
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File: FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier: +w3xUiRmCApWyDj01PqBqbT87BDnMPvLN31zwE2ZmuI=
Subject key identifier: 7F:84:BF:79:96:D2:A9:19:D2:B3:1A:85:5A:4F:71:FF:7C:DC:3B:F1
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer: /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial: 0199221E481F5E1B2C54CCC124602A7D2892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number: 165B
Signing time: Sun 07 Sep 2025 03:00:33 +0000
Manifest this update: Sun 07 Sep 2025 03:00:33 +0000
Manifest next update: Mon 08 Sep 2025 03:00:33 +0000
Files and hashes: 1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: JpWB8Nb3QoSWmA4uFtUQdWYWERtuljbMbdDtJSFJz94=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 03:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:1e:48:1f:5e:1b:2c:54:cc:c1:24:60:2a:7d:28:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15894575555cde14c770cbb183da5535d144b540
Validity
Not Before: Sep 7 03:00:33 2025 GMT
Not After : Sep 8 03:00:33 2025 GMT
Subject: CN=7f84bf7996d2a919d2b31a855a4f71ff7cdc3bf1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:2d:1f:3e:c3:2b:da:7a:5c:3f:56:34:72:e4:
df:ce:e9:e4:46:99:69:50:01:84:80:db:9c:1d:c3:
c9:f9:7b:d4:e2:80:bc:49:06:33:c8:86:d4:65:76:
62:33:18:91:0d:67:0b:25:f4:6e:9e:be:da:19:84:
bc:a6:6c:a0:dc:4c:0e:94:ea:56:04:78:9e:28:63:
47:06:f1:47:b9:fc:09:11:9c:b1:d5:78:2a:f7:95:
c5:66:c4:35:b3:fb:2b:60:51:59:97:88:7c:4f:64:
63:78:f7:f4:23:42:f1:79:a9:9d:fa:7c:f6:5b:92:
0f:90:36:5c:4a:2a:08:72:af:86:b5:5b:fa:80:f6:
da:98:7c:ef:07:fe:01:3b:bf:65:72:93:63:04:95:
f9:89:86:b2:72:8b:59:8a:32:13:00:0d:7f:46:6a:
d2:ba:ff:4b:31:b7:1c:dd:76:67:9c:f2:c7:14:0d:
0b:83:5f:8f:fb:fc:c9:80:0d:4b:7a:13:be:b4:a0:
9a:2f:1a:5b:53:71:64:9b:97:33:72:65:0c:33:f0:
21:c0:01:91:ab:ae:8c:8c:0f:a9:06:9c:15:83:54:
7a:76:12:7e:1c:a3:19:79:8d:40:88:3e:a5:24:78:
97:4c:0e:ec:58:c0:b8:f4:7a:09:d2:e0:1f:92:11:
ec:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:84:BF:79:96:D2:A9:19:D2:B3:1A:85:5A:4F:71:FF:7C:DC:3B:F1
X509v3 Authority Key Identifier:
keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:66:fd:0f:70:b3:65:95:f4:7a:13:fd:0e:c4:89:6c:52:ed:
50:35:f6:5c:5c:7a:89:ea:70:b3:6d:ea:0e:9c:2a:40:c0:b4:
ff:d1:15:a8:3d:65:90:56:29:96:03:2a:f9:3d:a7:d9:b6:f3:
98:10:af:69:24:78:33:45:20:d8:35:c7:bd:29:e4:8e:6f:20:
9a:db:d0:01:f2:24:b5:9e:96:9c:c6:1c:a7:41:7d:96:93:39:
d7:b7:15:97:7b:1e:4d:f8:dc:9c:32:f1:de:79:de:8d:fa:62:
2d:48:bf:ca:5e:71:53:9f:48:bb:df:b4:5c:fd:4a:d0:92:74:
1d:a2:e0:e6:6d:34:82:e5:30:1a:a4:16:d8:3f:c9:aa:0b:91:
38:3e:28:bd:80:96:2e:34:f3:92:22:7f:ae:25:9f:12:78:31:
96:bd:24:b7:e0:0a:2c:4f:35:14:7d:89:d0:a1:c5:eb:b2:db:
66:f1:25:db:0e:84:6e:3f:4d:70:6a:cc:f9:40:3d:17:1f:ac:
64:05:52:1a:1a:ab:11:31:7a:61:20:1f:82:a2:f9:f4:f9:a6:
a6:96:be:c7:cd:70:57:7d:1d:c6:14:21:1f:0c:b2:be:f4:3d:
86:b7:a1:55:02:22:2d:f3:34:5b:0e:2f:a6:ca:73:0e:b6:4b:
2f:52:8b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:31:22 2025 by rpki-client