Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: lR9/HvDbALDPUAvLaGRckor5ItJAr1Z/b2NDKTBruA4=
Subject key identifier: 3E:BB:3B:81:DA:6F:FE:C3:43:A6:3B:80:63:2A:E9:4C:3B:EC:29:89
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 019754598D664D328E90F51ED36B0DC6CDAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 04C2
Signing time: Mon 09 Jun 2025 11:00:44 +0000
Manifest this update: Mon 09 Jun 2025 11:00:44 +0000
Manifest next update: Tue 10 Jun 2025 11:00:44 +0000
Files and hashes: 1: FDrMY25luzUgEicNY75FE-uO2tw.roa (hash: fjlUWgHKI2vkNS9JhhFgEKy2oBhGIJFwaeJzp29a1Pc=)
2: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: twHSoj0AsMMPgbrtcUqjCALlgXi9GsEMkNj/uzPapBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:59:8d:66:4d:32:8e:90:f5:1e:d3:6b:0d:c6:cd:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Jun 9 11:00:44 2025 GMT
Not After : Jun 10 11:00:44 2025 GMT
Subject: CN=3ebb3b81da6ffec343a63b80632ae94c3bec2989
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:6c:e1:0c:58:24:c0:f5:c1:11:f0:49:cd:62:
fd:34:f6:22:c8:43:06:06:50:1d:45:ac:39:bc:23:
3e:91:e9:6f:95:b4:72:2b:a0:c5:0a:6c:6a:74:18:
0c:c8:6f:0c:ff:01:74:4b:a2:e3:0c:48:47:d1:49:
82:d8:9c:51:8f:e2:bd:62:5d:a9:c3:e7:6b:6a:d9:
73:35:72:83:b0:82:b6:4e:33:f4:0f:8d:69:17:62:
80:10:c3:93:c5:3d:99:77:e2:d4:d2:e7:a6:05:71:
2a:6c:dc:45:17:a5:28:98:59:6d:89:36:32:74:24:
10:e4:94:9b:5c:60:3a:ae:14:a1:fe:17:51:6f:fa:
05:8d:0f:c4:2b:a6:09:14:d0:cc:24:6d:4f:f1:03:
6e:30:90:4a:f2:fe:65:c3:4f:63:3f:7b:2a:de:10:
fb:d7:85:11:f8:0c:79:59:0a:15:a1:70:bb:5b:79:
b8:79:4b:aa:32:21:20:f2:f2:ea:7d:75:8e:5b:61:
0c:cd:22:7f:bc:6f:8f:82:fd:0a:43:28:ad:e0:9d:
67:44:46:9b:be:4a:d4:6f:bd:5e:83:fc:9d:be:bc:
2e:6c:b7:8d:f0:44:a3:24:58:6e:c6:4a:3d:3f:af:
64:8d:17:ac:36:b4:a8:a5:33:a2:f0:6b:a6:c7:2b:
24:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:BB:3B:81:DA:6F:FE:C3:43:A6:3B:80:63:2A:E9:4C:3B:EC:29:89
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:65:87:d4:e6:d5:9a:72:db:d7:6a:f4:b1:3f:9d:ae:4c:dd:
3a:d6:5e:03:54:75:87:f0:bb:af:0f:36:68:08:5c:36:83:d6:
ba:27:3a:f6:0b:1d:36:e2:6f:59:59:bb:ac:5c:c3:35:c3:cc:
49:70:be:08:55:82:1e:24:e5:69:23:7f:e5:25:45:72:0e:03:
0b:49:f6:19:08:17:66:2a:d6:35:ea:1a:fb:d3:11:c4:db:e3:
0e:09:67:f7:5e:cf:f6:c4:e9:8a:c2:17:fe:5a:82:68:9d:94:
9b:d9:5e:b5:69:17:28:5e:d3:34:68:da:8f:4e:4e:d8:fa:b4:
93:c0:cf:ee:23:79:cf:0f:a3:1e:ec:cf:b7:93:a8:e1:40:46:
91:d6:8e:22:f6:02:9d:94:c7:1e:e6:2f:ab:ad:e3:f8:86:7e:
24:c5:9d:50:ed:66:e5:ce:aa:ed:d4:62:26:18:37:f2:69:be:
84:de:a2:ce:de:97:43:f5:64:da:aa:ae:d0:dc:11:06:c2:6e:
91:22:19:63:17:50:78:65:16:74:f9:e0:f9:02:10:1d:73:d5:
10:2b:c7:63:3b:6d:67:c7:e3:e8:53:b3:98:b9:5a:b7:4d:9c:
b7:0c:72:68:48:f6:15:84:3b:d2:9a:12:eb:48:f2:b8:53:ca:
c5:79:93:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 18:25:51 2025 by rpki-client