Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
File: Fc09GKyTtW_SsxgAAWXc1swwE4I.mft (raw, json)
Hash identifier: F5br5RcOovMkRZ55VfXx/ylBProGQDrByAvmmJqOxyw=
Subject key identifier: 10:7E:13:F7:F8:0D:71:A6:D3:93:68:2E:D5:81:77:69:3D:C6:04:7A
Authority key identifier: 15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
Certificate issuer: /CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Certificate serial: 0197469D902F339FE69F6934B42E1FBCC88A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 19:00:20 +0000
Manifest this update: Fri 06 Jun 2025 19:00:20 +0000
Manifest next update: Sat 07 Jun 2025 19:00:20 +0000
Files and hashes: 1: Fc09GKyTtW_SsxgAAWXc1swwE4I.crl (hash: xRq3gOSi/v20ZMIRyyW/INkfP7Fig9gYKhppQLrf3dM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:90:2f:33:9f:e6:9f:69:34:b4:2e:1f:bc:c8:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15cd3d18ac93b56fd2b318000165dcd6cc301382
Validity
Not Before: Jun 6 19:00:20 2025 GMT
Not After : Jun 7 19:00:20 2025 GMT
Subject: CN=107e13f7f80d71a6d393682ed58177693dc6047a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:61:b4:c3:06:e9:db:f7:23:42:b6:78:15:74:
b9:c5:6c:69:93:b2:60:1f:75:d8:c8:b0:39:9e:02:
90:0d:3b:cc:27:8d:6c:6b:49:32:f0:10:9c:e4:d8:
73:8a:ea:e1:71:0f:4e:1a:d2:8b:36:58:32:00:a6:
50:43:45:d6:62:5f:07:49:02:de:71:1e:52:ac:c4:
e6:dd:01:de:0c:a2:36:e9:68:2c:7c:2b:36:d0:f6:
29:d4:69:31:d9:a0:66:da:3e:95:95:ac:a8:2a:1e:
b0:22:67:0a:95:9f:40:c1:5e:7d:da:23:45:04:27:
e9:4b:21:3b:23:7c:36:c3:85:8c:48:72:df:b5:0d:
ba:85:9c:58:47:90:55:fe:9f:75:13:b7:cc:88:63:
75:35:67:06:b0:a1:65:51:89:ff:85:10:d7:58:ce:
2b:b5:ae:06:5d:8a:44:77:c9:7a:72:c1:a0:39:d5:
22:e1:94:fa:4e:49:e5:4c:93:c1:1d:dd:74:45:ba:
06:10:e7:56:13:67:0a:26:6f:8e:f2:50:5e:cf:fd:
53:57:7a:98:cc:ee:c5:b8:24:4f:b5:1a:09:5c:3d:
1e:e7:f8:12:d7:a4:40:90:af:17:27:40:82:35:db:
98:43:e2:73:55:fb:77:b4:b9:80:5a:da:03:2b:d6:
2e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:7E:13:F7:F8:0D:71:A6:D3:93:68:2E:D5:81:77:69:3D:C6:04:7A
X509v3 Authority Key Identifier:
keyid:15:CD:3D:18:AC:93:B5:6F:D2:B3:18:00:01:65:DC:D6:CC:30:13:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fc09GKyTtW_SsxgAAWXc1swwE4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/f32669-977e-4309-a8de-41bc28c1dcac/1/Fc09GKyTtW_SsxgAAWXc1swwE4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:04:9a:2f:db:20:cf:8f:cb:1a:28:bc:c9:ba:05:e7:8c:41:
5b:2f:59:fd:95:4f:72:86:2d:86:27:26:cb:a3:52:90:00:77:
50:0b:ac:78:68:ec:bb:29:d6:24:c6:97:e6:c8:39:b1:ad:45:
9e:f1:c8:95:fe:bf:23:0d:2e:b6:f3:9d:6f:12:7d:1c:ac:19:
38:6d:2c:d4:1e:7c:74:41:84:aa:3f:73:fe:bc:92:b6:cc:41:
5f:9d:26:2e:29:cd:2b:86:92:a2:72:e0:1f:8f:57:63:63:7d:
5f:82:f5:d1:92:f6:c5:79:23:7a:1c:b7:19:6b:28:4d:d6:07:
99:84:e2:b4:50:c1:b9:a2:c5:51:d9:4e:63:fe:4a:bf:35:31:
02:36:5d:2e:c6:b9:69:44:ae:56:29:e3:94:63:d0:36:01:50:
d3:2e:ff:eb:6c:ca:a7:a2:95:1a:2e:82:ee:2a:5c:60:b2:94:
cc:46:5b:76:b1:e0:84:6f:31:21:01:09:1c:1d:a6:ea:21:a3:
88:dd:d7:c3:f2:fb:00:38:69:1c:bb:51:b9:8a:aa:54:9f:84:
40:2e:1c:b6:b9:bc:74:b0:5a:c0:3d:b7:62:df:61:3d:28:69:
72:41:4b:0f:80:1b:e9:95:3a:bc:80:6c:34:8a:93:e0:dd:f8:
08:10:50:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:39:38 2025 by rpki-client