Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier: R84fYZsXPr+sdBqDqTGb9QhxLbfO2cgKsza8Hqr5e20=
Subject key identifier: 57:BB:DE:5B:C4:32:27:8F:E3:86:60:38:D7:6F:00:DF:7C:A3:A4:55
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial: 01992932E876CC1B1BF1270FFB1C55AF1312
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number: 037C
Signing time: Mon 08 Sep 2025 12:00:26 +0000
Manifest this update: Mon 08 Sep 2025 12:00:26 +0000
Manifest next update: Tue 09 Sep 2025 12:00:26 +0000
Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: d8o2TTSZafDErM904qhwtyeDvuFLPS14sI88UQ1SjOc=)
2: kvd87x8t1PGUep5eUwNbvYfj-AA.roa (hash: Kt5G8onkZV1CMoFulV/VV3/ApunjUuQ11gDnhV8epFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:29:32:e8:76:cc:1b:1b:f1:27:0f:fb:1c:55:af:13:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Validity
Not Before: Sep 8 12:00:26 2025 GMT
Not After : Sep 9 12:00:26 2025 GMT
Subject: CN=57bbde5bc432278fe3866038d76f00df7ca3a455
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8e:0e:a7:40:1c:d8:28:8d:1b:59:0e:70:ea:
16:16:f7:5c:6e:e1:ed:05:aa:6c:46:b1:3c:ad:22:
f1:33:1f:91:aa:f1:3c:cd:44:6c:c7:cf:a8:19:36:
3e:4c:5f:d5:f2:ee:97:bc:42:c7:15:c3:8b:ac:67:
be:b1:ad:e7:1e:33:8e:f5:4b:1e:10:68:0a:43:8d:
6b:49:5a:51:2a:fa:2d:7d:4a:d3:f2:3e:2a:f7:36:
3e:97:b9:9a:82:c6:30:1b:0f:e9:32:ef:70:94:b0:
78:60:30:f0:e5:38:18:26:5c:e6:4b:be:b8:20:1e:
9b:32:b3:dc:c2:12:54:45:27:c5:d8:55:71:b8:9c:
3e:21:e7:1c:4a:12:f7:0c:ae:d0:b9:7b:09:ad:81:
5e:cd:ff:5d:32:f8:76:60:3d:f9:6b:2c:2d:05:16:
8e:fc:bf:e5:1b:cb:29:38:71:1f:76:25:11:7a:00:
50:2e:ea:29:87:b9:ba:9c:2d:b6:5e:8e:52:16:d9:
b0:5e:0d:60:2a:ad:ff:9b:7c:1e:6b:93:0b:bf:fa:
e0:41:12:e5:60:16:d1:e8:ab:b1:e1:60:26:1b:64:
16:9f:f7:da:a1:8f:38:93:77:dd:99:3b:41:58:00:
c9:42:9b:bb:fb:74:6c:d6:7e:d8:b3:29:62:4a:c4:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:BB:DE:5B:C4:32:27:8F:E3:86:60:38:D7:6F:00:DF:7C:A3:A4:55
X509v3 Authority Key Identifier:
keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:dc:d8:56:e3:9c:32:10:4b:59:d1:ac:c0:37:37:db:1e:e9:
cc:4e:87:57:d8:7f:14:85:46:3a:c4:af:df:78:f0:5a:f8:5a:
11:b0:39:4e:7e:82:84:d7:ad:61:99:f8:6a:1e:55:46:14:45:
8c:2c:4f:8d:1a:f2:fe:50:41:27:4b:d3:42:5c:b4:57:e1:f1:
5f:1a:71:f1:61:5c:2d:7c:42:56:d1:f5:c3:33:71:d6:60:19:
43:82:54:e9:74:44:a1:65:35:bf:90:00:eb:94:a0:f4:b7:3c:
4b:5f:09:4f:cc:b7:f2:eb:fb:60:e8:31:ee:d3:28:34:9c:2b:
27:66:2a:ad:9d:75:b8:ea:22:52:d1:ba:8c:96:56:1f:8d:3e:
ec:6b:45:45:f4:49:18:5c:35:b9:1a:12:13:54:43:49:66:57:
d7:8d:30:3b:1e:e8:53:3c:a6:ba:c0:ec:e3:2d:79:71:a4:32:
24:fe:00:e0:4c:09:5c:11:e7:71:9e:8a:66:2e:f0:71:c1:37:
ab:0d:f5:84:e7:53:50:84:d4:77:68:86:3c:9c:3e:2d:ab:4a:
8b:6e:57:23:66:28:13:09:b4:c3:8b:3e:87:f3:c5:24:14:e1:
4e:84:71:b9:d8:75:1b:ce:8e:c9:a5:b7:07:c4:8a:e3:d4:dd:
65:cc:84:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 21:13:01 2025 by rpki-client