Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
File: _FfXotV2YfbDxup2NsoP8jAMFG8.mft (raw, json)
Hash identifier: BNCE+c24yXwCTDNbVNzYCevS+BfnhrcQoh3v8W7oV9E=
Subject key identifier: 01:5B:E4:5B:E5:BB:88:AE:D9:5F:85:44:C8:6A:E3:17:8D:5F:A8:8A
Authority key identifier: FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
Certificate issuer: /CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Certificate serial: 01974742557B81DE9D8641255800F68EE789
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 22:00:18 +0000
Manifest this update: Fri 06 Jun 2025 22:00:18 +0000
Manifest next update: Sat 07 Jun 2025 22:00:18 +0000
Files and hashes: 1: MLpmz1Ih74d3ai6mUgS3az1JAoA.roa (hash: wPq9cbkd3gHsPqU0L1CCMHdPpNtSvMWNQxLswqIps2I=)
2: _FfXotV2YfbDxup2NsoP8jAMFG8.crl (hash: M6A8yvP8DGDbzOeosIlieOitP72pRSx3EKJS8+oNVVE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:55:7b:81:de:9d:86:41:25:58:00:f6:8e:e7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc57d7a2d57661f6c3c6ea7636ca0ff2300c146f
Validity
Not Before: Jun 6 22:00:18 2025 GMT
Not After : Jun 7 22:00:18 2025 GMT
Subject: CN=015be45be5bb88aed95f8544c86ae3178d5fa88a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:10:91:d7:b1:60:18:f7:ab:89:9c:94:c6:4e:
c8:8b:04:b6:92:85:a1:04:22:a2:9e:88:65:a3:3f:
29:c4:85:b5:c6:04:75:e5:54:01:13:54:4d:19:13:
ec:d0:67:20:2d:0a:53:9d:fe:2a:f1:fe:62:6b:4c:
e1:8e:26:06:31:05:6c:38:a7:54:ee:6f:a8:b2:49:
02:f0:e0:b1:cf:8a:e7:7e:1a:3e:87:71:c5:b6:8c:
44:c4:ba:62:df:bb:fd:a2:7d:7d:b9:cd:9f:b6:bb:
6c:5e:8c:fa:8b:f0:0e:cc:98:9b:22:a6:2b:0f:47:
a9:d3:be:c7:30:a6:de:b5:70:d3:da:20:69:5e:09:
19:1a:62:1a:8f:0b:63:8e:0a:1e:f1:a8:d8:f0:82:
3f:94:e4:8a:2d:08:f9:fb:20:db:b5:78:0c:52:34:
c1:f3:0e:b6:98:96:3c:d5:7e:a5:1e:71:73:b5:31:
48:0f:4c:21:5e:4f:06:d1:29:30:ac:f8:91:fd:21:
fa:e2:36:b7:dd:e9:d5:cc:0f:28:c2:cd:9d:dc:a1:
63:31:0b:25:e2:e0:da:3b:53:1b:8a:14:22:d3:2c:
72:01:0c:be:61:61:f0:12:1f:b2:3f:a7:46:b9:52:
90:cc:d1:93:6b:21:59:4f:c1:85:ad:24:25:d6:36:
6a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:5B:E4:5B:E5:BB:88:AE:D9:5F:85:44:C8:6A:E3:17:8D:5F:A8:8A
X509v3 Authority Key Identifier:
keyid:FC:57:D7:A2:D5:76:61:F6:C3:C6:EA:76:36:CA:0F:F2:30:0C:14:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_FfXotV2YfbDxup2NsoP8jAMFG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/b24b88-22f0-49b8-b2e3-731f47820b20/1/_FfXotV2YfbDxup2NsoP8jAMFG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:94:7f:fb:95:e5:e2:b9:7a:44:bf:d4:95:b3:c8:f0:cc:39:
be:44:41:06:0c:3d:0a:f5:16:53:be:b1:bd:d9:8f:24:ff:e3:
22:55:e9:8a:23:c7:b0:26:ab:ce:b5:9d:6f:8a:c9:66:0b:4b:
f7:51:d6:0a:99:fe:99:47:a2:48:64:b3:3c:6f:06:3e:4d:cf:
f4:f9:c6:22:f0:9f:cc:55:16:66:3d:1e:23:cb:3b:5b:28:f6:
ec:4c:28:1d:b1:89:87:f3:d7:d6:8f:47:12:5b:3c:22:2b:34:
7b:3b:f0:93:3d:ea:0c:60:be:f3:62:df:d6:e2:70:ec:1b:0a:
30:4a:7f:6f:af:50:4c:45:78:c0:7e:55:5a:5b:41:6e:55:b4:
3f:2c:c7:ce:4f:b7:e7:3b:3c:62:ba:ff:fd:9a:33:69:b8:30:
0e:13:7d:6f:05:1a:d1:8b:67:9a:09:ec:46:83:7e:79:79:8c:
56:c5:05:d7:8b:5f:24:22:df:af:f7:88:d9:92:e4:7a:04:07:
61:fb:8f:d0:e6:26:67:ea:bf:d2:c7:28:7d:ad:bd:8c:f4:43:
a0:c7:c4:c6:7c:9e:5e:b0:fe:52:2e:5e:86:23:3e:a3:fa:63:
c3:d0:9f:57:0a:e4:c2:a0:91:e0:c4:f4:46:e0:c0:ed:78:c1:
ff:73:a2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:37 2025 by rpki-client