Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier: EPjs1mUA4iu0K8jZTiAdsURREx1TW6b+qbcQE/DESSY=
Subject key identifier: 50:FD:3D:BB:C0:89:15:58:71:B4:26:7F:62:78:BD:20:80:F1:AA:41
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial: 019766CD5025F7A8AA0EE74FF057FB110B8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number: 0292
Signing time: Fri 13 Jun 2025 01:00:20 +0000
Manifest this update: Fri 13 Jun 2025 01:00:20 +0000
Manifest next update: Sat 14 Jun 2025 01:00:20 +0000
Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: RChX5ALdmWvalrFOq0rxPKg8rI+F6AMLY3zQouZ+Zck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:cd:50:25:f7:a8:aa:0e:e7:4f:f0:57:fb:11:0b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Validity
Not Before: Jun 13 01:00:20 2025 GMT
Not After : Jun 14 01:00:20 2025 GMT
Subject: CN=50fd3dbbc089155871b4267f6278bd2080f1aa41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1c:3d:f7:40:a1:71:d4:a0:85:fb:5b:90:e1:
27:6f:72:25:43:07:59:8d:df:55:6e:0c:99:f0:b2:
36:12:b6:28:79:b3:21:40:86:d1:c8:e2:4b:23:9f:
ba:2d:b2:2b:25:da:ad:47:5b:88:fb:34:67:2f:2a:
38:97:a8:cb:6d:34:d6:46:e1:59:b9:9c:3d:55:9b:
27:98:a8:38:7b:ba:3c:2b:21:42:54:94:17:a3:4d:
c5:be:ca:e6:29:b8:e5:36:17:af:ea:2c:ce:5c:57:
f7:5d:67:f2:1f:da:d3:47:0d:64:2a:64:97:b2:08:
cc:a4:f3:9e:f8:e1:8f:ac:53:83:a8:b0:81:20:e2:
a0:9a:95:72:37:cd:e9:10:d4:46:76:6e:71:d2:35:
d4:5a:cb:a5:b4:3c:d1:78:ac:c1:8e:56:5e:c8:3b:
29:20:38:17:84:bc:bf:c0:2c:4e:59:5a:fc:c5:16:
97:65:15:dc:ca:ab:bf:16:d9:7c:23:ec:7a:18:97:
05:44:5e:85:74:44:10:74:fe:89:85:e0:d2:45:cd:
69:6d:78:da:10:92:b3:26:d2:ac:ac:3b:d9:7c:3e:
bd:b0:12:2b:2c:7f:40:52:7f:44:ca:f5:f5:ae:df:
ca:06:da:16:9a:07:27:2a:bb:f1:bf:e0:2e:ab:99:
82:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FD:3D:BB:C0:89:15:58:71:B4:26:7F:62:78:BD:20:80:F1:AA:41
X509v3 Authority Key Identifier:
keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:9b:93:61:fc:fe:51:b0:5c:44:c2:07:c8:e8:40:db:30:86:
60:d5:0a:ca:ae:4f:7a:2a:2b:ad:c0:93:a1:9d:13:44:75:61:
83:84:52:59:22:76:1f:88:3c:70:76:74:f6:d0:8c:50:16:9c:
03:77:50:87:46:94:03:d7:ab:35:5d:ac:a0:0a:bc:99:d9:c3:
13:25:b4:52:d7:d7:3e:21:4f:dd:63:ce:ab:a9:6b:db:43:4a:
7b:7e:1b:ed:c5:5b:38:bd:fc:f9:3c:6d:8b:ed:16:98:38:a7:
9b:3a:3d:ac:c8:18:41:93:f7:42:1a:6a:ed:f4:64:05:c1:c9:
47:6c:81:37:56:bc:ef:c5:d5:e6:b6:51:8f:2c:7a:69:74:5f:
10:af:2b:54:12:d9:26:35:48:d2:78:bd:20:f7:72:e6:94:cc:
9f:15:b1:b9:65:c6:39:12:01:ab:53:14:15:33:80:40:e2:42:
75:d5:d0:ae:66:0e:c2:9f:9a:9b:d8:6b:ab:ee:15:33:8e:0e:
36:fd:a7:d8:76:22:df:06:a8:cf:0f:79:38:89:c6:ab:44:95:
23:9e:3b:2e:a1:1a:1c:c9:8a:9c:63:2e:21:9b:23:b8:9a:6b:
bf:cd:67:c8:aa:b8:16:dc:9e:d9:ab:0d:28:7f:db:7d:24:32:
7c:99:b1:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 07:08:40 2025 by rpki-client