Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier: WCLxm9YkSDr8PsjsNjRlWelBevvTYKX8aG1D5rU4N/Y=
Subject key identifier: 53:1B:0A:7C:EF:AF:6A:37:F7:5B:4A:4A:A3:FF:9C:AA:75:F8:2E:6C
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer: /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial: 01975E6F11480CFEFDB53377CA519A21237D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number: 1584
Signing time: Wed 11 Jun 2025 10:00:26 +0000
Manifest this update: Wed 11 Jun 2025 10:00:26 +0000
Manifest next update: Thu 12 Jun 2025 10:00:26 +0000
Files and hashes: 1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: sdrmATfBz0zGKenx3h96hZbimq/vGxxMVo2CNZRfx6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 10:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:6f:11:48:0c:fe:fd:b5:33:77:ca:51:9a:21:23:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
Validity
Not Before: Jun 11 10:00:26 2025 GMT
Not After : Jun 12 10:00:26 2025 GMT
Subject: CN=531b0a7cefaf6a37f75b4a4aa3ff9caa75f82e6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:30:8d:8f:42:9f:44:f3:5a:c7:45:7c:c7:eb:
e5:98:02:9c:fd:8b:e6:e1:cf:fa:88:a6:7d:36:97:
1c:7f:c2:ee:3a:a0:1b:20:dd:f2:cd:88:64:c9:03:
97:8a:48:5f:93:2d:a7:d1:be:0d:b0:35:85:93:fd:
c0:a3:1c:ee:7b:24:a4:83:e9:3d:ad:51:95:3a:e5:
e0:60:9a:f2:de:cd:83:74:48:49:78:ed:02:5a:3c:
27:3f:63:11:f4:70:23:29:ec:e8:b5:00:03:48:81:
ce:f3:ed:db:d7:61:ee:92:b0:f7:4d:16:ab:db:b2:
ee:3e:cd:0c:fa:be:3a:96:74:93:09:7e:f9:a6:4a:
da:07:f6:e4:6d:29:64:e8:6c:c3:f8:fd:f3:c0:15:
67:11:47:14:7b:61:ee:7e:17:40:15:cc:1a:93:97:
2d:b8:fd:6c:6a:72:af:ca:20:57:1d:26:da:be:ef:
cf:dd:47:ca:68:3f:e5:e9:24:f8:84:01:b1:ea:24:
15:93:82:3c:8f:30:c9:10:40:48:41:f1:c3:b4:fd:
e2:fe:f4:b7:bb:23:1f:ac:80:2c:f9:ef:5e:93:4d:
71:3c:ee:78:c6:c3:e7:89:79:0f:a7:10:59:62:4b:
65:06:79:32:b2:74:a3:71:b5:97:31:8c:6f:0c:9f:
10:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:1B:0A:7C:EF:AF:6A:37:F7:5B:4A:4A:A3:FF:9C:AA:75:F8:2E:6C
X509v3 Authority Key Identifier:
keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e0:c5:cf:91:85:37:07:06:d4:fa:d1:25:e7:4c:e1:d5:57:
72:60:df:5e:bd:06:b2:46:b6:06:9a:87:8d:f3:85:b4:5a:49:
4c:a6:e2:8f:6a:d9:1b:a9:1b:66:a9:9b:a4:b9:f7:fe:2c:7f:
6f:c6:e7:b6:ef:7a:dc:47:97:98:35:7a:13:92:68:27:01:4c:
69:3c:b3:67:a7:25:5e:f7:63:85:06:c1:08:05:f6:96:1f:60:
3c:72:4b:f2:66:41:46:da:48:90:8c:81:bb:ab:e8:fd:5d:9a:
5a:e6:c0:4d:d3:b5:47:94:fa:97:d3:d3:1a:48:f2:f2:f9:9a:
6c:57:5e:33:55:09:1f:c6:73:ed:ad:f4:fd:97:28:07:5c:5e:
8c:70:fd:fb:63:2f:c1:4c:9e:6c:d1:a2:64:ae:85:77:5d:49:
a4:10:d4:09:a5:a0:c7:3f:e5:c5:89:18:90:00:a3:1c:c5:7a:
37:a9:20:d8:9a:36:fc:1b:00:64:c5:6d:01:3e:81:25:1f:72:
86:73:d6:e2:e1:7d:b6:9e:76:74:2b:0f:bc:dc:da:85:18:83:
b7:64:07:00:69:cd:cb:18:8f:46:2b:13:33:92:d0:01:41:e3:
2f:3e:f2:2e:aa:0e:ba:0d:d3:d4:13:9a:d5:ba:9b:3f:8c:ff:
ec:d7:ff:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 20:31:44 2025 by rpki-client