Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
File: fPxZzhNuPpOobeVfBdSaWeFcu78.mft (raw, json)
Hash identifier: gJgFVbk035r4sDNk06M7vUQPOwiSt+Ah1auPmrFskQ0=
Subject key identifier: B0:A8:D1:84:34:95:5D:A7:CB:ED:3A:FE:B4:C7:D5:0F:AD:22:E9:74
Authority key identifier: 7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF
Certificate issuer: /CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf
Certificate serial: 0197B9D891D14E511D2C6ED23860BE9CA3A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
Manifest number: 0953
Signing time: Sun 29 Jun 2025 04:01:07 +0000
Manifest this update: Sun 29 Jun 2025 04:01:07 +0000
Manifest next update: Mon 30 Jun 2025 04:01:07 +0000
Files and hashes: 1: fPxZzhNuPpOobeVfBdSaWeFcu78.crl (hash: VVx+Zr6RFQ5JPRlY7fnUwiYPOq+tKaLBvnLPkZ608yg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:91:d1:4e:51:1d:2c:6e:d2:38:60:be:9c:a3:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc59ce136e3e93a86de55f05d49a59e15cbbbf
Validity
Not Before: Jun 29 04:01:07 2025 GMT
Not After : Jun 30 04:01:07 2025 GMT
Subject: CN=b0a8d18434955da7cbed3afeb4c7d50fad22e974
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:71:e8:13:bf:3f:28:62:fd:80:ff:7e:30:84:
dd:9e:c2:94:a5:97:20:28:3d:18:34:72:3a:e8:a7:
92:ea:e0:f9:d4:73:43:5f:92:ac:3c:b6:e1:97:a8:
fc:f8:38:2f:6d:76:a0:df:f2:2a:60:37:26:3c:e4:
bb:47:d6:0d:80:39:f8:da:89:18:ee:f5:16:ee:47:
4a:fd:0c:55:a8:87:8a:46:c0:63:48:52:f4:11:e0:
59:04:53:bc:29:16:f7:de:df:f6:c9:57:f6:7d:21:
f6:ca:44:05:bb:50:5c:96:04:81:96:5a:03:0e:ab:
a9:ef:9d:82:dc:fe:9e:5b:13:ec:b6:bb:0d:ce:5b:
27:61:6b:6a:6f:ce:83:50:39:7a:ed:cc:80:b7:f5:
07:f3:3a:c7:6e:a0:dd:51:1d:66:88:8d:9a:fe:fb:
59:74:e0:74:63:4d:eb:46:fd:e0:c7:78:0b:33:dc:
96:5d:d3:4b:31:12:6a:21:a0:8d:87:b7:7b:c0:25:
d7:11:56:d3:68:b5:81:42:01:d3:44:da:25:7f:29:
81:c5:f4:4c:e9:30:55:ad:37:c9:3a:0e:1f:69:9f:
75:e6:c1:c6:c4:ff:53:f4:b4:b9:2b:a2:be:a8:8a:
51:ce:9b:1c:89:e9:99:21:43:d2:74:31:92:05:b5:
27:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:A8:D1:84:34:95:5D:A7:CB:ED:3A:FE:B4:C7:D5:0F:AD:22:E9:74
X509v3 Authority Key Identifier:
keyid:7C:FC:59:CE:13:6E:3E:93:A8:6D:E5:5F:05:D4:9A:59:E1:5C:BB:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPxZzhNuPpOobeVfBdSaWeFcu78.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/1acd3f-6f22-431c-a03c-80895f88f5d5/1/fPxZzhNuPpOobeVfBdSaWeFcu78.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:26:bf:3e:dd:b0:32:f0:89:1e:a2:2d:ba:55:cb:da:65:54:
06:93:18:b5:5d:f9:e5:17:c2:b1:7c:33:40:2b:20:06:b2:59:
68:59:e5:16:de:59:62:b1:78:5c:0b:f1:43:d7:c1:fa:92:99:
03:09:1a:d5:46:bf:96:fd:1b:eb:f2:40:a1:ef:75:7c:8a:b8:
69:6a:f8:9c:d6:50:ae:56:e6:f6:6c:0c:1d:cd:cb:0e:3c:34:
da:9c:8c:f1:e6:9a:3c:47:43:79:9e:22:97:fc:0c:b8:e0:6e:
d7:30:01:95:19:b9:f1:f2:c6:52:ab:e6:8d:8a:48:c0:0e:a8:
8f:63:06:b5:d4:11:a2:fc:71:c1:f8:7d:14:51:dc:29:22:e3:
56:0e:92:a5:cf:4e:aa:7d:73:6d:6c:1c:49:b0:f3:33:1b:ef:
33:b9:cc:76:5d:04:06:2c:c7:c6:2a:d0:73:e1:ed:bb:fe:ed:
f5:b9:ff:bd:4c:2e:b7:cc:3c:76:f8:f5:5a:1a:2f:5d:67:64:
fe:9e:2e:51:a1:ad:13:78:5d:dd:d9:2c:c8:93:37:0f:42:e3:
f8:4c:7b:4f:8d:4a:3b:9f:ed:23:d4:11:7d:97:e2:23:b1:a6:
17:a7:5e:af:02:5c:42:73:87:cd:46:e9:35:a9:d6:a5:31:48:
0c:ae:15:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52JHRTlEdLG7SOGC+nKOnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjZmM1OWNlMTM2ZTNlOTNhODZkZTU1ZjA1ZDQ5YTU5ZTE1
Y2JiYmYwHhcNMjUwNjI5MDQwMTA3WhcNMjUwNjMwMDQwMTA3WjAzMTEwLwYDVQQD
EyhiMGE4ZDE4NDM0OTU1ZGE3Y2JlZDNhZmViNGM3ZDUwZmFkMjJlOTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XHoE78/KGL9gP9+MITdnsKUpZcg
KD0YNHI66KeS6uD51HNDX5KsPLbhl6j8+DgvbXag3/IqYDcmPOS7R9YNgDn42okY
7vUW7kdK/QxVqIeKRsBjSFL0EeBZBFO8KRb33t/2yVf2fSH2ykQFu1BclgSBlloD
Dqup752C3P6eWxPstrsNzlsnYWtqb86DUDl67cyAt/UH8zrHbqDdUR1miI2a/vtZ
dOB0Y03rRv3gx3gLM9yWXdNLMRJqIaCNh7d7wCXXEVbTaLWBQgHTRNolfymBxfRM
6TBVrTfJOg4faZ915sHGxP9T9LS5K6K+qIpRzpsciemZIUPSdDGSBbUniQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLCo0YQ0lV2ny+06/rTH1Q+tIul0MB8GA1UdIwQY
MBaAFHz8Wc4Tbj6TqG3lXwXUmlnhXLu/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlB4WnpoTnVQcE9vYmVWZkJkU2FXZUZjdTc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xYWNkM2YtNmYyMi00MzFjLWEwM2Mt
ODA4OTVmODhmNWQ1LzEvZlB4WnpoTnVQcE9vYmVWZkJkU2FXZUZjdTc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8xYWNkM2YtNmYyMi00MzFjLWEwM2MtODA4OTVmODhmNWQ1
LzEvZlB4WnpoTnVQcE9vYmVWZkJkU2FXZUZjdTc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCa/Pt2w
MvCJHqItulXL2mVUBpMYtV355RfCsXwzQCsgBrJZaFnlFt5ZYrF4XAvxQ9fB+pKZ
Awka1Ua/lv0b6/JAoe91fIq4aWr4nNZQrlbm9mwMHc3LDjw02pyM8eaaPEdDeZ4i
l/wMuOBu1zABlRm58fLGUqvmjYpIwA6oj2MGtdQRovxxwfh9FFHcKSLjVg6Spc9O
qn1zbWwcSbDzMxvvM7nMdl0EBizHxirQc+Htu/7t9bn/vUwut8w8dvj1WhovXWdk
/p4uUaGtE3hd3dksyJM3D0Lj+Ex7T41KO5/tI9QRfZfiI7GmF6derwJcQnOHzUbp
NanWpTFIDK4VDw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:30:37 2025 by rpki-client