Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
File: FXll7fKBfF_wlm8i1yscqI4NNyw.mft (raw, json)
Hash identifier: ZJAVLfGhfdUgYvVjecf/vm9ot+aFxcEVmn6FdaSfE7E=
Subject key identifier: 0B:5B:C9:6B:09:5D:D5:2F:4A:45:3B:3A:4F:7D:BC:23:28:C5:3E:6A
Authority key identifier: 15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C
Certificate issuer: /CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
Certificate serial: 0197B6A162B4856F5D9FC8FA32DC25F342FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
Manifest number: 15AF
Signing time: Sat 28 Jun 2025 13:01:59 +0000
Manifest this update: Sat 28 Jun 2025 13:01:59 +0000
Manifest next update: Sun 29 Jun 2025 13:01:59 +0000
Files and hashes: 1: FXll7fKBfF_wlm8i1yscqI4NNyw.crl (hash: EQ4Sp7bICeeV/oOoLc2L1wLl0FLt9WXHNJWPHuDEy2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:62:b4:85:6f:5d:9f:c8:fa:32:dc:25:f3:42:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
Validity
Not Before: Jun 28 13:01:59 2025 GMT
Not After : Jun 29 13:01:59 2025 GMT
Subject: CN=0b5bc96b095dd52f4a453b3a4f7dbc2328c53e6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:c2:5d:d5:0f:2c:57:6f:54:69:32:c7:ca:93:
44:b6:1f:fc:1f:18:99:96:84:34:3d:01:40:1c:76:
b6:2d:5c:5c:9c:14:eb:fa:b4:7b:c4:60:5c:71:01:
3e:9c:a3:f0:76:a7:c6:e7:3f:f6:54:a1:e4:0a:0c:
45:8f:a2:93:ce:96:fe:08:0c:89:37:91:b2:36:d5:
b6:13:f7:b0:d8:6e:76:9b:ba:d2:9d:a3:10:7d:85:
75:5f:95:fb:f6:ec:58:64:ba:c5:05:91:46:97:b5:
6d:10:3c:dd:75:90:40:b8:a7:63:59:95:aa:a6:a6:
b6:cd:9b:d9:23:2c:81:72:67:bc:50:65:83:00:f0:
05:a1:6e:13:27:fd:bd:9a:3d:d9:d6:01:5a:d3:53:
cd:b9:9b:9d:03:ee:93:a5:ea:11:af:bf:aa:63:b5:
1d:25:86:80:81:c4:00:01:f6:29:cc:3d:8c:f0:25:
18:83:9f:37:c2:55:64:cf:34:af:81:c6:ab:96:e9:
f1:7e:5c:d2:80:d9:3c:00:04:24:69:7f:27:c0:ef:
22:da:2c:ca:4e:f9:6c:f2:de:1c:02:c9:fe:11:fc:
5c:8e:8e:97:36:bf:06:12:30:94:80:95:a2:c2:d6:
b4:ba:e2:9e:f2:d2:ee:b1:07:cb:7e:37:76:2a:bb:
cb:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:5B:C9:6B:09:5D:D5:2F:4A:45:3B:3A:4F:7D:BC:23:28:C5:3E:6A
X509v3 Authority Key Identifier:
keyid:15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:50:0b:9f:ac:85:c9:b9:9d:1d:8b:61:5c:21:b5:5b:35:91:
27:81:6b:19:fe:e1:1c:01:1a:1b:22:d3:ce:f0:c6:5a:a7:b7:
76:dd:b7:b4:56:9c:ae:16:73:28:b5:6b:84:90:a6:9a:81:4f:
58:d7:8c:6a:10:a2:34:58:73:d9:fc:1e:6f:39:a2:d4:f0:64:
86:e8:55:fa:02:02:61:7e:f5:a6:a2:b8:1b:8c:38:b7:3e:62:
d1:8d:92:36:76:e7:74:8c:59:32:6c:d1:64:3b:3b:77:23:47:
59:52:cb:48:26:5b:38:42:13:27:2c:f3:65:44:f1:45:c0:7a:
dc:53:a6:d7:ed:56:43:48:f8:df:5b:16:29:1e:34:34:30:a3:
5d:a7:fe:d8:2d:3f:ef:82:a4:5e:1f:ca:69:95:5a:89:03:26:
ec:39:13:0f:64:1c:82:b3:88:b7:29:e1:b6:49:15:3b:af:5b:
82:49:dc:80:c1:b4:f2:e9:c6:6b:e5:d7:73:78:7a:49:48:4d:
e4:25:fb:f8:2e:d7:96:0c:5c:e8:a5:68:d6:f7:d6:8d:e6:e7:
57:c3:8d:13:4f:f7:49:bc:9c:fa:3a:92:a7:6a:8e:1d:38:5c:
e6:8f:6a:67:26:64:d5:70:2b:b4:f4:06:09:a5:75:2d:c3:fe:
64:e1:a6:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:41 2025 by rpki-client