Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File: fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier: 2WRgnGJGy/uEYkI+l3Xc13qpVLtYCs2aB2Zrn++IXH0=
Subject key identifier: 09:74:6C:03:DE:08:42:0B:22:C4:06:0D:3A:BB:CC:E6:9F:6A:FB:C2
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial: 0197BA7E40BD112FA5763B0700C3C0A725BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number: 15B2
Signing time: Sun 29 Jun 2025 07:02:05 +0000
Manifest this update: Sun 29 Jun 2025 07:02:05 +0000
Manifest next update: Mon 30 Jun 2025 07:02:05 +0000
Files and hashes: 1: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: C5n6478/cqYbZOflaZ15OhiEbflBMhriWKTae3t6wa4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:40:bd:11:2f:a5:76:3b:07:00:c3:c0:a7:25:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
Validity
Not Before: Jun 29 07:02:05 2025 GMT
Not After : Jun 30 07:02:05 2025 GMT
Subject: CN=09746c03de08420b22c4060d3abbcce69f6afbc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f7:5b:57:2f:29:10:05:90:ee:88:cf:ed:4e:
50:91:25:1a:cd:70:d3:5e:3f:32:71:9e:6b:6c:6d:
93:76:9f:3f:74:b7:d1:ab:f6:19:88:ee:8f:81:71:
31:cf:07:ac:84:09:70:0b:48:c1:da:7b:8b:c2:b4:
56:88:0e:f1:81:6e:b7:e3:b2:67:83:09:bd:9d:63:
80:1e:cc:ae:79:20:7b:46:44:67:cc:73:2f:f8:01:
ad:75:e7:d3:3c:1e:54:76:86:9b:61:73:8b:4b:94:
cc:07:e1:dd:fe:af:1e:8e:32:bb:42:85:01:60:64:
70:07:2f:51:87:5e:4d:e0:07:37:58:25:23:5f:ec:
88:c6:d2:fc:16:6d:d1:1f:a2:25:d2:04:d0:98:86:
54:6a:fb:4d:60:70:71:c5:77:6e:e1:80:1e:79:80:
fe:c0:4f:1b:39:6f:38:9d:1d:f1:fb:fb:96:c1:f3:
6d:97:1b:4b:13:41:8c:c6:ff:7a:be:c4:10:95:81:
82:30:0d:b4:21:9c:f5:de:c0:4d:fc:a7:f8:a7:dc:
01:15:c9:42:0c:b5:d2:20:06:e5:5e:3c:98:a4:be:
2a:92:a3:6e:92:50:c3:4c:d4:bf:fb:7f:8d:06:5d:
f3:3c:f6:ff:d0:f7:0a:a7:25:8e:c9:31:e1:47:6d:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:74:6C:03:DE:08:42:0B:22:C4:06:0D:3A:BB:CC:E6:9F:6A:FB:C2
X509v3 Authority Key Identifier:
keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b1:52:5f:51:fd:00:c7:02:59:2b:4e:69:61:75:af:f9:99:
a2:9e:fa:f1:61:d1:1f:cc:be:3b:20:43:5c:9f:5e:f0:84:3e:
a5:ca:a1:9d:1b:7b:6e:19:a4:41:9c:3e:c4:8c:78:9b:95:44:
0a:66:71:87:bf:63:7a:41:a7:ee:f9:fe:98:ae:db:c5:bd:ec:
6c:26:53:e1:41:02:c3:01:09:49:2e:84:d1:96:8e:7c:f8:57:
ee:77:26:9f:8d:35:3c:8f:70:89:db:e2:f7:3f:45:40:b2:ae:
62:82:18:1c:00:eb:ad:cd:26:23:67:ac:bb:3f:5e:7c:fb:7e:
70:5d:93:27:2d:67:ef:98:17:08:71:87:a9:4a:d0:31:e8:86:
7a:11:00:1e:d2:4e:da:ad:90:c2:14:ae:85:0d:c9:be:39:9d:
e5:15:ad:76:55:b3:24:8c:f2:16:fd:42:17:19:ba:2b:a6:fc:
2c:7d:3e:fb:28:4c:e9:7e:32:91:c3:b1:15:e4:7a:a1:a1:88:
ba:60:ae:af:73:41:b0:33:f5:c2:97:d5:67:63:c8:fc:fb:5e:
03:5c:4f:65:5e:f0:7f:d4:74:6e:dd:28:1f:f7:d3:65:9d:0d:
fd:c1:26:5a:f5:3c:6d:45:b9:66:f8:5a:32:95:95:cc:d6:bc:
81:e1:df:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 09:33:33 2025 by rpki-client