Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
File: FXaJHPKx2OxWwDvHqW3pWKDgADI.mft (raw, json)
Hash identifier: sX6SzEHbYhroUkBjLK7997ZtbSAbH+T1TVVZJ1owfbc=
Subject key identifier: D8:E9:94:08:07:5D:F3:CE:3D:0A:B3:60:3C:39:0D:60:1D:AE:4A:E2
Authority key identifier: 15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
Certificate issuer: /CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Certificate serial: 0197B70EB2FDA5C1F272561C82D5369A3261
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
Manifest number: 035E
Signing time: Sat 28 Jun 2025 15:01:23 +0000
Manifest this update: Sat 28 Jun 2025 15:01:23 +0000
Manifest next update: Sun 29 Jun 2025 15:01:23 +0000
Files and hashes: 1: FXaJHPKx2OxWwDvHqW3pWKDgADI.crl (hash: 5rigQiOyTjwRhtZ3Nff1OIH2ZGIhrLhvbqFO5x1jnmk=)
2: pkUWU7hoqn1MoMfV_e6H2-KJHtM.roa (hash: pNc3IO7oSLkfW6eqPtj4TJMlIbS8z2hqWPYZAIIHzEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b2:fd:a5:c1:f2:72:56:1c:82:d5:36:9a:32:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1576891cf2b1d8ec56c03bc7a96de958a0e00032
Validity
Not Before: Jun 28 15:01:23 2025 GMT
Not After : Jun 29 15:01:23 2025 GMT
Subject: CN=d8e99408075df3ce3d0ab3603c390d601dae4ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e0:f6:64:7e:42:1e:1b:39:a9:0f:f4:2b:3d:
73:80:9a:3d:e3:ac:52:2b:c5:85:8c:b9:4c:2f:d6:
70:a5:3b:40:7f:d0:75:6a:b8:64:e2:bd:f4:88:92:
77:86:36:7f:3c:35:1e:69:19:37:e7:cd:55:38:de:
f2:d1:f0:17:05:3e:b6:9d:78:df:63:06:99:bc:0b:
50:6a:5c:99:e9:9c:60:37:d2:f8:63:f3:84:91:dc:
dd:fb:8c:2b:ba:98:6e:59:c7:6c:63:92:fe:8e:33:
8e:44:d7:d9:d4:af:7d:e4:df:31:ed:4c:eb:92:88:
17:21:e3:bf:76:3e:3f:79:09:00:94:d2:3c:b0:09:
93:b6:71:ff:32:04:06:0b:93:40:08:be:af:b2:9f:
84:2a:09:fd:b0:8c:ca:7d:0a:44:b9:14:4e:b5:84:
1a:1a:02:b4:3a:79:d2:19:05:f2:63:34:15:7d:44:
75:95:c4:35:f0:13:11:60:6c:b7:d9:4a:6a:70:4d:
10:a5:b0:58:20:c0:3e:39:62:d3:bc:4b:b8:02:f5:
5d:8f:f1:ec:69:54:6c:86:78:71:79:b4:a1:6d:82:
9d:d0:22:ee:fe:81:cb:54:93:fd:4f:8c:43:28:64:
52:90:58:52:78:23:62:8b:05:fd:7f:cc:35:8d:83:
7b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E9:94:08:07:5D:F3:CE:3D:0A:B3:60:3C:39:0D:60:1D:AE:4A:E2
X509v3 Authority Key Identifier:
keyid:15:76:89:1C:F2:B1:D8:EC:56:C0:3B:C7:A9:6D:E9:58:A0:E0:00:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXaJHPKx2OxWwDvHqW3pWKDgADI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/1bf5fa-f69b-417c-bc0b-5d5bb7fe571a/1/FXaJHPKx2OxWwDvHqW3pWKDgADI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:3e:74:25:91:00:b9:91:d5:57:af:d4:b6:ac:14:6f:b7:14:
c9:83:e5:88:59:c5:d2:02:6b:bc:25:cb:b9:ce:57:86:1d:eb:
cd:d9:3c:b6:33:20:24:aa:ee:a4:fc:9c:ba:cc:35:2a:86:02:
4e:a3:f9:12:1a:6e:31:47:aa:bb:1b:2e:ba:6a:86:f8:44:1a:
7d:a9:82:df:e1:8c:27:cc:fa:a7:71:bd:0a:8e:98:2b:e7:b5:
c2:88:76:a6:8a:6f:d3:39:94:20:b0:95:80:e7:e3:fe:55:b8:
d7:52:38:3e:fe:13:59:a6:b2:9a:79:3c:81:fc:2d:9b:76:0f:
5c:17:e3:37:52:ce:9c:92:aa:a9:3e:cf:f5:ff:93:1a:0e:f6:
f3:48:d4:27:17:f8:6c:6b:6d:48:9f:55:b6:eb:7b:a3:ef:7e:
0e:d2:9d:64:f5:5b:47:e5:34:66:e7:f5:15:3d:22:23:81:b1:
a7:b3:c3:8f:d5:0b:c9:23:ae:7e:f6:4d:22:2d:91:50:57:8f:
0c:53:81:3a:7d:e1:d5:91:6a:27:fb:aa:04:27:4f:ed:9d:9d:
b9:77:1c:06:a9:1a:49:a4:b6:2f:4e:aa:ec:b6:b4:07:b2:5c:
78:27:35:cb:fc:5f:3d:4b:a1:b0:e7:fd:8a:68:1d:df:fd:c1:
92:79:1b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:11 2025 by rpki-client