Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
File: fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft (raw, json)
Hash identifier: PoN2l5BcXzFVeTldxgsdg47trZr8/mAUmoywfSf/+sE=
Subject key identifier: 6C:A8:2F:AE:E4:B5:72:CC:8E:42:73:DE:80:63:2D:E7:44:13:9F:FF
Authority key identifier: 7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
Certificate issuer: /CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Certificate serial: 0198D47339AFDF15744EB992C99AAE00C545
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
Manifest number: 0F05
Signing time: Sat 23 Aug 2025 01:02:57 +0000
Manifest this update: Sat 23 Aug 2025 01:02:57 +0000
Manifest next update: Sun 24 Aug 2025 01:02:57 +0000
Files and hashes: 1: fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl (hash: IdBedXaSxBm4E2efhgPYWMA89RukMAQgRsXddG2LcBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:39:af:df:15:74:4e:b9:92:c9:9a:ae:00:c5:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f14ce8103b785f3504bc4b32f1f4c9b70ce3f7f
Validity
Not Before: Aug 23 01:02:57 2025 GMT
Not After : Aug 24 01:02:57 2025 GMT
Subject: CN=6ca82faee4b572cc8e4273de80632de744139fff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:33:f9:1c:3a:bd:7a:a9:a4:25:f2:9e:ce:2e:
2a:37:80:22:23:da:7b:b4:30:84:b0:75:ae:6d:96:
40:22:50:47:5c:86:06:b2:02:db:f2:54:3f:f8:3f:
f7:0a:a9:3f:b0:a2:9a:da:44:d1:ce:29:43:bc:07:
7b:26:07:74:fd:cf:7c:ec:19:64:9b:b1:de:28:1b:
c2:83:a9:4f:38:68:a3:06:99:4b:67:d8:db:b6:c5:
6e:43:c8:81:aa:9b:fc:91:77:b0:f7:55:fc:21:3e:
b3:dc:1d:5a:7d:18:ec:6c:ce:19:78:9a:fc:aa:6b:
60:e1:9c:a9:9e:76:73:7f:14:02:b3:34:e2:74:47:
0e:88:3c:0e:da:59:7f:c5:0e:5e:62:22:80:81:04:
8a:23:4c:a5:6a:02:ab:d1:4c:55:92:cf:e7:c4:a4:
9f:b9:3c:c6:98:22:7e:79:ad:a3:91:1b:32:50:a7:
53:40:6c:d0:f6:d7:fa:b1:20:59:e3:26:30:8f:92:
80:c7:1b:22:1f:d3:90:38:c7:01:8a:bc:dc:ed:bc:
cf:72:5d:e6:30:89:57:f9:9f:2e:a9:4e:a9:91:9b:
de:c4:95:87:ca:54:5d:5a:d4:7d:41:db:fe:23:b9:
57:d1:03:31:ba:be:29:b3:4e:48:c3:e1:7b:94:eb:
68:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:A8:2F:AE:E4:B5:72:CC:8E:42:73:DE:80:63:2D:E7:44:13:9F:FF
X509v3 Authority Key Identifier:
keyid:7F:14:CE:81:03:B7:85:F3:50:4B:C4:B3:2F:1F:4C:9B:70:CE:3F:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxTOgQO3hfNQS8SzLx9Mm3DOP38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/f69dbe-e075-4438-b53b-f6160fa1fb02/1/fxTOgQO3hfNQS8SzLx9Mm3DOP38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:9e:74:34:25:88:68:f5:a9:8e:da:3b:a3:d1:fd:c3:87:af:
6a:b0:93:a8:0a:40:2a:02:9a:1c:10:64:35:3e:05:bf:82:70:
00:7c:55:d4:f3:f4:d0:bf:b4:62:93:4c:48:d7:db:d6:f0:59:
99:1a:66:89:d9:65:bd:01:bd:b3:65:6b:df:df:34:a6:cf:78:
e6:4b:b2:f1:a0:b3:5b:ef:b9:69:f7:d7:a6:56:51:8e:ec:54:
5f:8e:8f:75:5c:8f:82:7d:5f:f5:c5:5e:4f:c4:aa:3a:fe:b1:
9a:fd:ee:a2:05:9b:72:b0:3a:42:f8:15:0c:8f:63:90:5c:7e:
71:20:4f:4b:8c:05:8f:7e:81:07:e9:50:fc:ef:07:3f:30:32:
06:ae:f6:37:e7:29:44:37:85:c4:9f:c3:34:62:94:1f:25:8f:
24:a5:fc:b0:9e:8c:4e:f4:9e:4a:f6:2e:0e:66:0d:23:90:d6:
58:2b:d5:3f:3c:13:2d:29:09:1c:26:50:cb:ea:e2:0d:88:32:
4e:55:c3:7b:57:21:23:2a:c1:f8:bc:90:cf:c7:96:23:a1:15:
cc:a3:1a:3a:33:5d:62:29:13:12:25:31:97:6b:1a:5a:8a:92:
27:5a:80:9d:dc:b4:4f:4b:d7:e9:92:1b:0f:7d:93:a8:38:3e:
9a:e0:c7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:48:49 2025 by rpki-client