Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
File: FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json)
Hash identifier: Tbk6sntDhfaYvJqMplR3WkhqQP4hDAFKHHqAOwCcoac=
Subject key identifier: 7E:BD:33:1B:0D:7F:A8:D3:B8:9A:E4:31:01:BC:9D:E1:75:6B:10:E4
Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
Certificate issuer: /CN=157b320830ad06ea71a726e9b8b3c473241219db
Certificate serial: 0197B70E77D97F654BF0846072EE3FFFEBC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
Manifest number: 0A43
Signing time: Sat 28 Jun 2025 15:01:08 +0000
Manifest this update: Sat 28 Jun 2025 15:01:08 +0000
Manifest next update: Sun 29 Jun 2025 15:01:08 +0000
Files and hashes: 1: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: 6lt/6Wd7oYJJBvixBur1wSvG5tr+FU/HLmxpSm1c/rs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:77:d9:7f:65:4b:f0:84:60:72:ee:3f:ff:eb:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db
Validity
Not Before: Jun 28 15:01:08 2025 GMT
Not After : Jun 29 15:01:08 2025 GMT
Subject: CN=7ebd331b0d7fa8d3b89ae43101bc9de1756b10e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c5:bb:95:61:2a:14:a8:c9:2e:19:9d:94:0d:
0c:80:e9:b8:a4:3e:27:40:79:dc:83:7f:e7:c2:9c:
81:b6:ee:02:62:7e:81:5a:5c:83:fe:1f:f9:39:31:
e6:49:a5:8e:19:a8:ee:a6:39:4f:9e:89:71:20:5c:
88:2a:4b:58:af:ee:46:08:b3:a9:9c:a1:68:c7:95:
20:1f:c7:01:79:f7:e0:e6:20:46:96:30:ee:1a:4c:
cd:4c:6a:c7:8f:4a:3a:2e:6b:92:ba:5f:e2:97:d4:
d6:43:2e:e6:cc:28:b6:b5:d1:18:54:af:88:41:a1:
36:f0:af:05:9f:30:ca:e7:de:c2:d3:5e:ea:8e:9a:
1f:4a:c1:dd:15:6b:79:d8:60:e4:20:d7:8d:82:c5:
ce:4e:00:b1:56:10:03:33:17:3f:53:ee:5b:78:88:
ef:ef:7b:9c:3d:4d:8b:61:9b:48:3a:cd:aa:1c:53:
47:8f:e3:8b:f4:89:ab:cf:cc:93:94:62:24:f8:a0:
8a:fa:55:87:40:f9:52:6a:6b:26:4a:03:a3:e9:3a:
41:3d:64:d6:06:ae:20:e0:02:61:89:cd:63:af:bc:
83:4e:72:70:50:d8:d5:61:6d:66:75:8b:e9:7d:b4:
c1:fd:22:3b:e3:72:b7:0a:b4:9d:7b:76:87:e0:b7:
16:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BD:33:1B:0D:7F:A8:D3:B8:9A:E4:31:01:BC:9D:E1:75:6B:10:E4
X509v3 Authority Key Identifier:
keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:8d:a3:75:00:1d:01:78:5a:58:5b:a7:4f:1d:35:8b:8a:ea:
56:49:f4:07:c6:f0:46:4d:a8:be:2a:91:2b:f7:9c:0d:2b:70:
3f:bf:3e:51:5d:9d:a4:a6:74:a1:22:ee:8e:fb:fe:03:4b:1d:
26:f3:87:7c:b4:8d:42:9a:ca:c1:e5:37:aa:ba:cf:45:5e:1e:
86:53:ff:e0:66:62:40:58:b4:30:e2:3b:a4:9c:45:21:e3:2f:
92:56:a6:74:b3:ec:eb:98:ed:75:b3:0a:ae:7e:68:57:55:aa:
b5:12:59:d1:4b:14:ae:4d:cf:33:e8:24:26:0e:f7:d6:0f:0e:
e1:be:98:71:59:e9:6f:69:bb:17:1b:ef:0b:52:cc:ed:f0:34:
a0:9d:98:be:1a:47:02:4d:47:4a:44:87:e3:d0:35:ed:52:c8:
b3:14:43:7f:d6:98:3c:c3:2b:51:21:02:d0:42:12:3e:18:c7:
ed:93:0a:c7:d7:3e:4c:6e:52:5b:79:6e:88:fc:e8:81:87:32:
0d:e1:4c:24:c3:f9:b9:0e:91:c0:a1:4f:50:0f:13:b3:da:57:
1c:1b:ae:1a:20:66:c7:d1:f4:44:7f:f9:03:03:66:32:22:ec:
07:6a:31:a1:a3:90:9e:90:5e:8e:28:b2:83:6a:13:e1:39:0d:
ca:1d:68:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:48 2025 by rpki-client