
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
File: FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft (raw, json)
Hash identifier: zPGBNgIDuA5joJPD2JbkXRvm5iZWSQ2hKbYRSQro2eo=
Subject key identifier: 3A:B5:07:AA:36:DA:82:99:9B:A6:C5:D6:E1:B8:24:C0:40:72:A8:1B
Authority key identifier: 17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
Certificate issuer: /CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Certificate serial: 01974BC3F7B2467832E78D60235AB585D0AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
Manifest number: 0535
Signing time: Sat 07 Jun 2025 19:00:23 +0000
Manifest this update: Sat 07 Jun 2025 19:00:23 +0000
Manifest next update: Sun 08 Jun 2025 19:00:23 +0000
Files and hashes: 1: FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl (hash: hFEOHfx4cbm4CHjAIVj2ny6urzhM7o6B/fvZsXi5WdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c3:f7:b2:46:78:32:e7:8d:60:23:5a:b5:85:d0:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Validity
Not Before: Jun 7 19:00:23 2025 GMT
Not After : Jun 8 19:00:23 2025 GMT
Subject: CN=3ab507aa36da82999ba6c5d6e1b824c04072a81b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a0:fb:e4:1f:5a:16:3b:c9:7d:53:6e:fc:a9:
a6:bd:ba:3c:94:98:ba:a8:07:8c:d2:da:c9:ef:fa:
e4:b3:b1:2a:7a:fa:21:b0:51:f6:45:2c:78:b7:ed:
51:d3:24:33:cd:1d:aa:95:09:6f:12:a5:cc:43:60:
90:b0:5f:1f:dd:92:4c:f0:50:79:66:fc:c0:89:4b:
0e:a5:9e:9e:52:59:80:bb:a7:ea:f7:a4:0c:36:ec:
b6:3e:53:cd:8e:fc:57:38:79:6e:0d:b1:17:0f:c6:
56:b6:b7:8c:43:e5:52:18:28:0d:97:d6:bf:13:13:
0f:19:45:8f:8f:2b:21:da:5d:0b:29:61:71:c7:93:
32:da:d7:b8:4c:a5:8c:b6:b4:20:0e:59:ba:44:d4:
e9:5b:a4:bc:dc:9d:94:8f:cc:cb:28:2c:d7:50:cb:
61:9c:ab:a2:07:45:ef:60:e3:e4:93:ef:65:09:05:
06:b5:52:01:39:f0:ab:40:d2:91:cb:84:e8:64:0f:
0b:52:99:62:1c:8d:63:3f:b0:7d:df:e2:6c:a7:1a:
ac:42:c1:ec:b1:a6:a6:f7:e3:bf:54:4d:a7:06:6a:
31:84:d2:0b:c8:04:2a:0c:d6:ae:c8:e0:18:d3:ac:
6b:84:00:5a:11:8b:12:76:cc:97:01:b8:6c:ee:af:
c3:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B5:07:AA:36:DA:82:99:9B:A6:C5:D6:E1:B8:24:C0:40:72:A8:1B
X509v3 Authority Key Identifier:
keyid:17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:e0:9e:9f:a3:46:9b:06:ec:8e:8e:fa:42:8a:3b:7c:3a:a1:
16:e2:e1:71:45:25:72:b3:9a:25:a2:56:61:eb:2b:8e:b2:84:
9b:6b:68:2e:08:c5:47:79:1d:83:5a:22:a4:88:2f:fa:d7:9f:
e7:1f:5f:25:ed:b8:e6:a8:e8:09:6e:99:b7:a8:13:54:6a:7f:
8c:10:6b:2b:82:7a:ae:74:a1:d5:9d:fa:7c:0e:c9:8c:bc:f5:
9a:14:16:f4:a8:4b:4c:71:de:1d:b3:5a:df:72:f7:df:12:f4:
7d:11:20:38:5d:21:d3:4f:46:97:f5:d1:e6:78:55:54:5d:11:
1c:fb:dd:59:dc:b5:9e:66:0c:ce:4b:02:aa:2c:e7:d3:3a:79:
b0:c8:9f:18:f8:0a:2b:a4:a6:58:0b:fc:e7:89:a2:f3:cb:6b:
99:99:e7:fe:93:51:0d:4c:62:41:3f:ce:d8:7b:ed:ed:62:d7:
ae:61:25:63:69:ee:0c:af:13:5b:78:c1:dc:0b:ba:5d:f8:d5:
3c:b4:74:b9:d2:8a:0b:49:22:b6:1d:c0:66:83:bf:ab:d2:48:
f3:0d:5d:88:6e:79:87:3b:c0:ef:f0:43:8c:fa:b1:70:52:4e:
2a:9f:2f:dc:e5:74:69:6f:60:20:2e:96:ba:23:6a:bb:f8:77:
64:f3:10:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:47:22 2025 by rpki-client