Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
File: FqX_fn4arzjlmWnWCYBKOz8Fvog.mft (raw, json)
Hash identifier: UyX9ijgsTh9OMuOq3QhCg1Ujh3Pm5ahnvYbKlqbQOtc=
Subject key identifier: 13:99:3E:21:0A:19:83:93:20:AC:F4:4D:92:54:1B:1F:FE:8A:C0:EF
Authority key identifier: 16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
Certificate issuer: /CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Certificate serial: 0197B70E7FE2CCEF78BE9E27A9F8408D988C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
Manifest number: 03FC
Signing time: Sat 28 Jun 2025 15:01:10 +0000
Manifest this update: Sat 28 Jun 2025 15:01:10 +0000
Manifest next update: Sun 29 Jun 2025 15:01:10 +0000
Files and hashes: 1: FqX_fn4arzjlmWnWCYBKOz8Fvog.crl (hash: poWM7GOD+/t9Owg0gNkt+nBeu5Qra2QNJ3XsuDq7rNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7f:e2:cc:ef:78:be:9e:27:a9:f8:40:8d:98:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a5ff7e7e1aaf38e59969d609804a3b3f05be88
Validity
Not Before: Jun 28 15:01:10 2025 GMT
Not After : Jun 29 15:01:10 2025 GMT
Subject: CN=13993e210a19839320acf44d92541b1ffe8ac0ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:c8:cb:9d:e9:60:c7:43:0d:09:72:4d:e1:
32:23:ce:ef:11:94:23:14:0b:bf:77:6b:ad:90:ab:
db:8c:c5:3f:04:8f:f6:71:66:b5:d6:59:b7:60:e0:
a9:0d:dc:3f:34:bd:f4:eb:8c:90:65:45:32:b1:bf:
38:50:03:39:66:e4:0b:84:dc:16:ae:f5:0c:66:6a:
35:9b:d7:e6:27:06:79:4d:11:23:a7:97:39:30:dd:
1b:28:ea:2d:78:b9:ef:dd:60:88:f9:bd:9f:21:31:
0c:a6:cc:84:15:57:8f:40:bf:b6:bd:55:74:6e:18:
43:5b:f6:25:3e:86:43:35:45:05:d6:de:8e:c2:e7:
36:6a:1b:e0:d8:3c:9e:ab:4c:09:1c:3d:0a:bd:2d:
11:8b:39:15:4c:4d:25:09:6c:e3:af:b9:13:37:c7:
65:e4:5c:93:42:cd:32:62:1c:5c:39:6d:c5:38:19:
38:16:89:b8:97:77:e7:2a:7e:bc:5f:5b:32:01:67:
5e:85:a3:fb:d5:f6:4d:b9:a1:fe:e6:68:e2:17:f9:
b2:f9:ff:55:4e:0c:b7:35:06:ef:89:4b:2f:2b:5d:
13:06:07:6a:98:3f:b8:96:3e:14:3f:60:05:cd:24:
1f:b0:b1:6b:08:66:79:bb:29:d3:41:fa:01:90:27:
9b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:99:3E:21:0A:19:83:93:20:AC:F4:4D:92:54:1B:1F:FE:8A:C0:EF
X509v3 Authority Key Identifier:
keyid:16:A5:FF:7E:7E:1A:AF:38:E5:99:69:D6:09:80:4A:3B:3F:05:BE:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FqX_fn4arzjlmWnWCYBKOz8Fvog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/0fecd5-ee62-401a-a57b-66dadea29c4a/1/FqX_fn4arzjlmWnWCYBKOz8Fvog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:93:84:84:f9:51:4f:7e:c0:b5:fe:f4:ab:02:09:92:e6:16:
73:21:2d:33:e2:7f:1a:c3:4a:00:25:d3:07:43:c7:cb:01:a4:
a9:fe:fc:2e:66:0e:04:db:90:9e:48:78:e9:c7:71:4a:28:76:
e2:6a:35:1d:b5:c0:58:fa:09:07:d7:99:fe:12:a1:f4:07:9c:
ab:0b:ce:5a:2a:19:13:6f:9f:5f:ca:3a:c4:8f:49:e3:5c:f1:
d1:95:4f:a5:d7:cf:a7:ee:0c:e8:32:44:e1:9b:c3:a5:3d:c4:
54:fb:45:3e:bf:07:b4:e7:58:9f:71:9d:6e:5b:09:47:8f:56:
ec:bf:08:d4:af:77:47:4b:a2:7d:17:52:6a:3d:1f:3d:84:78:
9d:3e:ca:da:0f:a2:ec:78:75:a4:de:97:7e:56:c5:cf:ca:e0:
93:4e:5f:d6:d6:e0:07:08:2f:88:a2:08:21:17:11:e3:67:ff:
d6:dc:ee:a9:59:3c:81:d9:b6:23:7c:89:2c:60:0e:8f:01:b6:
46:d1:1e:63:8a:6b:63:22:61:c3:3d:2f:bc:44:dd:00:26:f6:
6c:56:73:2f:22:d3:42:7e:f3:6c:e4:7f:02:74:18:c8:59:b4:
94:2c:5c:85:e6:2a:3c:44:c1:f4:5f:31:c9:07:43:5e:39:68:
f2:97:03:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:49:20 2025 by rpki-client