Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
File: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft (raw, json)
Hash identifier: x5s7igxCzNxYaDF/rq5+yd4JY3kdEoLiTSDdrUS55uw=
Subject key identifier: 1C:E9:CB:5E:77:08:08:F6:9D:18:E5:AD:C8:0E:EA:0B:38:7A:C7:08
Authority key identifier: 17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
Certificate issuer: /CN=171839a0b6476dfbf8335101613ce1a7721ef385
Certificate serial: 0198D84FB85C5ECA2A46CCF5CC2327AB71D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 19:02:39 +0000
Manifest this update: Sat 23 Aug 2025 19:02:39 +0000
Manifest next update: Sun 24 Aug 2025 19:02:39 +0000
Files and hashes: 1: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl (hash: e4AKZe/hD18G9wiOvVsOyteDj65A7AEIY9Oec0ToIKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d8:4f:b8:5c:5e:ca:2a:46:cc:f5:cc:23:27:ab:71:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171839a0b6476dfbf8335101613ce1a7721ef385
Validity
Not Before: Aug 23 19:02:39 2025 GMT
Not After : Aug 24 19:02:39 2025 GMT
Subject: CN=1ce9cb5e770808f69d18e5adc80eea0b387ac708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:bc:58:a1:1d:34:e4:93:3f:1c:40:84:8d:34:
0f:99:0c:8f:9a:ba:db:c2:dd:61:63:69:29:4e:a3:
29:df:01:9a:55:e7:b6:0f:87:94:4b:1f:87:30:d8:
16:2d:e9:66:53:3e:d1:29:98:97:71:f2:23:c9:94:
06:ba:50:65:34:01:43:eb:fd:ed:a2:1f:c3:66:8b:
46:7c:11:0e:dd:b2:89:f5:4c:74:f5:8c:eb:0b:ce:
c7:dd:5f:51:83:82:cb:db:f8:f2:d9:b4:62:a5:9c:
8f:8e:f0:e0:a7:64:4d:a9:86:dd:19:86:ea:d6:d1:
a2:22:f3:ae:5e:6c:0d:59:f5:4d:44:f1:74:f9:fb:
e1:f7:53:5b:c1:2f:fd:e5:6c:09:cf:9f:79:ea:19:
98:9c:ae:8e:40:6e:05:76:ee:c4:45:cc:c2:84:4e:
fc:7d:ed:56:f4:a6:93:ca:47:96:5f:1a:0d:9a:59:
fa:bb:d9:4e:c8:0e:76:9b:fe:80:7b:de:ce:20:db:
c7:a6:06:ab:ec:f8:cb:46:6f:8a:b8:a1:bf:b7:f7:
49:03:55:3c:84:d0:f7:e2:de:52:21:aa:bd:6b:4e:
76:d3:3e:9d:91:37:3a:61:38:af:0f:bd:33:50:19:
67:04:35:44:06:74:7e:59:38:7f:d3:2f:0f:8f:81:
61:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E9:CB:5E:77:08:08:F6:9D:18:E5:AD:C8:0E:EA:0B:38:7A:C7:08
X509v3 Authority Key Identifier:
keyid:17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:53:21:29:51:a5:4d:35:02:48:2b:55:73:00:3c:57:4a:b8:
06:63:1a:4a:ad:74:df:1e:8e:78:3b:6b:ec:9f:28:b2:40:ec:
09:97:b0:02:14:fb:46:1e:f3:41:0c:9f:29:00:8f:98:9d:c1:
64:3c:31:92:0c:35:c3:22:0d:ea:20:f9:20:66:73:db:cc:48:
63:b4:d6:04:54:e0:e7:9f:b9:48:7d:c0:32:be:7f:59:82:9e:
b7:10:35:ee:c1:cc:e1:0b:25:fe:df:93:17:a9:c9:1a:6c:47:
72:75:aa:0e:4f:7f:fe:29:91:6a:5d:65:38:92:9c:b1:f2:3a:
a6:a4:cb:46:70:9d:c3:46:96:f8:f8:ec:07:c7:d5:7b:88:28:
1c:92:39:e1:81:89:36:d6:69:3b:b5:69:15:f8:f3:09:cd:20:
e6:1a:d8:8b:e0:b7:30:42:95:c2:70:a9:ef:40:76:0b:c2:71:
04:c4:a3:2a:e6:83:54:7d:69:0e:76:ec:f7:2e:f5:fe:22:88:
ca:80:63:42:da:9a:9b:02:ab:7a:e4:37:2d:a6:4d:6f:f7:c4:
4a:c9:a2:c8:33:a3:b2:1c:5b:64:86:c2:7c:1f:59:c9:06:b8:
00:57:fe:80:7b:7a:76:b5:c6:9d:8f:3d:3a:5e:f0:ef:97:ce:
97:08:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 21:51:33 2025 by rpki-client