Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File: FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier: ksY/qKWxT3ZAt/IWo+WN9c64srEXinmE4U90/bVPyPI=
Subject key identifier: ED:38:77:5D:50:BA:F5:0D:08:C6:FC:C1:AF:8E:22:1A:75:6D:84:8D
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer: /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial: 0197B70F15D2D42A5D706389CEC65DED596B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number: 159F
Signing time: Sat 28 Jun 2025 15:01:48 +0000
Manifest this update: Sat 28 Jun 2025 15:01:48 +0000
Manifest next update: Sun 29 Jun 2025 15:01:48 +0000
Files and hashes: 1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: DscTd/E3ea+hq5C8VatNBeI9x3afLkVcXl93bMDg7sE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:15:d2:d4:2a:5d:70:63:89:ce:c6:5d:ed:59:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15894575555cde14c770cbb183da5535d144b540
Validity
Not Before: Jun 28 15:01:48 2025 GMT
Not After : Jun 29 15:01:48 2025 GMT
Subject: CN=ed38775d50baf50d08c6fcc1af8e221a756d848d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f7:5c:69:16:9b:9b:66:b5:e9:48:a4:18:b9:
db:8d:da:e6:6d:30:3d:b1:26:36:00:ae:7e:0b:ef:
8f:16:1e:01:24:0a:16:c5:26:53:80:5d:51:ef:fc:
a6:b2:18:73:50:9c:22:a5:a6:1e:e3:ca:97:9f:f3:
52:38:e0:1c:31:4d:2c:9a:ea:05:7f:5b:78:71:29:
f7:10:46:e6:37:5c:c7:6b:bb:24:73:f4:a2:48:ce:
68:48:67:05:20:7f:38:f3:6a:73:d9:ee:bd:27:3f:
d4:a9:2d:2e:f4:62:f7:07:c9:8a:97:c6:75:d0:45:
9e:18:e8:3e:9b:8b:fe:d8:56:26:1d:5b:58:5c:e0:
21:cf:c0:61:56:06:d9:2a:2f:b6:7e:2a:a3:2e:28:
4b:30:0c:b2:c8:2f:31:74:66:a5:d6:7c:a0:4b:59:
0e:40:8f:b2:ce:32:97:71:f3:ef:cf:f0:5e:85:ce:
b6:d2:72:01:ac:6a:3b:f5:99:44:60:08:3f:aa:9a:
ee:59:d9:22:3f:98:0b:43:1f:9b:15:9e:11:64:77:
7b:17:57:c6:43:15:52:25:c9:42:2c:1f:a9:59:36:
73:9f:3e:60:d5:f8:40:36:67:70:70:b7:a2:6a:39:
1d:18:d3:c4:dd:2e:80:50:f0:03:82:8c:2d:04:6b:
f4:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:38:77:5D:50:BA:F5:0D:08:C6:FC:C1:AF:8E:22:1A:75:6D:84:8D
X509v3 Authority Key Identifier:
keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:0c:94:f6:b8:4e:00:c6:40:c3:e7:bc:64:a8:40:6c:a1:e0:
88:10:c1:ce:43:3e:93:80:fa:b9:7a:f8:e0:5f:16:77:3c:1d:
a5:72:db:ae:d7:b7:e6:99:21:1b:1a:05:14:e6:e7:d7:09:5e:
40:54:22:ea:22:4a:55:4c:bf:16:6f:23:52:1f:57:35:55:0e:
8d:dd:ad:f7:5b:98:18:a8:a6:5c:df:f8:24:7e:a2:3f:87:de:
31:30:bf:9b:b4:8c:f0:53:9e:de:eb:91:3b:e3:0f:95:3c:30:
76:55:90:6c:6a:f7:bb:e1:8e:2d:e1:af:58:b9:e0:7f:70:b7:
1c:9f:88:ec:35:a5:43:ef:d8:73:2b:30:37:25:46:94:e6:5d:
36:78:08:01:78:f9:c6:c1:8f:c9:1b:9b:de:64:40:45:79:fa:
ef:dd:03:20:c3:66:fa:64:1b:7a:d6:91:39:b2:e9:4c:ab:c0:
20:f0:c5:aa:96:99:53:14:3a:d9:4f:31:1a:70:e0:a3:fe:43:
87:bf:42:cd:8a:70:44:7b:91:f3:e1:a8:53:98:b8:85:bd:3a:
14:a6:30:1c:d3:27:cc:e8:74:c6:1d:a9:bf:e5:5a:89:53:c9:
c8:0d:b0:85:48:f7:1e:b6:5b:9c:95:95:3d:02:7c:b0:e3:e4:
11:ba:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:41 2025 by rpki-client