Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
File: FxnQvARM2qI0GAnQAPD8Th3ts0U.mft (raw, json)
Hash identifier: 1PcypkJDKOLQaHnkZexOEsnYMXsjAWRmCvsRMNB+LXE=
Subject key identifier: 10:3A:57:3C:18:16:B2:3F:04:30:6D:AA:E9:21:11:0C:D0:14:8C:81
Authority key identifier: 17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
Certificate issuer: /CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Certificate serial: 019746D50F86A82E966415F79F0EE14BC324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 20:00:57 +0000
Manifest this update: Fri 06 Jun 2025 20:00:57 +0000
Manifest next update: Sat 07 Jun 2025 20:00:57 +0000
Files and hashes: 1: FxnQvARM2qI0GAnQAPD8Th3ts0U.crl (hash: 0uIT6Z7dimsefcTK1S97hI8b4Hi3XNsW4f+bXkVIGa8=)
2: qrHcalRy_JXYvUIS1tkkzHH6ZPM.roa (hash: B5LhQQeMhbxhyP/euiUVZeJTjZ4f803srjRMUk59y8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d5:0f:86:a8:2e:96:64:15:f7:9f:0e:e1:4b:c3:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1719d0bc044cdaa2341809d000f0fc4e1dedb345
Validity
Not Before: Jun 6 20:00:57 2025 GMT
Not After : Jun 7 20:00:57 2025 GMT
Subject: CN=103a573c1816b23f04306daae921110cd0148c81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:fc:4f:05:f4:df:0d:9c:79:3f:0f:46:75:10:
85:15:f9:41:85:44:63:29:c0:d9:55:ad:38:b9:37:
5b:5c:8d:ee:fd:89:b0:27:62:91:7c:7c:05:5e:8d:
99:0c:d1:99:80:0b:dd:ca:65:9b:2f:a3:2a:48:d2:
bf:d3:6d:bf:55:09:88:ff:45:de:3f:04:88:0d:f1:
6f:e6:91:e7:38:8a:55:34:18:f8:ca:3c:80:eb:97:
97:0a:55:ca:55:2b:fc:be:3c:8a:05:3b:8c:e9:22:
9c:65:b6:f8:9c:38:b0:4b:42:a1:0f:d5:94:03:59:
0e:3b:ef:c4:01:40:08:c2:86:1b:7e:24:65:03:57:
5e:e7:95:b4:70:58:0a:80:6a:76:97:ad:27:0c:30:
51:3a:50:81:62:a5:85:00:57:7f:c3:2c:92:05:99:
82:f9:1c:01:e8:44:4c:a0:7a:d7:1d:9d:2b:5b:b7:
02:8f:20:a4:16:d5:57:85:93:7e:00:fe:d2:66:90:
fc:56:74:c5:88:89:c7:42:f2:f6:50:48:d6:fb:a9:
81:f0:ea:25:11:23:71:d8:a8:22:9c:b2:2e:c3:a5:
49:a0:cd:c2:e0:6b:dc:84:96:18:2f:92:d4:fd:b8:
a7:48:39:37:6a:42:24:07:56:f5:e2:64:37:6b:f6:
9e:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3A:57:3C:18:16:B2:3F:04:30:6D:AA:E9:21:11:0C:D0:14:8C:81
X509v3 Authority Key Identifier:
keyid:17:19:D0:BC:04:4C:DA:A2:34:18:09:D0:00:F0:FC:4E:1D:ED:B3:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxnQvARM2qI0GAnQAPD8Th3ts0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/c03eae-39ae-4002-b66e-04ac0a5e8143/1/FxnQvARM2qI0GAnQAPD8Th3ts0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:81:7d:8b:72:52:f9:f2:7b:31:ac:73:cf:ef:e9:58:76:cb:
b1:f9:a3:c3:9c:62:52:76:6c:5c:c3:9b:7a:10:4b:05:02:e7:
51:c7:3f:6b:63:7d:ff:e6:00:b2:7b:91:4f:a4:88:f8:80:48:
df:53:31:b3:39:67:82:a3:f1:47:a3:c6:33:4d:6a:f4:9d:9d:
a3:41:15:3e:80:25:b8:c9:c6:ec:9d:7b:5f:c0:fa:d9:d9:f1:
fc:77:ca:95:88:1f:9b:ee:76:61:2e:77:67:2b:8c:ad:d6:83:
82:80:e0:69:ac:a7:a2:8d:a3:f4:99:ac:7f:2b:2e:0d:a1:95:
ab:fe:f0:ce:b3:0f:3c:84:88:c2:a2:1e:a1:e7:39:4e:cf:f0:
c5:ba:5f:20:a3:25:12:02:a7:30:b4:ee:4b:73:4f:83:46:45:
35:0c:f9:89:13:8b:dc:00:98:f6:75:10:86:5d:3a:d0:5f:a0:
22:97:77:bb:4b:7f:d0:09:46:05:9d:f3:5c:77:07:59:79:84:
90:e9:67:f9:1c:ac:2c:3d:ea:ad:d4:7e:ca:52:24:db:c7:a1:
30:79:67:4c:0f:cb:48:2d:7e:2c:77:8f:f4:5a:24:e4:f0:62:
ac:22:ec:53:0d:59:fc:e8:8e:0f:f3:2e:68:6e:7f:2e:00:f4:
8a:2b:7c:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:26:24 2025 by rpki-client