Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
File: Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft (raw, json)
Hash identifier: dpHKxtJxDsPGKg+2oCAGs7+f0bDLWCI8uLdEu3RY3yA=
Subject key identifier: 04:DE:50:F6:DC:74:CF:47:5D:B6:76:A2:17:02:C8:21:97:B0:9D:7B
Authority key identifier: 17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
Certificate issuer: /CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Certificate serial: 0197B6D725D3DC0994C2D243CDFE24F1EAFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
Manifest number: 04F5
Signing time: Sat 28 Jun 2025 14:00:42 +0000
Manifest this update: Sat 28 Jun 2025 14:00:42 +0000
Manifest next update: Sun 29 Jun 2025 14:00:42 +0000
Files and hashes: 1: FDrMY25luzUgEicNY75FE-uO2tw.roa (hash: fjlUWgHKI2vkNS9JhhFgEKy2oBhGIJFwaeJzp29a1Pc=)
2: Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl (hash: MIyIwEFcaROY8AfxkUeF4UtdT59Bn62ET1PyHfFOfUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:25:d3:dc:09:94:c2:d2:43:cd:fe:24:f1:ea:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171da75128da7582e10f6a4bf22b9391349ba9f1
Validity
Not Before: Jun 28 14:00:42 2025 GMT
Not After : Jun 29 14:00:42 2025 GMT
Subject: CN=04de50f6dc74cf475db676a21702c82197b09d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:36:f6:f3:26:1c:c4:07:57:a8:b1:89:71:d5:
21:cd:0b:74:74:0c:67:e9:cc:c2:de:db:14:b0:e7:
ce:53:93:4d:aa:be:e0:d4:bd:99:38:c3:e2:9e:39:
37:dc:f3:ef:97:f7:84:21:75:c2:da:0d:92:84:52:
38:7c:14:7c:0c:f4:93:a3:90:5c:87:23:1e:21:ee:
66:c4:af:bc:a8:84:31:5f:5b:25:fc:f0:1d:cb:df:
bb:2a:ab:b2:21:4d:8f:5a:3d:45:91:65:e6:38:b3:
26:e1:a2:d4:f7:a8:a5:be:54:e1:94:8b:c2:62:9e:
a1:c2:0d:f0:9b:28:26:d3:f0:b4:10:90:f1:98:4b:
f6:23:5c:6e:29:eb:1f:10:a4:65:e1:35:74:8f:d6:
82:f0:c6:db:60:3e:1d:67:d5:28:15:23:0f:49:73:
a5:f3:5e:40:b3:0c:d7:0e:ef:64:5c:d8:ba:d0:46:
c9:02:60:4b:ae:4d:c0:25:90:d0:00:f4:35:ab:c9:
1c:78:ac:59:52:02:5d:98:8b:f0:22:d4:bc:f0:a2:
ab:a8:19:92:13:52:b6:a9:db:de:5f:bc:87:de:3b:
fb:dc:f5:c4:2c:4f:d1:73:bb:5f:51:5f:97:80:7f:
8f:8b:79:1b:08:5d:38:4b:ad:6e:1e:5c:9a:f0:1c:
a8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DE:50:F6:DC:74:CF:47:5D:B6:76:A2:17:02:C8:21:97:B0:9D:7B
X509v3 Authority Key Identifier:
keyid:17:1D:A7:51:28:DA:75:82:E1:0F:6A:4B:F2:2B:93:91:34:9B:A9:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fx2nUSjadYLhD2pL8iuTkTSbqfE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/59f743-f1c5-42f8-867c-61deaa5631b2/1/Fx2nUSjadYLhD2pL8iuTkTSbqfE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:b5:65:79:1b:64:a4:11:a3:5e:2a:09:bd:1b:e3:4c:58:c6:
b8:05:04:04:50:65:d5:ef:e7:b0:84:a8:aa:28:96:c4:03:4c:
25:be:ef:36:96:9f:b1:02:2e:90:62:fe:0d:cc:db:fa:3e:2d:
54:11:8c:26:9b:9c:2e:0e:0a:99:66:dd:e3:85:e3:17:9a:72:
4d:b6:02:a3:2b:79:48:f0:27:5d:a4:a6:b4:8a:7b:9a:df:81:
94:8b:d2:21:21:54:bd:2d:53:5d:84:72:5b:21:da:9f:2d:1d:
bc:40:c9:db:fa:90:31:12:ba:1c:b9:9f:84:53:2f:d7:e3:44:
20:8e:71:69:3d:9d:29:46:5c:b3:7c:73:51:44:13:11:bc:85:
ce:9e:31:16:b6:5c:cf:5f:1c:af:af:07:44:1b:a6:80:62:44:
f7:60:09:ab:8b:33:55:0e:fb:6c:48:a6:2c:36:fd:d9:39:ee:
ff:39:ec:40:72:cd:14:e9:cb:ae:42:95:7d:61:9c:92:32:cc:
05:0d:90:82:d6:d1:a9:c9:09:7c:e7:25:4b:df:12:92:80:3c:
ef:32:f3:8b:26:30:c5:75:9e:1b:0b:ba:cc:78:47:75:32:83:
38:e0:8e:e4:28:49:fd:32:5e:1a:36:57:36:63:ad:84:ea:17:
b8:c6:2e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:10 2025 by rpki-client