Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
File: FSj8hxfpGa4HJhquKNjIRWTIpxI.mft (raw, json)
Hash identifier: dGOZHtkbkWSJmuOJualxsK+4DcU6c4BtkYA2DjZEIyw=
Subject key identifier: AB:0A:3E:5C:C9:0E:D0:9A:DE:9E:42:D6:55:36:1F:C9:D9:7F:B3:1F
Authority key identifier: 15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12
Certificate issuer: /CN=1528fc8717e919ae07261aae28d8c84564c8a712
Certificate serial: 0197B74592FEC424BE9D8E05B075EFF46436
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
Manifest number: 0F15
Signing time: Sat 28 Jun 2025 16:01:19 +0000
Manifest this update: Sat 28 Jun 2025 16:01:19 +0000
Manifest next update: Sun 29 Jun 2025 16:01:19 +0000
Files and hashes: 1: FSj8hxfpGa4HJhquKNjIRWTIpxI.crl (hash: tQdi00/60oE7EJs76JaNPOPFHPhhskk7zfHrvLRmVr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:92:fe:c4:24:be:9d:8e:05:b0:75:ef:f4:64:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1528fc8717e919ae07261aae28d8c84564c8a712
Validity
Not Before: Jun 28 16:01:19 2025 GMT
Not After : Jun 29 16:01:19 2025 GMT
Subject: CN=ab0a3e5cc90ed09ade9e42d655361fc9d97fb31f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:66:ee:a6:47:39:c8:ad:6d:14:1b:b1:0d:e8:
a1:a2:43:37:40:fc:09:d9:b0:f6:41:32:13:be:b1:
5a:c6:0d:dc:03:4c:ed:c5:9d:a0:50:e3:a1:ea:9b:
23:e6:1c:9f:39:cb:35:1a:af:c2:a9:0c:68:71:48:
36:42:6a:72:3d:99:e5:83:9e:93:36:3a:22:82:90:
30:5d:70:e5:03:90:8b:73:77:f5:b4:76:bb:e5:33:
c3:7c:75:ff:42:56:f5:50:11:ca:91:58:d4:8d:0e:
4a:25:ac:b4:20:d6:20:ff:e1:a8:71:e2:f2:60:e6:
ef:16:11:61:f4:7e:ae:aa:09:10:82:07:80:44:68:
a0:cd:0e:05:b0:8f:86:71:86:b5:1f:9b:e5:8d:c0:
0e:e9:1e:02:a0:48:24:85:17:a3:fd:2e:64:5b:f7:
13:e5:80:87:5f:a9:20:40:ab:0d:ea:82:a1:b5:56:
83:e4:e1:7b:0c:fb:8e:f9:d5:e4:18:ea:1c:73:dc:
fa:0a:f4:97:dd:ca:14:05:47:a9:d5:45:31:ef:f7:
d4:02:d2:27:a0:b5:de:0a:29:b2:66:80:61:c2:c0:
60:d7:7d:4d:66:f5:4b:e3:46:1c:d7:93:f2:11:ed:
ba:2a:93:22:16:24:17:36:7c:d8:e0:1f:df:d3:c5:
04:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0A:3E:5C:C9:0E:D0:9A:DE:9E:42:D6:55:36:1F:C9:D9:7F:B3:1F
X509v3 Authority Key Identifier:
keyid:15:28:FC:87:17:E9:19:AE:07:26:1A:AE:28:D8:C8:45:64:C8:A7:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FSj8hxfpGa4HJhquKNjIRWTIpxI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/6dfbb6-4afa-4bbc-9d19-671072f91a13/1/FSj8hxfpGa4HJhquKNjIRWTIpxI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:50:ea:f3:99:84:a3:e0:ec:21:89:25:18:47:c7:4f:5f:28:
1f:c3:91:cd:e6:c3:2b:ff:21:3b:0c:33:70:9e:50:67:bc:b0:
d4:37:2c:6d:20:f9:4f:ca:15:af:53:d2:ed:76:0a:1e:90:b3:
34:b6:c2:a4:0b:0e:2a:b5:4c:60:21:23:a9:7f:96:73:9d:a7:
f7:2e:f7:3b:70:a8:b6:74:63:c5:fa:2c:b1:06:09:ff:d4:96:
a4:93:7f:f0:b6:0a:77:7b:4b:84:8f:9b:34:27:d7:12:fc:63:
06:18:3f:48:c9:60:b7:34:0e:29:c0:71:32:bf:f2:bb:5d:df:
d4:66:c7:50:c6:07:e3:01:f4:1f:9f:06:dd:f6:ef:f6:99:75:
b4:0e:2b:f0:a6:dc:8c:7d:0d:0f:ed:71:d0:f8:a6:55:6c:61:
4f:29:87:92:a7:98:c6:b5:93:e3:60:15:d8:7d:73:90:f1:be:
92:67:54:ae:7b:9c:27:d6:40:b8:3e:00:35:cb:12:d1:f2:55:
e0:5e:a4:15:7d:81:48:f9:d7:bd:84:77:34:97:6c:e2:7c:33:
e3:4f:40:06:5f:dc:b2:b5:76:ea:ca:48:f0:70:a8:96:76:29:
fd:3f:86:62:c1:46:0f:35:53:ce:20:a9:b6:5d:1d:ae:49:43:
f0:d5:54:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:11 2025 by rpki-client