Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
File: FXHxV8OlvVz_XRpH1BlkiifjWps.mft (raw, json)
Hash identifier: r7rhLy8ISpcskqWIjazaSy2WyNh0Qj8+bmbwz6NDZ6o=
Subject key identifier: 86:7B:5D:34:C8:A5:63:B6:3A:02:AA:02:D9:0C:8C:89:C9:67:B5:F5
Authority key identifier: 15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
Certificate issuer: /CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Certificate serial: 0197B9A14A28CE14466F0D5E78DABC9CCEF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
Manifest number: 14C7
Signing time: Sun 29 Jun 2025 03:00:44 +0000
Manifest this update: Sun 29 Jun 2025 03:00:44 +0000
Manifest next update: Mon 30 Jun 2025 03:00:44 +0000
Files and hashes: 1: FXHxV8OlvVz_XRpH1BlkiifjWps.crl (hash: BKRFjbXTFt4NrJuL9dh8iAFCSfl6dIJyNaRmgbH39+s=)
2: SbwwM1J0cW50ffjT8dS57JOEZaY.roa (hash: KDW7Xd6V5dGu/swRg1Y5NG1n0fbHWB4uQ3FumDxnAtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:4a:28:ce:14:46:6f:0d:5e:78:da:bc:9c:ce:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Validity
Not Before: Jun 29 03:00:44 2025 GMT
Not After : Jun 30 03:00:44 2025 GMT
Subject: CN=867b5d34c8a563b63a02aa02d90c8c89c967b5f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:33:8d:1a:3b:08:03:e9:21:04:6e:e4:b7:79:
7c:2f:1f:7a:78:59:59:f0:ed:42:aa:6e:f7:37:98:
78:c4:df:f3:cb:3c:ee:8f:6e:f5:fa:48:a1:71:2a:
b6:c7:aa:4c:6d:c1:d6:ae:b5:06:bb:e7:84:4a:4d:
7c:a7:36:3e:21:d8:d8:8a:30:95:4f:23:9c:4c:2d:
bc:ac:4b:69:91:8f:35:a6:79:36:0f:2f:5b:ff:cb:
2f:43:25:cc:c6:1c:d8:15:ba:de:3d:30:dc:ef:6a:
09:78:40:32:45:13:41:2d:b9:dd:96:cf:d1:0f:a2:
61:4a:fb:13:bd:17:47:80:d0:1d:6e:35:8d:6d:48:
ba:59:23:99:58:40:cc:df:2b:b8:0d:63:4c:c7:f1:
d1:a1:cc:4f:d3:7d:4c:18:be:c7:b8:d6:78:d1:cb:
2b:8c:f8:0c:d0:90:c1:72:ab:cf:96:c3:fd:c2:21:
55:fe:27:cb:e7:46:0f:68:87:10:e5:17:16:c3:d3:
61:90:19:12:fb:11:eb:ec:9e:84:95:a1:1e:33:42:
24:b9:21:4e:5e:85:90:ea:21:9b:14:b9:16:5d:a6:
65:d1:d1:05:3f:6e:b2:a7:bc:11:67:cb:21:bd:85:
32:cc:65:d6:e3:dd:17:ed:a7:34:37:99:28:c8:0f:
0c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:7B:5D:34:C8:A5:63:B6:3A:02:AA:02:D9:0C:8C:89:C9:67:B5:F5
X509v3 Authority Key Identifier:
keyid:15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:a0:38:64:e9:f1:bc:be:5b:44:cd:c2:ac:60:fa:23:a3:cd:
4b:b8:90:a2:f8:7f:0f:73:02:0c:5b:e9:ac:77:fd:b5:71:48:
f3:d6:26:4a:87:43:01:ab:6d:69:ce:1b:1a:b0:0f:06:a4:0c:
27:49:ef:8e:bc:02:6b:15:10:a6:ff:6a:ce:e1:06:7d:c9:6a:
da:c6:33:9d:69:0e:a1:a5:4f:c3:eb:f2:df:fd:04:5a:d0:e5:
59:4b:aa:35:83:9a:56:8c:b9:b9:72:5d:2c:46:69:5b:e6:ed:
a8:ee:29:60:82:e1:25:f4:ce:e8:36:54:36:4f:2c:dc:87:cb:
0d:24:af:d1:ea:37:8d:6d:5e:9b:7d:69:9d:0f:05:c5:6d:2f:
96:41:5b:e1:1b:a2:96:1b:11:5f:5c:fd:28:97:7e:bc:79:7f:
92:60:90:e4:63:65:85:9e:4b:6d:c9:0f:72:b6:6e:4e:c5:83:
30:9b:7b:a5:43:50:10:66:83:05:1d:5c:df:47:80:a2:bb:ff:
c6:87:5d:94:19:31:33:8f:b6:1f:2b:41:1d:f5:c5:ed:fb:a6:
a9:ca:4d:cf:b7:9c:6e:d5:28:e7:51:17:ff:b8:8d:b4:c9:41:
2a:a3:8b:83:7f:6b:f2:96:54:3d:0d:73:76:76:7c:09:e5:a0:
5f:3a:1e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:31:01 2025 by rpki-client