Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
File: FHBxbI3YPk_rBfZUNDwSCna9s7k.mft (raw, json)
Hash identifier: 65fBUREiv4ArL78dAeLefs9ZDNHZp/xqy9oTzXzLMNM=
Subject key identifier: 49:65:0A:A3:E3:B7:A7:F5:4C:2A:C8:B3:1B:64:F1:28:06:B9:77:53
Authority key identifier: 14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
Certificate issuer: /CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Certificate serial: 0198296C8A59E11073B1A8AAAF4917ACD1EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
Manifest number: 15
Signing time: Sun 20 Jul 2025 20:00:35 +0000
Manifest this update: Sun 20 Jul 2025 20:00:35 +0000
Manifest next update: Mon 21 Jul 2025 20:00:35 +0000
Files and hashes: 1: FHBxbI3YPk_rBfZUNDwSCna9s7k.crl (hash: in0iUGzKJDLHDnuvEkgXBvj8kt6dM6mkv4pEqe9MWlk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Jul 2025 13:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:29:6c:8a:59:e1:10:73:b1:a8:aa:af:49:17:ac:d1:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1470716c8dd83e4feb05f654343c120a76bdb3b9
Validity
Not Before: Jul 20 20:00:35 2025 GMT
Not After : Jul 21 20:00:35 2025 GMT
Subject: CN=49650aa3e3b7a7f54c2ac8b31b64f12806b97753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7f:e8:65:9a:9b:b9:d3:90:30:41:6c:d4:56:
24:e5:00:63:97:9a:e2:61:cc:db:5c:06:4e:af:ed:
42:14:d4:3e:c6:c0:b0:d6:a6:f5:65:c5:ac:72:b7:
31:99:30:45:f4:a1:40:96:19:84:72:5b:c4:db:af:
aa:cf:ef:25:10:fc:4c:4a:f4:ae:19:8b:4a:5f:93:
9e:96:6a:c3:57:b4:4d:1a:a2:85:07:80:0c:f6:a8:
9c:53:f7:fe:40:d1:40:72:83:88:38:42:54:60:8e:
86:77:a8:f7:8c:88:29:98:9b:64:bd:66:7d:21:f5:
d2:01:6c:79:af:4f:a5:88:b5:75:5f:45:5c:c9:f6:
3b:2a:21:8d:2a:dd:1d:07:ca:ac:6a:cf:d3:ee:c9:
17:a0:18:7d:fe:d2:1f:4a:da:e6:06:5b:09:c8:47:
a3:57:3b:aa:69:c9:92:55:59:ad:ea:2f:77:91:cf:
63:a8:65:b0:cd:1b:92:76:cf:81:1b:c6:bb:09:97:
5c:93:f0:30:23:96:f2:ef:36:9a:47:8b:b1:ea:cb:
c1:96:75:b1:82:15:e7:02:46:7a:39:8a:55:38:c6:
e8:dd:49:6f:3f:c0:71:6f:d7:3c:8e:78:8f:28:8f:
8a:d9:ab:66:df:fb:ae:f2:35:f7:d6:5e:5e:22:7f:
ae:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:65:0A:A3:E3:B7:A7:F5:4C:2A:C8:B3:1B:64:F1:28:06:B9:77:53
X509v3 Authority Key Identifier:
keyid:14:70:71:6C:8D:D8:3E:4F:EB:05:F6:54:34:3C:12:0A:76:BD:B3:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FHBxbI3YPk_rBfZUNDwSCna9s7k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/8b9e4f-d13e-4251-9d18-6a238ba179cd/1/FHBxbI3YPk_rBfZUNDwSCna9s7k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:de:df:6b:c7:a4:f0:7c:1f:d4:b6:88:95:c5:66:39:99:00:
54:34:0a:f7:7f:7f:6b:d7:d8:a5:ec:3b:96:83:b6:31:c8:20:
55:14:c3:ee:57:50:76:f8:d2:8b:63:b7:f5:28:5e:a3:2d:3b:
8c:0f:8f:ec:1e:06:32:61:59:52:e1:ce:6c:68:bf:41:8d:a3:
27:a7:4c:02:8a:26:10:bc:70:89:b2:90:5b:31:26:13:f4:99:
54:25:ec:e6:e4:c5:3d:6e:e6:bf:ae:05:47:8d:18:a4:e2:ab:
14:9a:1d:23:dc:13:f1:eb:54:a0:44:58:74:23:67:82:91:62:
9c:5c:b5:ef:a4:8e:ca:62:3d:67:05:f8:51:30:29:8e:26:48:
81:fd:b4:8f:95:cc:cb:dc:f1:f8:06:a5:bf:f5:8f:95:0d:89:
ef:47:63:bf:79:4f:14:93:9d:04:e0:09:a0:48:37:27:d7:ff:
cb:b8:49:96:81:fc:9c:31:08:56:ed:96:39:e9:00:1b:34:bc:
06:3c:67:94:60:07:03:5b:79:57:1c:dd:ce:35:46:53:e0:b1:
db:7a:49:e4:af:e9:6c:2c:10:a2:fd:74:c8:e1:45:c1:d5:c1:
72:82:3e:8a:6f:97:ff:c8:ba:e1:d3:4a:3b:c9:cf:57:9d:68:
00:25:88:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 20 21:15:28 2025 by rpki-client