
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
File: FpjfAwCqteKm8ax45ZPsyXQNqts.mft (raw, json)
Hash identifier: N9nbhRtmWig2YZFVkhmm8lah6TkzjSqUvpUkx4zRpvg=
Subject key identifier: 74:F9:69:12:6C:79:52:CE:71:9E:2E:F2:EB:94:57:7A:C1:1A:56:12
Authority key identifier: 16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
Certificate issuer: /CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Certificate serial: 0197B77C28E72E89F82705938280B31A51F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
Manifest number: 08C0
Signing time: Sat 28 Jun 2025 17:00:56 +0000
Manifest this update: Sat 28 Jun 2025 17:00:56 +0000
Manifest next update: Sun 29 Jun 2025 17:00:56 +0000
Files and hashes: 1: FpjfAwCqteKm8ax45ZPsyXQNqts.crl (hash: lt1oaagea8vo/ffgjELmwRqMDgm1njN1w35HMfnWtHw=)
2: IUfWM-T8xAGUnehJbHrihlR8Ip4.roa (hash: +ZYqqzAxCIjpw2v4zvSgH/2R+ZjJqO0o/ztNO/Ll//g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:28:e7:2e:89:f8:27:05:93:82:80:b3:1a:51:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1698df0300aab5e2a6f1ac78e593ecc9740daadb
Validity
Not Before: Jun 28 17:00:56 2025 GMT
Not After : Jun 29 17:00:56 2025 GMT
Subject: CN=74f969126c7952ce719e2ef2eb94577ac11a5612
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:cd:f8:30:9e:8a:ad:8f:de:72:c4:57:09:83:
d8:48:3e:a3:ed:ec:49:31:16:18:dc:84:0f:19:ed:
30:3d:e3:a3:a2:84:87:76:ee:d8:a3:2f:06:ff:5f:
13:f6:87:5e:54:79:c5:25:4e:ad:26:08:59:67:5c:
3f:dc:11:64:e3:5f:7f:92:57:ac:f3:6f:4b:01:c1:
e0:b7:90:24:b3:3a:ae:31:9e:df:29:c4:96:be:57:
01:a1:3f:a4:78:b6:ba:6e:96:d5:4c:8b:2f:33:56:
2f:c5:64:6c:06:2c:b9:ac:7e:9c:29:63:68:d2:24:
ca:55:2d:10:98:e2:14:df:ee:3d:47:d3:89:d0:81:
00:14:da:b0:c6:f3:77:ed:d0:5e:39:78:af:d3:b2:
75:2d:08:59:24:b2:90:41:bb:0a:f7:14:38:91:c6:
c2:ae:b2:43:a4:71:ea:76:46:f5:aa:12:3d:e5:4c:
51:b3:32:ad:29:57:2c:b0:ac:5e:74:4a:4e:df:c1:
fb:d3:47:ea:73:93:0a:f7:0a:90:9b:e1:10:31:53:
29:9b:91:cd:27:10:29:fb:1d:2a:34:f8:8f:f9:00:
d6:d3:62:16:c5:2d:ab:e6:59:61:9c:35:6f:f3:e4:
42:47:bc:69:a1:ec:7b:2b:2e:63:1e:45:65:a6:13:
14:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:F9:69:12:6C:79:52:CE:71:9E:2E:F2:EB:94:57:7A:C1:1A:56:12
X509v3 Authority Key Identifier:
keyid:16:98:DF:03:00:AA:B5:E2:A6:F1:AC:78:E5:93:EC:C9:74:0D:AA:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FpjfAwCqteKm8ax45ZPsyXQNqts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/84cd4e-142c-4268-bef6-6ec9d988a408/1/FpjfAwCqteKm8ax45ZPsyXQNqts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:a1:20:1e:0e:7f:26:ee:e8:38:e4:fa:28:cd:5e:2f:cf:b7:
5f:46:ef:c9:ba:f9:a4:62:6e:97:e1:0e:63:cc:c9:fa:c5:88:
9b:08:95:3e:3d:c4:eb:77:e8:9b:d7:5e:3e:fe:b4:8b:da:20:
35:da:88:7b:b9:84:bb:5c:2a:30:1f:52:21:7d:bd:d4:cd:6c:
6a:a9:bc:c8:c1:9c:03:8c:ab:6e:e2:a8:f0:13:7d:3a:ad:cf:
c2:6a:d1:e6:63:91:66:79:59:cd:6e:8f:8a:db:31:27:13:3f:
f3:df:6b:a6:29:32:c8:d2:8c:72:25:10:8e:b8:98:75:21:15:
32:77:cc:a2:24:41:8e:40:fb:be:c8:72:88:ba:79:2b:1f:10:
61:48:b5:58:88:a3:72:e5:56:a8:b3:3b:13:f6:9d:87:2b:7c:
9b:47:dd:b3:e3:a4:64:e1:85:c1:e0:74:4a:94:82:9f:3b:aa:
d4:fe:7d:e6:7e:7c:ce:eb:a4:7b:8b:be:cd:db:89:32:8d:8a:
b4:cb:aa:63:41:57:ec:95:4d:14:c1:86:79:b4:6d:31:44:f8:
7e:51:20:1c:9a:52:4d:0f:fb:2b:14:b8:38:c3:83:bc:f4:e0:
d9:59:eb:b1:91:7a:d2:de:90:16:da:cc:60:d5:3d:aa:aa:19:
ea:42:3d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:17:22 2025 by rpki-client