Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
File: FycuwT2kL1s2HxB0xnUcw1RZPn8.mft (raw, json)
Hash identifier: B/TlmwOAwX2xVPpnUDQJDwegluvFwsT48yF1/bjlOx8=
Subject key identifier: 0E:06:76:18:AA:21:9A:26:22:F8:EA:94:79:EC:1A:B8:03:F2:E8:1E
Authority key identifier: 17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
Certificate issuer: /CN=17272ec13da42f5b361f1074c6751cc354593e7f
Certificate serial: 0197B77C6E954A2BFC89B58A206DB706F978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
Manifest number: 14AC
Signing time: Sat 28 Jun 2025 17:01:14 +0000
Manifest this update: Sat 28 Jun 2025 17:01:14 +0000
Manifest next update: Sun 29 Jun 2025 17:01:14 +0000
Files and hashes: 1: FycuwT2kL1s2HxB0xnUcw1RZPn8.crl (hash: EScrAKBOUtD4dC+epcx3N6UOfAmcMMrBKH23xNAe+iw=)
2: hni5Zm6l0tWgRkMPSWNQcz9bJXs.roa (hash: 5m+4OOvVIAL5ATC+IriCV/aH5fa2JcS0703gOVQtJWE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:6e:95:4a:2b:fc:89:b5:8a:20:6d:b7:06:f9:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17272ec13da42f5b361f1074c6751cc354593e7f
Validity
Not Before: Jun 28 17:01:14 2025 GMT
Not After : Jun 29 17:01:14 2025 GMT
Subject: CN=0e067618aa219a2622f8ea9479ec1ab803f2e81e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:71:df:4e:1e:08:fe:4f:0f:84:e9:a7:d5:b7:
2d:da:ac:d7:6b:8e:0c:c4:0d:ec:4f:3c:82:6d:f4:
56:66:8a:93:9f:a3:33:f5:07:0e:d3:ad:02:ad:f0:
c6:f4:37:bd:a6:43:c1:5d:ca:88:c0:6d:6b:7a:2d:
de:9e:44:08:3d:21:e9:55:ca:78:14:28:5c:3e:eb:
94:1f:52:08:1f:b3:3f:48:48:1d:d3:d4:76:07:56:
78:fc:1e:23:9c:70:01:2b:56:74:b6:b4:40:48:fc:
6e:1f:dc:94:23:d0:e1:8f:fe:26:ff:05:28:f1:b2:
04:09:c8:4c:be:f8:8e:08:17:40:86:67:71:86:b1:
35:a3:4a:77:7a:bf:b3:27:e3:a0:36:69:98:d4:4b:
07:cf:7b:b0:2d:31:fa:b2:d8:7b:97:46:10:0d:81:
9a:61:64:61:2d:88:8e:ce:5e:19:01:6f:63:51:18:
72:f9:51:1f:d4:5e:c9:9e:2d:59:0a:33:ba:93:43:
96:66:21:30:70:38:c1:87:7f:73:0c:b7:79:57:26:
d0:50:4f:58:dc:12:59:09:3a:56:b2:0a:8f:61:64:
59:42:4e:2c:46:62:ce:20:90:2f:bd:07:39:21:0e:
37:ac:65:46:db:71:39:0c:f9:8f:00:88:21:16:7b:
dd:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:06:76:18:AA:21:9A:26:22:F8:EA:94:79:EC:1A:B8:03:F2:E8:1E
X509v3 Authority Key Identifier:
keyid:17:27:2E:C1:3D:A4:2F:5B:36:1F:10:74:C6:75:1C:C3:54:59:3E:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FycuwT2kL1s2HxB0xnUcw1RZPn8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5b5c16-c11e-452d-98b2-eb15e38bbd15/1/FycuwT2kL1s2HxB0xnUcw1RZPn8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0e:4e:96:9b:77:86:6a:5b:31:39:f6:7e:76:09:fe:0b:b9:
e2:38:83:0e:75:77:42:b5:f1:0b:5b:88:f8:97:84:ce:67:d5:
1c:97:a9:40:a0:95:4a:7a:17:a0:3d:85:84:23:29:9c:05:5f:
b0:54:e4:38:e6:13:7b:47:8b:26:c5:77:45:e7:d4:37:5f:98:
a6:2c:46:f9:bf:fe:cb:20:3f:bf:db:f0:4e:fb:88:c9:43:b5:
bb:4c:7c:1f:bd:f2:af:18:3d:68:a6:da:31:48:5b:a5:6e:e8:
a5:f2:b9:6e:c0:79:1e:74:ab:bf:9b:ba:d4:ee:f9:90:07:70:
f1:70:15:d8:c4:83:62:8e:b0:60:9c:8c:5a:ce:a2:10:83:d3:
15:24:eb:19:c4:94:bf:6d:1d:3d:ce:e2:3a:4b:61:17:48:0b:
e4:7f:76:23:0a:70:f8:87:44:48:cf:24:c1:91:ce:39:15:d4:
83:d1:4e:af:cf:10:5f:ba:a1:ca:b2:b3:4e:42:88:4a:ab:f6:
b9:ae:63:d0:2e:c4:34:3f:8f:95:f5:2c:6d:87:94:37:d8:c5:
2a:73:d3:b8:19:d1:eb:8f:3b:2b:fd:bc:8b:84:3a:04:73:70:
43:ae:8c:b0:b7:d9:8b:96:f2:31:8a:cf:cb:6d:fa:3e:51:c1:
22:5e:a2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:27:41 2025 by rpki-client