
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
File: fsXxiW6aRDV8nXis831I9HgFINk.mft (raw, json)
Hash identifier: AoZcI7b8q/W5s4yAtGfr4rSKnKg6tH6GScKzwl+B57k=
Subject key identifier: A5:B1:55:A2:06:47:1A:97:F0:10:F9:86:47:BA:10:2A:55:4B:E0:0C
Authority key identifier: 7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
Certificate issuer: /CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Certificate serial: 0197C61519620F6DCB8E329DE9B2A8A06FDC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
Manifest number: 15BD
Signing time: Tue 01 Jul 2025 13:02:40 +0000
Manifest this update: Tue 01 Jul 2025 13:02:40 +0000
Manifest next update: Wed 02 Jul 2025 13:02:40 +0000
Files and hashes: 1: fsXxiW6aRDV8nXis831I9HgFINk.crl (hash: br9Xvw1v2Z8XsbYNmmmH3IsFXuVnjNpbKGk1I2JK0J8=)
2: tIBVHEbpT3B92jmv17nHEdfPfME.roa (hash: F4q9q1phtloOjlG43lA2x7BlugORaBByvlUxXUgAa14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:15:19:62:0f:6d:cb:8e:32:9d:e9:b2:a8:a0:6f:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f1896e9a44357c9d78acf37d48f4780520d9
Validity
Not Before: Jul 1 13:02:40 2025 GMT
Not After : Jul 2 13:02:40 2025 GMT
Subject: CN=a5b155a206471a97f010f98647ba102a554be00c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:01:a7:ab:38:94:ad:bd:b1:a8:7b:05:67:b3:
f7:d4:81:ba:48:ca:e4:2e:5e:cd:a2:64:ef:18:1c:
3e:93:21:cb:bc:5f:b8:5c:2f:ff:3f:f8:3d:33:6c:
a9:f6:40:aa:70:93:4a:08:3b:58:ae:46:23:79:8b:
7b:71:9d:ec:f7:be:e4:32:ba:6c:c7:3e:92:e0:7e:
38:d9:33:48:77:1e:6d:8a:60:9e:b1:f2:57:b7:62:
f8:80:7e:75:78:9e:28:81:ca:47:37:62:fa:a6:58:
fc:2b:30:4b:9b:21:cd:14:27:db:63:de:16:0f:9b:
82:18:42:b7:8f:d1:ae:1d:eb:51:2e:3c:5f:43:65:
d1:50:40:ac:1e:05:3c:d6:d9:78:3c:59:23:1e:03:
28:ec:80:f7:d2:88:8c:23:e2:bc:ec:bc:d0:8c:fc:
7e:f5:ee:a1:cd:98:89:a2:e7:a0:ea:b9:1e:3b:f1:
ea:23:4b:e2:13:59:fb:12:41:e4:57:2f:c8:e2:1b:
14:01:9a:fa:ee:31:45:c5:fe:75:ed:87:42:a2:b8:
37:a2:27:0b:d0:4b:8f:85:e3:56:be:4e:66:4f:ab:
a9:99:b8:b8:de:22:3f:0d:11:1c:14:05:21:07:af:
98:64:98:04:fe:d5:f7:e0:dd:08:e3:85:b8:7c:c3:
98:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:B1:55:A2:06:47:1A:97:F0:10:F9:86:47:BA:10:2A:55:4B:E0:0C
X509v3 Authority Key Identifier:
keyid:7E:C5:F1:89:6E:9A:44:35:7C:9D:78:AC:F3:7D:48:F4:78:05:20:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXxiW6aRDV8nXis831I9HgFINk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/157c8b-8f27-47dd-995e-b436d76dad65/1/fsXxiW6aRDV8nXis831I9HgFINk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:d0:8d:b9:81:73:89:ac:9e:d5:18:aa:91:da:19:65:a7:c6:
0b:df:0c:e9:62:52:5f:30:2a:35:13:a1:b0:58:9d:31:f2:87:
3c:91:0e:90:7f:41:8b:a4:84:52:b7:63:d1:a9:79:56:97:db:
68:0f:4a:94:f2:70:bb:ef:d7:10:ce:8a:af:11:5a:5e:b8:e6:
c9:eb:fa:a3:91:80:4b:a9:f1:16:a1:60:f7:93:52:af:58:01:
0a:38:18:26:42:36:e3:ba:11:4f:9e:81:b7:39:3a:7d:7e:fb:
21:36:bc:80:4a:fe:55:4d:b0:e7:96:a3:3a:07:46:4f:30:1f:
b1:1a:cf:50:f9:55:17:67:ab:5d:be:50:ac:20:09:e0:d0:c3:
eb:64:9d:8c:29:42:db:0e:15:9c:e9:0d:38:4f:0a:d7:6a:5f:
e2:c1:a7:2c:2a:35:66:c6:79:2c:49:43:a0:22:6e:2c:db:2b:
7c:30:1f:5b:9e:4f:ed:6b:dd:37:e5:49:ad:7d:36:7b:5f:5d:
2f:53:6e:a5:6b:59:03:d2:83:e4:a6:23:15:f2:2a:ff:a4:0d:
ac:17:d8:32:f2:61:57:d2:1c:f1:92:99:5b:c7:f7:03:f2:27:
db:40:67:de:9e:5c:50:a0:40:48:b2:54:ec:e7:4a:3f:5d:37:
2d:d8:e3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 21:10:33 2025 by rpki-client