Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
File: FyearRffa_ZXVlrlqT65CYU3Sjw.mft (raw, json)
Hash identifier: NfMcjWEBCPVmeumjERGll+zjVTvNR5nTfEUNVKAZJZk=
Subject key identifier: C2:B7:5D:B7:BB:91:2A:07:56:08:86:D4:51:C3:76:68:E3:CD:2D:90
Authority key identifier: 17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
Certificate issuer: /CN=17279aad17df6bf657565ae5a93eb90985374a3c
Certificate serial: 0198D660ACF3DC55651969775C5CC4D5299E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 10:01:56 +0000
Manifest this update: Sat 23 Aug 2025 10:01:56 +0000
Manifest next update: Sun 24 Aug 2025 10:01:56 +0000
Files and hashes: 1: FyearRffa_ZXVlrlqT65CYU3Sjw.crl (hash: VwSLVNCbn082va+BFiq45NchbqagHpvc9Q+D/e65GxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:ac:f3:dc:55:65:19:69:77:5c:5c:c4:d5:29:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17279aad17df6bf657565ae5a93eb90985374a3c
Validity
Not Before: Aug 23 10:01:56 2025 GMT
Not After : Aug 24 10:01:56 2025 GMT
Subject: CN=c2b75db7bb912a07560886d451c37668e3cd2d90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:18:5f:6e:3c:12:a1:b9:42:8b:52:53:13:67:
a6:44:38:7d:e9:9e:ed:3a:53:b7:9e:3e:1e:09:f2:
4c:2d:6d:64:2a:12:c7:3e:c2:7a:30:3d:21:c3:b3:
d0:43:9b:56:15:23:50:f1:25:da:4b:0c:3b:ec:74:
e7:1f:bc:71:93:d3:73:05:a0:bf:71:7a:a5:31:85:
3b:67:ec:00:1d:9a:e0:5b:5d:be:e7:c0:8d:11:3f:
26:a1:8b:fe:82:14:ac:48:07:d8:15:83:4a:d9:1d:
d6:50:46:b1:9a:f7:06:30:33:ca:b9:65:41:b8:84:
df:18:c8:71:9e:8d:70:af:1a:b4:14:4e:d5:ee:ea:
3a:02:40:fb:a6:10:ba:d1:fb:ef:29:01:80:71:ad:
39:22:53:0d:42:b2:bc:96:d6:37:03:93:53:ab:53:
e2:20:70:78:7f:cd:6b:e6:ef:e0:58:86:44:9c:9d:
f4:3b:29:35:96:62:f3:39:27:eb:b4:3b:7f:99:fb:
88:a4:dc:ed:51:38:62:fc:1d:1b:dd:41:b9:dc:87:
3f:d4:ff:c6:da:8e:9a:b8:a2:00:e4:29:38:68:a3:
fe:84:31:b1:b1:c2:0a:ae:18:a5:aa:aa:b2:df:4a:
f9:2d:3a:0b:f1:e0:f7:66:7f:d9:a3:dd:aa:e1:a5:
5d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B7:5D:B7:BB:91:2A:07:56:08:86:D4:51:C3:76:68:E3:CD:2D:90
X509v3 Authority Key Identifier:
keyid:17:27:9A:AD:17:DF:6B:F6:57:56:5A:E5:A9:3E:B9:09:85:37:4A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyearRffa_ZXVlrlqT65CYU3Sjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/54d6cf-ca8c-42e0-bdfe-1aeef39c2b5c/1/FyearRffa_ZXVlrlqT65CYU3Sjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5d:4d:1e:d8:27:b5:d0:f4:c5:cd:5d:02:5b:20:2d:42:f0:
9c:cc:92:bc:5f:aa:7e:32:b9:1a:89:88:88:88:e6:a7:46:31:
d5:de:ec:58:71:68:3a:d9:de:ce:2e:e8:e1:54:3d:9e:91:4b:
b9:cc:8a:fd:e0:e8:c9:7b:24:f3:a6:fc:62:68:7b:27:51:84:
33:ea:ba:15:00:2f:68:5a:72:8c:39:17:18:ba:c2:d6:7b:cc:
50:a1:2e:03:08:93:7d:f0:1f:90:80:35:11:71:ce:9e:0f:1e:
3b:f5:32:59:3f:97:4a:d7:ec:d3:c4:13:95:ac:59:f2:02:2c:
12:cd:66:1f:47:13:5c:18:5d:5b:bb:71:1c:9c:09:ad:43:2d:
0d:67:0b:f3:bc:58:02:ed:58:c4:03:40:69:9e:80:bf:a1:ab:
06:8f:64:75:d1:78:ea:e7:eb:28:1d:33:ca:32:ec:2b:34:9e:
02:3b:23:be:0e:cc:24:c5:79:44:4a:d8:42:5b:bc:3f:cf:01:
f5:05:d2:ab:a6:b3:2c:ad:2d:f5:48:97:8d:bd:a7:12:0f:40:
d0:23:6e:80:db:81:b5:e8:88:9b:a6:19:0c:ef:03:e9:15:7d:
6b:4a:40:c5:92:2c:87:32:05:a9:44:d2:ea:53:ff:c4:48:82:
5b:66:d2:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:28:40 2025 by rpki-client