Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier: Uegh+YECfbKZFTQjJOQ3d+DDk7LTXwNea5/oASA7abc=
Subject key identifier: B4:18:40:D8:B5:F7:54:55:AF:37:C6:F1:B1:9E:59:03:CD:AA:1B:DF
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer: /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial: 0197605D715E2A6C21CB01E7C13B613E4466
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number: 1585
Signing time: Wed 11 Jun 2025 19:00:25 +0000
Manifest this update: Wed 11 Jun 2025 19:00:25 +0000
Manifest next update: Thu 12 Jun 2025 19:00:25 +0000
Files and hashes: 1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: Fqcg9aicMwZakZR50HtCvYnHfOV4f9gsFQUE38GnDUY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:5d:71:5e:2a:6c:21:cb:01:e7:c1:3b:61:3e:44:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
Validity
Not Before: Jun 11 19:00:25 2025 GMT
Not After : Jun 12 19:00:25 2025 GMT
Subject: CN=b41840d8b5f75455af37c6f1b19e5903cdaa1bdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:15:bf:24:45:a1:4d:96:c4:e4:cd:00:01:de:
67:97:bb:fe:a1:3d:24:8a:71:3b:e7:98:94:b1:65:
2c:05:b7:aa:39:34:8d:46:0d:81:9a:bd:25:34:3f:
b0:e5:59:e4:da:9e:4f:ed:89:2f:bf:91:90:0f:f3:
51:e3:70:be:98:6a:06:f5:80:b3:4e:16:53:aa:90:
b0:0d:dc:b8:ff:2d:68:7e:94:93:1d:24:9b:51:fa:
bd:37:ea:5e:f1:f6:97:8f:50:24:f8:eb:37:d3:c4:
18:50:cd:68:98:46:e7:77:53:c0:78:3d:61:4b:17:
8f:5b:73:9f:38:44:ff:4a:dd:0b:2f:1d:e0:dd:17:
c0:e7:f4:50:23:9d:9f:9e:f4:51:50:99:0f:33:80:
97:ed:3c:eb:be:2e:7b:cb:b6:94:66:02:69:1c:ad:
a0:5b:2e:49:fe:47:80:c0:3e:ad:d7:f6:bf:a3:dc:
1c:c1:d2:59:cf:08:96:2a:e9:53:cd:ce:36:1f:82:
a5:16:14:c8:9a:87:ff:99:02:e2:c6:3b:3f:2f:86:
b5:65:33:0f:7e:e6:f0:1d:5f:0f:8c:b8:77:3b:1c:
42:ab:3f:f9:93:61:59:3d:b0:b7:32:4a:8f:43:5e:
21:d5:11:46:de:71:34:51:92:bf:ad:e0:51:f5:82:
d0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:18:40:D8:B5:F7:54:55:AF:37:C6:F1:B1:9E:59:03:CD:AA:1B:DF
X509v3 Authority Key Identifier:
keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:65:ab:23:08:ae:4b:87:80:0b:05:28:bb:f8:94:63:b7:6b:
2c:ed:b0:d0:78:4c:a1:02:31:e6:c0:14:e8:29:4e:ab:c1:c3:
42:4f:27:bd:1a:e4:4c:3b:9b:2d:59:0b:b9:de:dd:e3:af:05:
5f:70:48:12:f8:fd:5e:1e:36:2d:f7:bc:65:82:fb:cd:b1:a8:
e6:f9:1b:7d:c6:ef:56:11:be:49:71:fc:5c:b4:7b:18:63:53:
af:2e:8f:fb:e5:f2:bc:82:dc:97:01:43:a6:8c:22:f1:f0:54:
4c:bb:ac:25:1e:45:c1:70:fc:85:b3:cf:05:54:27:cf:35:14:
3c:6b:1b:b8:f0:c1:8a:b3:d4:34:1b:c6:b0:17:08:57:6c:0b:
3e:a4:8f:8b:99:44:5d:b0:21:9b:5d:18:4a:1e:42:29:67:d9:
2f:5a:c1:5c:12:26:6e:99:79:0e:0a:8a:e7:5b:d9:51:4b:04:
7b:f0:42:47:09:b9:5b:b8:fb:17:3c:6c:4f:27:d2:e0:b5:01:
74:2a:4f:5e:04:91:58:fb:6f:e4:66:f7:4c:1c:09:98:e7:e8:
a9:c0:43:48:27:ec:73:df:09:59:07:b6:f2:f1:a4:ee:15:37:
a1:50:44:c8:40:b8:a8:d8:b4:12:b6:b9:f8:4f:e2:99:48:59:
4c:56:89:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 01:46:43 2025 by rpki-client