Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier: DJTaYdZ0gCaBgshMKS5EjyEhcdTugNlvpD2HikBN7lY=
Subject key identifier: 3A:9E:09:A8:0C:43:DF:5D:9D:9C:51:2B:88:90:95:FE:FA:03:09:84
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial: 019768BC154BF9FA9A3B81263AE0303A8EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number: 0293
Signing time: Fri 13 Jun 2025 10:00:45 +0000
Manifest this update: Fri 13 Jun 2025 10:00:45 +0000
Manifest next update: Sat 14 Jun 2025 10:00:45 +0000
Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: meyFi4GA2uBhobC03sNk5mZGTNMJGJ/uAkr8rataVUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:15:4b:f9:fa:9a:3b:81:26:3a:e0:30:3a:8e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Validity
Not Before: Jun 13 10:00:45 2025 GMT
Not After : Jun 14 10:00:45 2025 GMT
Subject: CN=3a9e09a80c43df5d9d9c512b889095fefa030984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:90:dd:50:d2:86:f8:83:a3:56:53:4e:76:b0:
e1:19:cd:98:d0:81:a9:20:a2:c6:2f:89:e3:a4:f2:
f0:ea:9f:04:8c:4b:77:99:3e:e0:19:ab:ba:f4:44:
2b:39:6f:5f:fe:e7:7a:0a:3f:39:85:f4:9e:6f:6b:
b8:d3:66:05:20:17:02:97:aa:4f:08:47:75:7b:69:
f1:f9:19:5d:32:9c:54:ef:a2:36:21:c2:b7:6f:aa:
a8:49:bf:dc:9e:b1:90:fd:0d:f5:8e:b0:92:78:75:
de:17:c1:5e:64:cc:d8:41:77:08:fc:f6:b3:52:9d:
c2:70:79:c9:0a:32:dc:a5:7c:32:99:e8:02:11:89:
18:d9:1b:d7:87:b9:34:e7:e7:9f:0a:99:31:d3:8c:
c5:47:03:8c:63:d0:a0:42:7a:6f:6b:49:6b:49:c6:
52:d8:c9:48:c5:10:f3:bc:ba:d5:3d:4a:16:6a:86:
81:c6:8d:8c:2a:71:01:17:b3:bd:a2:2d:88:67:1b:
f8:c9:a0:ca:0c:27:b4:72:7f:05:e3:ac:f9:8f:23:
ae:ff:d2:4d:24:b9:f5:e7:b7:36:bb:10:ea:6b:d0:
2c:6a:70:bd:13:07:a9:8f:a4:79:e6:ff:99:d5:ea:
4f:f0:3a:e1:30:a9:f5:44:89:aa:de:6c:d1:49:b2:
7c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:9E:09:A8:0C:43:DF:5D:9D:9C:51:2B:88:90:95:FE:FA:03:09:84
X509v3 Authority Key Identifier:
keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b7:25:85:d3:b4:47:4f:e0:fb:63:ff:74:96:7c:4a:10:bd:
24:23:bb:08:2f:63:38:5b:ca:56:e9:30:34:02:cd:57:52:04:
a2:17:a8:78:11:0a:3a:e2:2e:06:da:f7:08:1c:56:b1:7a:0f:
f3:31:49:a3:66:52:16:ee:9a:56:c1:10:75:ef:44:cc:17:0b:
55:e9:5e:1a:69:3e:0a:5a:94:41:e4:1d:10:5f:e3:0f:3f:cd:
ab:bf:31:38:5e:9b:f3:0d:83:6c:3c:48:39:1d:87:91:b1:6f:
a5:34:08:b5:4b:16:8f:a2:27:c4:ab:d5:85:3a:c4:9f:dc:dd:
ba:1a:8c:c6:40:5f:0e:7c:26:a1:85:85:d8:42:d3:2a:ec:86:
08:64:d6:5d:bc:f5:c2:02:02:6b:9a:ed:e6:02:82:c9:40:45:
c9:7d:77:3f:dd:0c:75:57:30:ed:90:08:28:6e:8a:10:97:65:
a0:cb:e3:08:1c:a2:95:68:74:1c:64:e7:80:66:75:ec:92:0b:
9d:8e:8d:f6:47:5f:78:35:41:f1:39:1b:56:9e:27:bd:08:f7:
87:75:ac:88:ac:df:bc:fc:0d:9f:23:12:09:fd:83:c3:db:86:
77:5d:23:f2:7e:3d:8e:33:15:09:dc:05:5e:3f:a5:79:1d:c6:
d7:26:13:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 14:35:27 2025 by rpki-client