
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
File: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft (raw, json)
Hash identifier: b3RNZfSGzC1AYiz40fs3WqYeO8w0S7GCVfXWEtewl4c=
Subject key identifier: 5D:E0:A8:52:CE:84:17:FC:82:FF:0A:BD:77:6E:7C:84:32:00:B5:C4
Authority key identifier: 15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
Certificate issuer: /CN=153d757b77067befd9446694748ad2b04e97b38c
Certificate serial: 0197B70EAE4A5DCC1C8325CDBC561F62A3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl (hash: CI5BV4RtC/0S9AxOfTH/tFtgG8HVjWS8EcWXcc/FSSc=)
2: r7lFXPa807MfacPLjTifqcio5eE.roa (hash: uWVAVnCuqwCuf5rQTJ4k2G3R8ObiUvivLPLiht6CJGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ae:4a:5d:cc:1c:83:25:cd:bc:56:1f:62:a3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153d757b77067befd9446694748ad2b04e97b38c
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=5de0a852ce8417fc82ff0abd776e7c843200b5c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:33:b9:bc:9e:b4:82:f8:55:60:41:f1:42:87:
39:1c:3f:99:35:91:f1:8c:a8:ea:34:d2:bf:48:17:
59:29:89:ea:12:4c:bc:55:2e:51:35:e4:4f:b6:c9:
a5:0b:e3:75:f0:62:ba:1b:33:29:4d:8d:0c:67:70:
bb:39:b6:89:26:c3:b7:0f:a2:cf:47:e4:64:c3:fc:
45:a2:6a:9d:29:3b:47:13:db:8e:2b:54:5b:c7:b7:
06:bf:eb:77:61:97:84:d7:f8:d8:00:a9:82:f8:c6:
81:9d:63:63:81:aa:a6:8c:85:2f:3d:71:5a:7d:3c:
f8:ea:04:a0:60:ae:fd:8a:4e:48:9d:20:46:84:63:
db:cd:5d:59:c5:0c:0d:19:4c:bb:8e:4d:12:e2:2e:
c9:74:af:b1:b9:ee:65:72:e7:54:26:49:37:ae:7c:
57:04:07:b6:39:d1:12:06:2c:d2:13:43:f6:29:3b:
fb:d6:73:d5:6e:0f:8e:fc:64:00:e1:fd:d1:2c:58:
12:8e:f2:f9:12:9e:b9:b0:21:3f:f1:e0:55:d7:04:
1e:bc:31:80:29:11:1d:95:15:80:6c:e1:32:6a:85:
86:60:ca:8f:de:0c:58:00:3d:52:7b:b0:0f:c2:ee:
bd:43:85:cd:23:b3:8b:b6:79:d4:7d:d4:72:f3:f5:
c9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E0:A8:52:CE:84:17:FC:82:FF:0A:BD:77:6E:7C:84:32:00:B5:C4
X509v3 Authority Key Identifier:
keyid:15:3D:75:7B:77:06:7B:EF:D9:44:66:94:74:8A:D2:B0:4E:97:B3:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8a94b9-70fe-46ff-a4e6-019e1f8403dd/1/FT11e3cGe-_ZRGaUdIrSsE6Xs4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:42:95:35:b9:ee:cb:04:20:c6:99:5c:75:2f:04:98:d7:0f:
a7:ef:e9:c2:6a:2d:d3:9e:93:44:ff:30:87:12:f7:c3:89:9d:
6e:c1:dc:3b:ca:72:47:a0:51:c0:1d:1e:5d:a7:8c:30:fa:f9:
de:87:85:0c:d9:cb:1f:29:51:a8:d2:8e:f4:96:5a:d9:ae:f4:
25:a2:5d:9a:bf:ad:b7:f7:2a:56:5e:90:7d:18:d3:aa:dc:45:
77:a0:d6:40:8e:79:b5:3b:eb:df:9c:8e:86:f7:7e:e9:bd:a2:
40:f1:c2:dd:e9:d0:69:14:1c:98:af:ee:5c:44:64:87:cc:c7:
b8:06:c9:52:51:4b:17:ec:bf:74:aa:d6:4a:e1:46:b4:1f:e0:
6a:f3:1b:7c:c6:b5:da:64:b4:72:84:12:27:3d:63:a2:13:9c:
41:77:2e:de:00:3c:2a:2b:be:36:58:00:4c:86:c8:d0:59:f9:
ce:b2:eb:97:91:dd:4b:a7:77:f7:d2:35:15:e0:79:b0:ea:34:
94:19:49:72:f6:08:bd:9d:54:53:a1:2c:6f:ea:dd:f6:08:1e:
cb:65:89:c9:55:6a:cc:4b:2c:41:7a:0e:f6:19:1d:02:37:76:
7a:e1:05:7a:cc:da:26:f9:3e:fb:dd:3b:e8:55:47:4d:f9:f7:
2e:1d:90:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:11:24 2025 by rpki-client