Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
File: fbq8m8nDq4pzmius48V7AvRFkOs.mft (raw, json)
Hash identifier: vsw7KztD0JSJXxikjDbOxvsyX0CqcY/WCd1/gNJqTOo=
Subject key identifier: 53:58:E7:5E:2E:06:2F:09:95:D6:95:AE:34:F2:0A:DB:3B:06:5C:E4
Authority key identifier: 7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
Certificate issuer: /CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Certificate serial: 0197D2F3C8D2B77000115BE81107002E4023
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
Manifest number: 15C0
Signing time: Fri 04 Jul 2025 01:01:21 +0000
Manifest this update: Fri 04 Jul 2025 01:01:21 +0000
Manifest next update: Sat 05 Jul 2025 01:01:21 +0000
Files and hashes: 1: fbq8m8nDq4pzmius48V7AvRFkOs.crl (hash: xRZ5VrULwTnEPolBf2EkuQ3j27G0csyOPPkW7+A+A+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 23:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d2:f3:c8:d2:b7:70:00:11:5b:e8:11:07:00:2e:40:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dbabc9bc9c3ab8a739a2bace3c57b02f44590eb
Validity
Not Before: Jul 4 01:01:21 2025 GMT
Not After : Jul 5 01:01:21 2025 GMT
Subject: CN=5358e75e2e062f0995d695ae34f20adb3b065ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4f:41:70:c7:99:7c:3e:14:0d:2c:6c:21:3a:
75:e9:0f:96:02:47:06:b8:3d:07:cd:26:44:00:20:
4b:d0:7c:40:d9:64:5b:a5:d3:c5:b6:c0:68:80:03:
ed:c8:ee:8c:5b:ad:24:b5:4c:18:6d:65:ba:91:25:
91:a9:93:d0:91:26:41:c5:da:d0:81:eb:12:ff:51:
47:46:8f:df:da:6c:8b:50:46:1f:dd:a7:a4:bf:8e:
64:11:0e:9b:67:7e:0c:c0:9f:76:d5:25:70:9c:43:
74:a4:d2:ac:66:68:90:d4:52:76:53:f5:91:5d:fa:
e3:4f:07:0d:4d:8a:42:a2:e7:35:92:fa:c6:5d:61:
49:43:34:20:8e:c5:15:ab:2f:ed:23:97:09:1b:7d:
ca:6e:c4:4f:8b:c9:25:bd:6d:1c:16:1e:48:2b:96:
5d:85:5b:93:6f:27:95:b4:70:57:cb:28:7f:34:e8:
1b:79:6a:fb:96:46:d6:ed:2f:84:92:39:00:9f:3d:
f5:bb:7b:2c:29:65:eb:61:77:17:5e:c6:3c:25:66:
28:47:f1:57:63:fe:a9:c0:2f:d3:cc:26:d2:19:ae:
17:8b:63:3d:1f:f4:fe:7f:b9:71:fa:aa:c7:98:99:
ef:56:31:0b:36:b9:89:ce:1d:a4:52:18:24:64:62:
00:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:58:E7:5E:2E:06:2F:09:95:D6:95:AE:34:F2:0A:DB:3B:06:5C:E4
X509v3 Authority Key Identifier:
keyid:7D:BA:BC:9B:C9:C3:AB:8A:73:9A:2B:AC:E3:C5:7B:02:F4:45:90:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbq8m8nDq4pzmius48V7AvRFkOs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/dd36ed-4bea-4092-ae8f-70bd791be560/1/fbq8m8nDq4pzmius48V7AvRFkOs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:69:88:1d:6b:48:3e:ac:85:2d:bc:a0:fb:07:d6:31:ff:fd:
dd:24:0e:e5:df:cf:10:08:05:24:d4:f5:f8:67:40:ab:a2:2b:
15:b3:f6:13:23:28:54:61:eb:28:27:be:6a:2f:89:88:5a:b1:
62:3f:ae:12:13:49:22:16:24:96:53:92:38:ed:a3:68:a2:f0:
b6:5a:2d:e4:fd:48:d7:32:a1:62:05:53:e6:5d:8b:61:b9:f7:
3a:ef:cb:c2:2a:92:21:96:c9:6b:87:af:c3:a4:97:bf:82:74:
21:0d:39:99:6d:03:0c:a0:da:6a:97:60:26:4d:37:14:a0:04:
97:eb:f9:cb:e7:ee:7a:9d:1c:f0:49:5e:d9:c7:53:95:9a:1e:
ad:f5:93:8c:7b:cd:4e:72:82:32:f1:16:c7:83:9b:39:73:4d:
b2:62:da:41:06:0d:6d:3b:69:1c:4d:c4:49:28:a5:41:3e:66:
b7:15:6d:e7:f4:0c:08:ee:62:05:c2:ac:d8:64:4d:14:6d:37:
55:88:d8:06:53:d8:8d:e5:30:a2:04:c9:8b:f6:76:94:54:9a:
41:f8:35:c8:39:79:25:3e:c5:46:30:81:3f:df:a8:1e:3d:4e:
5e:00:ba:dc:b8:02:e5:d4:ae:32:fc:f7:fe:1e:59:1b:5c:9a:
4b:69:38:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 4 03:24:53 2025 by rpki-client