
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
File: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft (raw, json)
Hash identifier: 1uld4afNHo1YXaogKb5XYZHRvNryN6rhR7RiZBy3Co0=
Subject key identifier: 30:4F:00:56:3C:98:1E:D5:82:34:91:8A:33:FB:88:29:40:3B:F9:2D
Authority key identifier: 17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
Certificate issuer: /CN=171839a0b6476dfbf8335101613ce1a7721ef385
Certificate serial: 0197B6A05F4D87E9A67BC65F445E685314F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
Manifest number: 1544
Signing time: Sat 28 Jun 2025 13:00:52 +0000
Manifest this update: Sat 28 Jun 2025 13:00:52 +0000
Manifest next update: Sun 29 Jun 2025 13:00:52 +0000
Files and hashes: 1: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl (hash: PrUexcEo1ewMUb8ytFLdKHgvJd7Io2uYNE15SEU+w/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5f:4d:87:e9:a6:7b:c6:5f:44:5e:68:53:14:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171839a0b6476dfbf8335101613ce1a7721ef385
Validity
Not Before: Jun 28 13:00:52 2025 GMT
Not After : Jun 29 13:00:52 2025 GMT
Subject: CN=304f00563c981ed58234918a33fb8829403bf92d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:07:5c:c4:4e:8b:e9:64:7b:4c:7e:84:b7:9d:
d6:7f:35:31:4d:d0:1c:0d:4c:e6:e2:b2:e6:31:61:
9e:17:90:28:ed:fb:1d:ee:52:d6:5b:82:a7:2c:e2:
8f:98:bb:84:ce:94:0c:9c:35:aa:cd:60:52:da:ba:
e4:75:f2:e4:5f:45:4c:9f:86:8a:49:fc:cd:72:07:
22:e1:94:8a:f1:79:8b:eb:f3:9c:83:ca:46:03:68:
a4:a3:0d:23:57:c6:74:d4:14:27:5e:fa:f9:38:e5:
f9:44:bc:82:18:4e:91:8c:7d:79:7b:72:14:bd:5f:
ec:e8:a7:b9:c5:0e:f5:ba:59:ca:8a:8e:78:38:19:
aa:ae:4b:71:63:97:a5:eb:1b:50:36:37:a6:7a:b8:
40:a8:4f:fd:5a:1d:5e:f1:0c:ad:ab:dd:ed:57:97:
b6:11:59:66:e7:5c:44:dc:ed:ad:e3:c8:bf:c5:40:
10:9c:ed:db:64:51:fc:6a:dd:52:3b:d2:4c:26:4f:
af:80:92:d2:59:bd:66:4a:00:99:89:16:71:61:ba:
0f:e2:83:1d:9c:13:10:00:a1:16:93:d2:bd:3e:c1:
30:8d:dc:cb:72:e9:7a:ac:75:63:0d:0d:3a:e3:18:
fb:97:6f:b5:73:10:24:bf:c3:fa:e8:40:91:80:19:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:4F:00:56:3C:98:1E:D5:82:34:91:8A:33:FB:88:29:40:3B:F9:2D
X509v3 Authority Key Identifier:
keyid:17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e4:d3:28:58:bc:72:fd:7e:b3:24:e8:92:b4:40:48:29:73:
45:e2:2f:d9:2e:e5:ac:28:0b:92:90:5a:6d:9b:b3:75:3e:3e:
b5:7b:4b:7d:1d:5a:2d:a0:2c:f5:65:de:06:fd:e7:19:44:77:
ab:92:0f:d4:9f:36:15:2f:00:62:ff:67:cf:cb:fd:e4:d8:51:
f5:6a:17:44:42:85:cf:e2:bb:49:46:3d:1a:dc:b3:8e:7d:ec:
dd:7a:b8:e7:e0:e9:8f:cc:f8:7b:05:ec:30:66:6a:7f:eb:96:
b3:1d:3c:8e:55:fe:09:5c:c4:2f:86:44:d2:00:34:41:ae:2e:
38:60:54:70:84:86:c5:96:36:09:de:47:b8:e7:d3:c6:7e:ce:
05:0a:04:f5:3b:e6:08:5b:13:2b:33:0e:10:e3:db:2d:ce:c2:
95:b1:14:69:f1:d3:2d:0a:f9:cd:ea:c8:75:c1:8c:10:ec:3d:
09:a1:d8:84:72:1f:1d:52:e0:25:fc:b9:9b:cd:40:fe:fe:20:
af:5e:85:e8:83:ea:4b:ca:eb:06:ab:21:8c:43:dd:6f:c6:c0:
59:20:e6:0e:36:c0:c9:1e:74:b9:cb:2e:03:ce:49:6d:e3:4b:
35:3d:b6:c8:d8:9e:dc:b0:55:c9:bd:b6:5d:1a:2f:d7:0c:53:
5c:36:f8:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:31:31 2025 by rpki-client