Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
File: F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft (raw, json)
Hash identifier: LIMN6VY/gAB/cP9VK9CI31PkALzAAWJ63f555VanYrA=
Subject key identifier: 78:C2:10:3E:9E:52:08:DD:C7:15:60:68:69:24:3E:CC:71:77:30:AC
Authority key identifier: 17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
Certificate issuer: /CN=17a16657a2497737ca03621cc668d20c762136d5
Certificate serial: 0197B77C9969E2A59BFDEE5BD2DA7997A7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
Manifest number: 0D57
Signing time: Sat 28 Jun 2025 17:01:25 +0000
Manifest this update: Sat 28 Jun 2025 17:01:25 +0000
Manifest next update: Sun 29 Jun 2025 17:01:25 +0000
Files and hashes: 1: F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl (hash: NMMI9qX7mDLRUiN/7nXC4lvZ9hBdII4yte9heHbgYLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:99:69:e2:a5:9b:fd:ee:5b:d2:da:79:97:a7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17a16657a2497737ca03621cc668d20c762136d5
Validity
Not Before: Jun 28 17:01:25 2025 GMT
Not After : Jun 29 17:01:25 2025 GMT
Subject: CN=78c2103e9e5208ddc715606869243ecc717730ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d8:4d:ec:65:62:5f:c8:4b:0b:cc:43:8f:a4:
8c:af:65:bb:3c:4e:c0:a2:bd:3f:7c:b1:4c:e7:a8:
38:ac:86:2a:18:13:c1:24:d3:24:16:c6:f4:2c:dd:
32:f4:97:33:4d:10:73:23:bd:2e:5f:03:21:49:f2:
b6:b6:7c:b6:2d:d1:a2:0a:51:07:e0:8c:7f:0b:3b:
81:bc:9e:19:06:fd:5b:28:0c:28:bc:98:3b:62:46:
cc:54:c7:95:5a:7a:7e:9e:d5:dd:97:1a:59:05:a1:
c6:de:cd:2b:f4:18:ae:85:1a:6e:da:9f:fd:fe:a4:
d5:37:46:35:42:b2:ab:bf:e4:f5:1f:22:7d:bf:ba:
62:1d:bd:57:17:68:2f:2a:74:ae:d3:ff:14:93:07:
55:93:94:5f:58:63:ed:b6:ea:fd:31:23:f6:60:d1:
7d:37:c1:cf:c1:27:19:98:a6:b2:28:a9:fa:62:4a:
c5:08:34:06:29:ea:b8:a5:99:6f:f5:54:0f:ba:ef:
2c:0c:71:3f:e5:3b:f3:ce:e2:19:28:95:67:cb:69:
50:bd:df:f0:64:39:bd:c5:f1:8b:fe:99:30:e9:21:
6d:e9:ba:2c:44:55:69:1a:76:8e:00:c1:d2:9f:4a:
f1:b9:28:aa:7d:85:90:4b:27:a6:a6:cb:fc:59:30:
52:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:C2:10:3E:9E:52:08:DD:C7:15:60:68:69:24:3E:CC:71:77:30:AC
X509v3 Authority Key Identifier:
keyid:17:A1:66:57:A2:49:77:37:CA:03:62:1C:C6:68:D2:0C:76:21:36:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F6FmV6JJdzfKA2IcxmjSDHYhNtU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/4ac85f-e3ff-4b52-b898-96c8f439ab81/1/F6FmV6JJdzfKA2IcxmjSDHYhNtU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:2e:2c:8e:86:41:2a:43:13:54:f8:ad:3b:5a:a3:b2:8f:d1:
24:42:c5:2a:2e:bf:93:7d:d3:11:27:3a:98:bc:11:f2:93:80:
2d:80:87:cf:22:e8:55:a9:62:32:d6:c8:58:6a:3f:8f:3c:d0:
b5:54:6c:e8:f5:04:61:37:60:94:1c:5f:a6:1e:33:ac:fb:a5:
1e:7b:f8:f0:16:1d:28:40:d5:5f:5e:14:cb:3c:56:d1:e9:35:
ea:e2:e4:03:ea:0b:ff:e2:39:34:8c:11:74:23:4b:78:32:99:
0e:56:16:c1:0a:f9:32:57:ff:ce:bb:2b:93:e9:87:94:91:70:
62:a5:81:bc:e5:8e:d5:5f:35:b1:d8:5e:b1:e0:e8:cb:35:cd:
29:16:06:02:92:d4:be:e0:18:b6:68:47:02:cc:68:cb:04:0f:
4a:be:3b:f1:59:63:06:c5:2e:39:2e:a0:67:b4:b6:9b:9a:b1:
5e:1e:f8:6c:47:c5:c5:bb:bd:a5:29:52:c6:7c:40:2f:80:69:
7c:1d:0a:00:97:cc:4f:1c:c8:eb:e3:49:55:67:96:6f:75:d5:
f3:f2:82:3e:3d:c3:ce:b2:5e:d9:09:d6:a8:97:d2:2e:56:66:
23:d4:8d:d7:e0:67:2b:d7:87:c0:69:bf:53:35:c4:75:2d:0e:
be:47:c6:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:07 2025 by rpki-client