Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
File: FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft (raw, json)
Hash identifier: xZ0alXFSvRLcBnXE439o3bWwkfYUlpuUer81YT3R2IU=
Subject key identifier: DE:4E:04:8A:B4:F7:C0:C7:77:6F:DD:06:66:CF:55:09:9F:6B:A3:B3
Authority key identifier: 16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
Certificate issuer: /CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Certificate serial: 0197B7EAAA7D4D7C4CF6C22C0913D3977E30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:38 +0000
Manifest this update: Sat 28 Jun 2025 19:01:38 +0000
Manifest next update: Sun 29 Jun 2025 19:01:38 +0000
Files and hashes: 1: FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl (hash: AQktjqOGiuKN75K7wtNizuikCbthV/wnf9zaZWLvAeE=)
2: rXJZFmG2fExX2PgdhmMI1znr1Ys.roa (hash: jLirKW8uoxxjWyg59lIt3L6simlxOfJjoRXDdsPT8aQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:aa:7d:4d:7c:4c:f6:c2:2c:09:13:d3:97:7e:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1644e6c50cb692dfb640f6f88e228a2d9b06c679
Validity
Not Before: Jun 28 19:01:38 2025 GMT
Not After : Jun 29 19:01:38 2025 GMT
Subject: CN=de4e048ab4f7c0c7776fdd0666cf55099f6ba3b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:86:9e:11:2a:9d:01:b8:b3:e2:2e:4f:36:b0:
89:35:1f:2d:17:1b:84:38:cc:4e:31:fd:96:eb:96:
cc:0d:77:a5:a6:dd:00:61:e1:e4:a9:39:07:2c:fd:
15:34:d7:3e:b2:7b:52:cb:05:8e:6b:67:2d:c2:23:
af:9f:52:93:e3:42:65:35:e3:a1:fc:66:3c:61:16:
a3:a0:62:a9:41:b2:c2:77:be:0c:76:83:86:e3:4c:
7d:92:f7:58:45:1f:86:ce:ed:00:ef:af:eb:cf:4a:
09:1a:06:9f:33:ed:d5:11:0d:b7:20:68:ea:1c:28:
97:65:43:3f:4e:2b:3a:59:c5:45:49:30:de:e7:dc:
2f:a1:89:b8:61:bf:1d:18:f5:1e:33:59:4e:8c:f2:
d9:00:da:e9:c3:db:e1:68:3f:22:22:a1:fd:5f:1d:
f3:72:8f:f6:83:41:fa:49:00:cb:fb:97:81:70:bb:
65:fa:8d:db:a3:98:c4:21:af:b1:fd:90:29:50:9b:
3e:f6:85:58:fb:4e:01:a9:72:fb:95:fc:90:04:9b:
97:fa:cb:bf:03:80:94:8c:57:94:92:e4:e6:46:ac:
6c:65:bd:78:3c:90:9a:08:39:f1:d9:57:1e:1b:14:
9a:af:0a:58:58:17:2d:4e:46:8d:96:38:e5:19:46:
de:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:4E:04:8A:B4:F7:C0:C7:77:6F:DD:06:66:CF:55:09:9F:6B:A3:B3
X509v3 Authority Key Identifier:
keyid:16:44:E6:C5:0C:B6:92:DF:B6:40:F6:F8:8E:22:8A:2D:9B:06:C6:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FkTmxQy2kt-2QPb4jiKKLZsGxnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/d2e14e-f900-4ab0-93fd-fdebf125b48e/1/FkTmxQy2kt-2QPb4jiKKLZsGxnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:fe:73:2a:0e:8f:c7:30:7d:a3:1c:4b:92:c9:9b:f6:a8:9b:
6c:a8:8c:14:bb:9e:c5:71:12:93:84:35:bf:39:44:c5:d0:d5:
41:56:98:e5:60:c2:be:a6:63:53:d9:ec:77:46:11:ec:7d:f6:
69:d5:d7:63:c2:4d:80:fc:2a:41:7b:10:89:a1:2f:96:e3:af:
04:62:38:47:39:cd:2b:0c:ed:f3:c8:21:26:32:a4:7c:e1:6e:
a5:40:cd:8e:2e:ce:54:d1:78:8c:70:97:73:5a:02:ba:2f:ee:
0a:80:c3:8b:10:f4:26:59:11:f2:f4:27:25:70:a5:42:fb:f3:
92:35:aa:50:74:5b:2a:03:0a:59:a7:25:fc:bf:ef:a7:60:61:
65:45:83:be:b2:4d:8a:52:16:83:0b:f2:a6:ae:7c:fe:7a:51:
41:2a:c1:74:4a:ee:be:60:6c:8c:a6:5b:b4:76:12:ed:4d:5b:
90:29:8a:07:03:e8:7e:43:53:1e:36:6d:88:cd:57:41:05:cf:
05:db:c1:aa:a9:c5:21:68:32:82:5e:f4:35:07:5c:ea:b2:42:
d8:79:5b:c2:8b:fa:24:e3:ac:7c:50:dc:29:a8:05:cc:cd:26:
d2:ae:84:7c:55:35:8a:ec:2e:3c:8c:33:77:92:ed:65:5e:3b:
fb:1c:ac:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:27 2025 by rpki-client