Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
File: FwSlHYT7ptD-IYrtypWolNzOHNc.mft (raw, json)
Hash identifier: xx7UMVbh74OT43aLAwx2V82kwbwzkSvSxmWISlqTSKo=
Subject key identifier: E9:88:E8:7C:48:9B:03:B8:3B:AA:3E:53:FA:EB:07:E7:C1:5E:1A:CE
Authority key identifier: 17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
Certificate issuer: /CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Certificate serial: 0197B8FD0D9C6BDDB65316BD5BA132DAFCB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
Manifest number: 135A
Signing time: Sun 29 Jun 2025 00:01:21 +0000
Manifest this update: Sun 29 Jun 2025 00:01:21 +0000
Manifest next update: Mon 30 Jun 2025 00:01:21 +0000
Files and hashes: 1: FwSlHYT7ptD-IYrtypWolNzOHNc.crl (hash: KTMG5G+tCS4/gCaQ2PI4nBvSWBz/NV6DRyRjDXbeGqw=)
2: vzORurH_cWu4s93Hg1XT5ltdLe0.roa (hash: lCzy3hcZEBhDFnviizG4eyjDlw5OJ8Xly0F6Emk8/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:fd:0d:9c:6b:dd:b6:53:16:bd:5b:a1:32:da:fc:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1704a51d84fba6d0fe218aedca95a894dcce1cd7
Validity
Not Before: Jun 29 00:01:21 2025 GMT
Not After : Jun 30 00:01:21 2025 GMT
Subject: CN=e988e87c489b03b83baa3e53faeb07e7c15e1ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:2c:22:76:a9:6e:3d:1d:bf:cc:bb:b6:b4:
6e:67:ed:ed:e9:af:ff:fd:1e:a6:08:ff:87:b7:59:
32:f0:75:b2:76:21:d6:12:a7:a6:04:ba:38:d0:2c:
ff:50:72:bb:d9:d3:d1:06:77:89:8c:82:0b:96:a4:
7a:1a:8c:19:51:5b:42:42:df:29:7b:d6:0e:f4:02:
6a:20:71:a7:6c:6f:fb:ea:1d:a1:da:3b:bc:b7:34:
69:17:8f:69:9e:23:62:6e:8d:1c:91:6a:e3:9e:34:
8e:5f:1c:80:36:8f:5b:ce:62:e6:ed:73:3b:1b:9b:
6c:ed:5c:95:d4:d0:f5:8e:e4:fb:be:2e:9e:ba:20:
4c:3d:02:fa:02:53:b7:97:8c:c8:5a:8c:27:04:9e:
ee:97:9b:81:58:19:ce:d4:09:08:7e:42:7e:2b:a6:
6a:ed:88:62:59:91:b2:29:94:84:04:86:6a:a0:1b:
bb:87:1f:78:7a:f6:58:fe:2d:5e:0e:c8:2b:85:a2:
2f:33:02:57:eb:f0:21:6b:dd:bd:99:f0:4c:1e:94:
26:69:53:b8:9d:5b:b7:41:86:ca:f3:78:9b:cc:10:
50:7f:8f:72:aa:ef:42:c0:92:d3:09:47:85:5c:ab:
01:06:7e:70:0e:0b:9d:83:1a:10:44:45:51:bd:9a:
5f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:88:E8:7C:48:9B:03:B8:3B:AA:3E:53:FA:EB:07:E7:C1:5E:1A:CE
X509v3 Authority Key Identifier:
keyid:17:04:A5:1D:84:FB:A6:D0:FE:21:8A:ED:CA:95:A8:94:DC:CE:1C:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwSlHYT7ptD-IYrtypWolNzOHNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/e0ddde-cc9f-4807-8fa2-eaf924731218/1/FwSlHYT7ptD-IYrtypWolNzOHNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:a3:72:a9:60:95:cb:cf:b9:89:86:bb:ea:9f:ba:de:b6:6f:
b7:7a:e1:e1:7d:0c:77:a4:61:1d:27:ba:29:86:f7:5b:a4:99:
fa:f4:87:43:6e:3b:fb:7a:06:df:f5:4c:02:5c:37:60:40:a9:
b3:f3:15:75:10:95:ff:f8:2c:25:2a:48:8c:1c:3c:43:1a:46:
1a:27:16:1f:87:62:6a:00:6f:81:d5:1e:63:b3:db:cb:b4:7c:
2f:2b:bf:22:e2:e7:63:08:e7:80:e2:9d:f9:28:b3:da:a0:65:
2c:40:74:61:d7:38:4c:e2:e0:17:7a:81:81:9e:65:7e:15:a6:
e8:56:6c:5f:0d:5f:06:2d:6f:06:34:af:d2:4f:99:95:49:f0:
a2:59:cd:7e:8c:f8:5b:e7:fa:34:d2:8c:01:18:2d:04:fd:0a:
6f:28:16:dd:61:e1:72:25:5b:f8:92:be:18:fa:25:86:6f:06:
3c:bc:dd:38:f0:ba:d6:f9:bc:52:28:90:69:2f:32:d0:d0:4f:
eb:86:7c:af:fd:22:6f:73:a3:61:2d:cd:df:79:27:37:a5:ee:
0d:a2:91:87:e7:cd:2d:25:b5:87:6e:ca:d0:ba:b4:06:14:4a:
05:54:54:9e:8f:46:51:d9:f8:e4:2f:6f:8f:1d:71:41:a3:95:
64:2f:19:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:36:43 2025 by rpki-client