Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
File: Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft (raw, json)
Hash identifier: +V9TsKak9U86XF61qq4eCvWndR4/RwrCN+M+va7fbqY=
Subject key identifier: B9:33:6B:37:79:DC:65:38:90:67:A9:0D:28:9F:2D:AC:8E:F1:85:C9
Authority key identifier: 15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
Certificate issuer: /CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Certificate serial: 019754C7A142A3143FF27619E2090C2FF109
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
Manifest number: 13C8
Signing time: Mon 09 Jun 2025 13:00:58 +0000
Manifest this update: Mon 09 Jun 2025 13:00:58 +0000
Manifest next update: Tue 10 Jun 2025 13:00:58 +0000
Files and hashes: 1: Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl (hash: 46EwGHHef4NoqYNGRJxecrtir+gX3126BlO4Cr9ueeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:a1:42:a3:14:3f:f2:76:19:e2:09:0c:2f:f1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15b6f9772a8de2a02af61a4ea627d3e51d84f9bd
Validity
Not Before: Jun 9 13:00:58 2025 GMT
Not After : Jun 10 13:00:58 2025 GMT
Subject: CN=b9336b3779dc65389067a90d289f2dac8ef185c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c7:ff:5a:bb:7f:90:01:e5:f5:7c:50:8d:34:
3d:47:b3:e9:cd:73:11:3a:b0:8d:e2:a7:41:3c:73:
ff:a5:25:6f:d4:9f:f1:96:6c:6d:d2:9d:17:4d:97:
d3:9a:88:12:8d:15:7d:92:c3:79:ed:05:ee:12:94:
d1:e4:15:66:fc:0c:ef:9c:30:14:f7:a6:79:eb:89:
97:c5:58:b1:8f:7e:0d:3e:24:24:6d:8c:e5:4b:e3:
6d:14:a7:d7:36:93:2b:aa:7d:96:72:ac:be:6c:2b:
3f:37:42:94:48:86:7e:44:80:d6:f4:a8:aa:25:2a:
8a:56:8f:0a:ab:88:0c:70:64:28:cd:9f:28:66:2b:
b0:5c:62:60:74:d9:96:81:b6:11:75:2c:80:29:a5:
0d:65:c0:08:80:43:eb:7b:05:09:1d:0a:6a:26:9f:
6f:16:c1:a6:df:9c:54:b1:72:df:98:95:dd:6d:91:
b1:e4:67:a6:da:5b:7e:e0:47:23:6b:a6:b2:65:8e:
b8:78:60:7e:6c:c8:c7:29:43:fc:ed:19:c3:cb:64:
eb:e0:2a:e3:fc:81:1e:a3:ce:02:df:aa:b8:3c:d8:
21:db:c0:83:42:b4:f8:11:91:37:a3:ab:5b:21:f0:
93:81:5d:10:05:98:0f:04:5b:1a:1b:f7:e6:14:71:
ab:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:33:6B:37:79:DC:65:38:90:67:A9:0D:28:9F:2D:AC:8E:F1:85:C9
X509v3 Authority Key Identifier:
keyid:15:B6:F9:77:2A:8D:E2:A0:2A:F6:1A:4E:A6:27:D3:E5:1D:84:F9:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fbb5dyqN4qAq9hpOpifT5R2E-b0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/65340b-6af0-4444-b426-e579e2aaf9ea/1/Fbb5dyqN4qAq9hpOpifT5R2E-b0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c3:6d:00:75:bc:c7:73:55:1c:7a:33:6a:c4:58:c7:8b:22:
1c:80:b7:d8:6d:07:5e:7a:2b:12:8f:8b:04:f2:b2:ab:ae:2b:
c6:4a:fc:a5:fa:65:bf:8a:01:ab:38:22:bf:17:76:4f:2c:98:
a6:3b:91:10:db:3c:b1:80:91:10:8b:f0:40:fb:05:33:16:be:
cc:5c:cf:62:cc:f3:05:2c:b7:4a:7b:66:99:14:db:71:aa:fb:
1a:6a:36:e0:c4:c7:38:ce:64:49:f6:78:99:d6:38:54:f3:7b:
bb:f4:ac:02:4f:fe:3a:25:f2:d4:18:d9:bc:f8:3c:75:53:c2:
df:cd:6a:36:20:00:53:eb:cc:6e:22:22:43:30:67:52:0b:74:
82:1a:46:08:23:42:fd:bc:17:6a:55:49:cd:14:11:b8:93:6f:
8d:8a:2c:fd:73:61:4e:1a:d6:dc:e1:2d:e1:65:cd:d4:e7:66:
6f:36:44:28:e4:82:f2:39:34:a7:ef:32:ec:17:a8:58:0e:b8:
68:1c:74:c6:0c:e8:4e:35:1a:64:ab:c2:cb:8f:30:82:7d:36:
67:3d:fa:5d:97:1a:18:09:c9:49:89:dd:0b:6f:c8:ae:54:5a:
8a:90:e9:d4:99:8a:fd:0c:00:04:53:1d:5b:56:d1:1d:ab:92:
6b:ba:af:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:12:30 2025 by rpki-client