Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
File: FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json)
Hash identifier: +30wVeAm12T1oqDGmJ012rTeUeaH2Uwq645FvaSqaDA=
Subject key identifier: FC:CB:CF:7D:A4:77:33:95:CB:98:52:28:30:A5:F0:70:DC:E3:58:7D
Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
Certificate issuer: /CN=157b320830ad06ea71a726e9b8b3c473241219db
Certificate serial: 0198D4E036CD355F2393C36909A8242FEDE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
Manifest number: 0AD7
Signing time: Sat 23 Aug 2025 03:02:00 +0000
Manifest this update: Sat 23 Aug 2025 03:02:00 +0000
Manifest next update: Sun 24 Aug 2025 03:02:00 +0000
Files and hashes: 1: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: oypnl2hDar3qGaHor+1so3rFAJDx67OjXXR7bnTasbQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:36:cd:35:5f:23:93:c3:69:09:a8:24:2f:ed:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db
Validity
Not Before: Aug 23 03:02:00 2025 GMT
Not After : Aug 24 03:02:00 2025 GMT
Subject: CN=fccbcf7da4773395cb98522830a5f070dce3587d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:8a:d7:5a:1e:c2:60:20:f6:8f:8b:c8:55:
f3:b5:0d:79:c4:79:50:ac:02:9e:8d:e8:14:77:74:
83:2d:56:c8:09:00:d3:c5:e7:7f:13:d8:fb:cc:be:
a8:7d:1d:d3:f3:39:02:13:eb:00:78:e1:21:5d:13:
64:83:13:d8:43:17:e5:fd:41:24:4d:e8:87:b8:71:
ee:4d:5e:c8:58:9b:03:02:17:ec:d6:01:65:58:f3:
7b:62:e0:bc:0e:ac:9a:4d:c9:20:a4:94:61:c8:47:
42:69:f9:54:cc:ed:09:e0:aa:3c:ba:10:2c:37:21:
69:0d:eb:6a:09:35:ad:43:de:54:9e:35:79:6a:57:
31:bb:4a:0e:d5:9c:18:f5:df:50:e5:c2:06:e8:aa:
a6:b7:78:bd:7e:89:e0:41:98:0e:3f:63:6c:50:17:
78:10:d9:08:7d:70:77:86:03:56:8b:ed:24:65:b7:
bb:9e:a7:38:8e:b9:9d:17:1b:c5:0a:32:94:57:c0:
f8:ac:e5:56:35:0b:c2:53:1e:c0:14:53:67:c7:de:
42:0c:06:03:9f:2e:b7:d5:5c:19:83:4c:d2:ab:17:
43:01:43:60:ad:a2:5f:a3:66:26:66:79:b9:6d:d4:
7c:a3:77:32:94:5b:22:34:99:cc:e9:56:98:91:4b:
46:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:CB:CF:7D:A4:77:33:95:CB:98:52:28:30:A5:F0:70:DC:E3:58:7D
X509v3 Authority Key Identifier:
keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ff:54:f5:3c:46:c6:4a:fd:e7:78:4b:87:d8:95:d9:e0:2a:
d2:57:ce:d1:a6:5d:79:3e:60:9b:ca:57:78:b9:d8:df:75:95:
d3:60:39:28:9e:d0:41:b1:0a:df:c7:e2:59:c1:c8:d6:bf:e7:
5c:aa:ce:3a:4a:a1:44:ce:9e:b0:66:e0:e5:a9:13:42:ef:dd:
e7:67:82:52:5b:9c:d5:0e:4a:00:b1:ef:26:06:5f:73:70:a1:
17:af:81:21:5a:74:9a:8f:a3:9d:5c:07:78:1f:9a:7d:86:22:
d4:c6:f9:88:dd:28:e1:bd:d1:45:be:bc:72:4b:34:c5:7e:c9:
80:bd:70:47:ee:4e:64:8f:f2:f7:97:8c:93:33:c4:8c:47:02:
3a:04:cb:f7:2e:82:e4:52:0c:54:dd:8f:19:dd:68:0d:15:3f:
d7:c0:20:0a:31:99:18:38:d2:8b:9c:05:91:7e:a7:04:ff:2d:
b7:ac:f7:a5:89:cc:b6:00:a5:b0:62:fd:1f:7c:37:7d:b2:4c:
db:0c:de:f7:bc:07:4b:c9:bd:51:90:c5:c2:59:bf:93:d0:a8:
f3:28:cb:90:34:1d:9b:7f:9d:0c:2e:7a:bc:50:3f:7f:31:17:
86:13:a9:cf:9c:15:39:b3:9c:fb:ff:aa:06:7d:b5:f5:ac:6b:
6d:38:e4:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:30:49 2025 by rpki-client