 Jul 2025 00:00:24 +0000
Manifest this update: Tue 29 Jul 2025 00:00:24 +0000
Manifest next update: Wed 30 Jul 2025 00:00:24 +0000
Files and hashes: 1: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: stOtZcAsCkj4sgOKCI2FJ4/hD3TzMIgM3SJ4cf0Y0o8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:7a:f7:ba:62:a7:1a:ef:be:fa:63:83:29:78:7e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db
Validity
Not Before: Jul 29 00:00:24 2025 GMT
Not After : Jul 30 00:00:24 2025 GMT
Subject: CN=7e52683c368d36d3a6ac3e4bcb02e71c5112eed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:e8:a7:46:80:e6:5a:fb:a5:5f:ec:8e:75:97:
e3:0e:aa:77:7d:bb:fc:19:9f:23:f0:43:c0:c2:50:
5f:59:01:17:e9:a3:9f:3f:01:da:cc:dc:c4:f6:54:
82:45:e9:cf:34:12:08:bc:47:e0:c1:0d:11:a3:a3:
55:45:d3:38:3d:b1:94:94:5e:25:f6:06:c4:60:b7:
58:7a:4a:fa:0e:ef:51:e2:36:24:a1:4a:56:e4:63:
1a:96:b8:14:b6:78:34:00:7f:2d:57:f7:96:13:48:
30:25:f2:ef:04:8e:bd:0b:61:8f:ce:9e:f0:18:dd:
c5:9a:f2:0a:08:07:cc:66:87:99:19:4d:58:22:e4:
34:f9:fb:b9:7d:f1:d0:2a:61:0c:f3:9c:24:66:79:
e8:5e:8a:77:bf:f3:5e:e0:42:9e:f2:50:59:ef:b6:
72:1f:43:8b:f4:fa:27:bc:bb:60:d1:23:d1:b3:01:
cc:e9:10:71:75:0d:dd:ab:c3:ed:76:db:fd:ab:1f:
51:8d:d2:b7:98:0d:83:e8:a8:bd:7d:94:dc:d6:b1:
d8:9d:69:b4:ec:8e:05:e8:54:fa:ef:6a:15:c0:83:
3e:61:a2:26:95:3c:55:b7:b3:2d:56:27:8f:d2:ff:
a2:99:05:1e:91:b1:55:0e:e8:6d:f0:94:a4:45:b5:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:52:68:3C:36:8D:36:D3:A6:AC:3E:4B:CB:02:E7:1C:51:12:EE:D5
X509v3 Authority Key Identifier:
keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5a:60:7d:cd:a6:53:bb:a6:e5:12:34:cc:de:b3:c9:6a:44:
95:70:df:d3:fd:4c:ca:f9:60:9e:cd:dd:87:31:6e:c0:4e:ef:
50:8b:5c:fb:c1:59:46:25:4c:f7:10:44:61:85:c6:4b:8d:f5:
07:5b:7f:c1:90:15:16:74:28:e4:7b:de:3c:85:5c:b3:ed:61:
26:d0:0f:23:82:f9:c7:68:d2:49:55:0a:7b:e0:e9:30:a6:e6:
e9:7d:81:9e:b3:a9:d5:9e:85:af:6c:2d:e0:65:23:74:d1:1e:
ba:c6:b1:8a:dd:92:1e:cc:28:ee:48:7a:3c:0b:c0:e1:d0:7f:
eb:2b:fb:7d:32:df:04:8f:17:58:38:63:33:c1:f9:ca:00:ff:
af:d9:b0:d6:1c:be:e5:61:34:70:b9:45:f7:0f:48:70:7a:b9:
55:53:45:e9:c0:5b:3a:b8:ef:bf:1f:7b:d2:9c:5c:85:f0:52:
bd:4c:43:d4:7b:6c:65:4e:de:a5:0c:54:fa:4f:63:71:b8:19:
2a:00:b1:ff:35:a1:3a:fc:0f:02:17:9e:dc:bd:37:d3:a5:52:
fe:34:f4:0e:2c:cd:d6:f7:20:00:3f:7e:03:71:71:81:6f:45:
05:ad:f7:bc:d6:80:2e:6a:6f:aa:f5:e7:bf:3a:0b:f6:ad:48:
c5:26:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 04:16:18 2025 by rpki-client