Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier: Gxc+sgorX5KHbzY67t/B5fOxEh/FNeYgp1gCPuRgw08=
Subject key identifier: C3:7E:64:F0:49:2C:5B:BD:46:80:C7:1F:79:3D:73:4C:0B:7F:94:1E
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial: 01976AAA8E0DDB6542341E196256CF2FD37E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number: 0294
Signing time: Fri 13 Jun 2025 19:00:51 +0000
Manifest this update: Fri 13 Jun 2025 19:00:51 +0000
Manifest next update: Sat 14 Jun 2025 19:00:51 +0000
Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: gyX9sNTFz39f+EIuQFBjZbT2uxluSVMAIWqemetZD9A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:aa:8e:0d:db:65:42:34:1e:19:62:56:cf:2f:d3:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Validity
Not Before: Jun 13 19:00:51 2025 GMT
Not After : Jun 14 19:00:51 2025 GMT
Subject: CN=c37e64f0492c5bbd4680c71f793d734c0b7f941e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:fc:d9:7c:f6:d7:ab:ac:8f:e4:fa:dc:bf:ac:
58:48:cb:76:f8:b2:00:b4:87:cb:73:fa:d3:a9:d8:
fc:b1:76:f7:45:89:d5:fe:63:55:8c:aa:4f:b1:bc:
da:b7:0f:36:69:41:d0:2e:13:9d:f6:95:6c:ea:e0:
65:24:97:d6:42:69:c0:86:e5:3a:3f:23:db:7d:96:
c1:69:c1:82:b4:f5:93:52:dc:7b:3b:be:5b:2e:92:
55:04:73:67:91:4b:47:69:c8:bd:60:1b:e5:d7:a3:
6b:a9:25:d0:3a:60:99:8e:85:6f:1c:3e:b3:5d:f6:
9f:78:c8:51:73:cf:99:3e:e9:80:c6:8c:12:88:63:
62:3b:bb:3c:1f:e2:2f:ff:d6:7e:10:d8:28:d2:ce:
0f:53:10:37:89:7b:37:b9:3f:c4:c9:98:7d:b1:31:
1c:b0:1c:82:ac:df:28:68:69:b3:8d:2b:ab:88:67:
47:bd:11:83:cd:50:67:9f:0c:64:63:f9:92:fb:a4:
40:4c:72:b3:d2:ca:ff:71:c2:b5:f8:0c:c1:8a:61:
95:54:0d:b9:c8:a4:03:41:14:fb:44:05:81:0c:dd:
61:ae:cb:27:36:25:95:96:79:d2:28:d1:d9:c8:10:
cc:71:f9:a0:42:9e:5d:de:47:e5:29:ee:4b:92:2a:
09:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7E:64:F0:49:2C:5B:BD:46:80:C7:1F:79:3D:73:4C:0B:7F:94:1E
X509v3 Authority Key Identifier:
keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8e:e6:28:f0:a6:29:ac:33:52:6d:0f:13:3a:55:6f:ca:95:
3e:d4:44:d0:44:1c:7f:0f:4b:bf:06:2a:f0:87:08:6e:de:e0:
27:5d:e0:bd:d9:fd:27:dc:6a:80:01:9f:08:57:a7:f5:86:77:
71:6a:fc:42:d8:1d:65:5d:02:57:cc:a0:87:62:48:ca:ba:82:
d8:b0:c4:d4:83:58:13:7a:cf:48:8b:5e:11:5f:18:15:8d:b1:
cf:07:7c:e0:d3:c6:01:33:81:43:4a:6f:dc:be:5b:f5:91:aa:
25:d1:4a:04:c1:31:bb:eb:14:bb:23:8c:fa:97:58:16:b5:6c:
a5:db:38:64:51:71:16:50:f9:88:4e:00:b8:6e:09:27:90:89:
bd:56:47:bc:04:e6:b2:52:cb:c5:74:3b:26:44:76:ae:41:6d:
5c:1b:0d:51:1b:06:e7:43:0e:a2:f7:ec:cb:d1:05:d2:1d:5c:
0b:06:59:4d:82:f1:d8:81:0c:4c:dd:2e:ae:82:5c:fb:11:49:
48:53:4c:24:8d:8b:67:df:49:80:8c:83:ef:9d:a6:11:04:66:
4a:c5:64:7c:03:2a:af:87:34:8a:31:f9:98:b1:98:48:da:da:
7f:ea:b4:a0:60:86:35:ea:2b:ea:76:b7:2f:07:e4:8b:b7:f6:
a2:b6:62:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 22:56:08 2025 by rpki-client