Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier: Itew/Ynnrx/ual1g/pFQbE7F74HoyaNXu0CCqEjwqv8=
Subject key identifier: 28:C2:76:1D:AB:3B:D9:04:39:BE:BE:01:BA:1D:B3:33:93:99:92:70
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial: 0197B857AC91546A7760D21F536A861CEE30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number: 02BD
Signing time: Sat 28 Jun 2025 21:00:42 +0000
Manifest this update: Sat 28 Jun 2025 21:00:42 +0000
Manifest next update: Sun 29 Jun 2025 21:00:42 +0000
Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: L0TyAnSl618O7RWaAHITMdfna1wVuTMWWigaKRMpbb4=)
2: kvd87x8t1PGUep5eUwNbvYfj-AA.roa (hash: Kt5G8onkZV1CMoFulV/VV3/ApunjUuQ11gDnhV8epFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:57:ac:91:54:6a:77:60:d2:1f:53:6a:86:1c:ee:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Validity
Not Before: Jun 28 21:00:42 2025 GMT
Not After : Jun 29 21:00:42 2025 GMT
Subject: CN=28c2761dab3bd90439bebe01ba1db33393999270
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:52:5c:5b:67:75:0c:e8:05:1e:2c:1f:a3:0f:
62:ad:b0:e9:f2:59:6b:1d:12:37:2e:fc:47:3c:1f:
24:88:9f:ea:eb:48:4b:b4:f2:93:c5:a3:4d:7b:53:
a9:f2:32:92:59:3a:4a:a3:ef:1f:38:43:4c:21:73:
45:63:9e:5e:31:19:bb:6e:94:c1:ff:cb:54:b7:62:
27:34:44:70:76:40:45:fe:61:48:49:ea:87:e1:b2:
a1:c4:48:b4:60:1b:15:ed:19:dc:61:a5:5e:96:0a:
c7:34:97:3e:a7:fa:6d:15:89:b2:0b:dc:25:be:9b:
82:de:b5:58:ae:70:51:e7:52:01:ac:cb:ec:c5:03:
ec:37:05:61:96:b7:a7:b4:ae:d9:d7:5b:e8:98:d1:
7b:2a:c8:38:01:12:3a:da:c1:2a:e2:c0:a0:7b:df:
1c:7b:59:60:8e:10:38:cf:3d:a9:b1:76:47:62:66:
ac:22:a2:76:6c:51:d0:ce:e3:5c:ec:ab:66:e5:cf:
d1:8b:34:ee:87:37:dd:20:bd:ae:54:c0:e3:20:7a:
a2:f5:9c:18:19:56:01:2c:ad:c9:d9:2c:ee:62:f4:
1c:7f:d4:60:06:5b:7e:ee:9e:a0:3c:78:22:4c:e2:
49:31:7d:e9:fa:62:72:7a:d7:08:e1:1b:53:9b:d7:
ac:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:C2:76:1D:AB:3B:D9:04:39:BE:BE:01:BA:1D:B3:33:93:99:92:70
X509v3 Authority Key Identifier:
keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:2c:72:17:2f:7b:74:4b:0f:e4:d0:c2:af:2a:7d:f5:1c:28:
d9:58:7e:54:d4:1e:b4:0e:2c:b6:b1:1a:4f:0f:6e:c5:0f:0e:
79:b1:59:b4:38:38:24:26:7e:8e:c4:fc:a7:cd:4f:d1:2a:42:
df:65:e5:cf:5b:74:bb:a2:f5:d3:84:98:60:11:af:31:7a:0a:
e4:4b:2a:86:51:c4:9b:51:7a:53:0b:7d:4c:31:50:9f:c9:52:
c6:31:7f:cb:b1:23:f4:de:74:21:90:b9:94:29:30:bc:b1:29:
ef:cd:38:20:f7:cd:9c:f3:3a:fb:15:2d:99:77:fe:f1:17:08:
33:d8:dd:d7:3a:fd:0f:e1:d6:62:9d:2f:6a:3d:b7:ec:44:49:
04:0b:7e:8f:2b:02:19:47:6b:04:31:fc:ac:da:b4:79:59:f7:
5e:22:eb:4b:ab:d2:8c:7a:42:6a:58:1c:11:07:ed:fb:2e:a3:
fa:f6:62:e4:81:60:5f:09:14:64:0f:a5:65:e6:cf:ac:96:54:
66:94:7a:fc:3d:08:b2:95:32:16:c4:64:1b:7c:0d:b7:18:fa:
f7:d2:fa:b0:31:a7:ca:8e:7d:d2:a2:2e:ac:0c:09:83:9f:3f:
f0:96:95:70:cb:45:3c:1d:e5:73:07:7e:99:67:fd:84:23:1e:
6a:5b:d0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:13 2025 by rpki-client