Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
File: FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft (raw, json)
Hash identifier: qyuxL8jSzjhOabLUJg0W291qBHxYFYHxaEPFF3HDcbU=
Subject key identifier: 90:CA:65:98:EF:58:99:CF:73:25:B4:E7:D3:C0:24:93:F7:45:9E:22
Authority key identifier: 15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
Certificate issuer: /CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Certificate serial: 0197B7EA728534AAE8AF68158F053FC9AD43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
Manifest number: 1228
Signing time: Sat 28 Jun 2025 19:01:24 +0000
Manifest this update: Sat 28 Jun 2025 19:01:24 +0000
Manifest next update: Sun 29 Jun 2025 19:01:24 +0000
Files and hashes: 1: FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl (hash: tVE7a6XsMIhN4XdNtgA8vgFbxLvXGZAtkqjbEtjWlFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:72:85:34:aa:e8:af:68:15:8f:05:3f:c9:ad:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=153831c16635161c4dbd18ec5a72b99c4ee519e3
Validity
Not Before: Jun 28 19:01:24 2025 GMT
Not After : Jun 29 19:01:24 2025 GMT
Subject: CN=90ca6598ef5899cf7325b4e7d3c02493f7459e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:be:17:b2:84:1c:3a:b7:3a:fa:9e:6f:66:c7:
c9:ab:5e:38:4b:70:dc:d8:d1:7f:17:08:21:e6:b5:
4b:71:94:65:c7:b3:e9:f9:3a:9f:b8:df:14:3b:59:
4d:74:06:8c:9b:ab:4a:f4:b8:ed:2d:29:01:25:83:
05:35:99:e2:6c:fe:87:51:5d:3c:51:bc:21:c6:65:
09:4f:59:c4:bc:78:28:55:42:25:ae:75:a0:28:b4:
1b:b2:3e:89:17:fb:cd:ef:48:b2:05:96:f8:88:7e:
69:df:a1:f3:91:a2:19:ea:5b:07:0e:b8:db:e1:61:
1d:f9:fb:f8:48:9b:2b:62:f7:8b:13:3e:7c:3b:22:
c5:46:c3:40:16:09:1e:2d:de:30:a7:c3:cf:d1:36:
86:18:63:9d:b4:2c:d4:1d:d0:91:eb:1c:14:c7:2d:
e6:6b:13:63:9f:f5:13:2d:4f:6c:c4:68:12:0f:54:
df:7b:0a:b3:8d:2a:39:2b:80:e0:2f:fa:6a:8c:89:
17:2b:19:64:2b:22:f7:73:a0:3e:10:79:19:0f:f0:
3f:4b:88:b3:9a:1f:d7:3c:7c:37:9f:88:af:dc:48:
2a:9a:b4:4a:ec:ff:76:51:f8:0a:4b:7f:e9:fd:b7:
f6:0d:91:f7:91:5c:c2:e0:3c:f4:27:46:a3:00:a9:
7a:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:CA:65:98:EF:58:99:CF:73:25:B4:E7:D3:C0:24:93:F7:45:9E:22
X509v3 Authority Key Identifier:
keyid:15:38:31:C1:66:35:16:1C:4D:BD:18:EC:5A:72:B9:9C:4E:E5:19:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FTgxwWY1FhxNvRjsWnK5nE7lGeM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/954557-2a5f-4826-ab16-cd517b169f89/1/FTgxwWY1FhxNvRjsWnK5nE7lGeM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:a4:3c:a7:e9:cd:73:57:28:7c:35:88:50:31:86:f6:ed:f6:
49:1c:34:4d:44:ac:b6:47:25:45:4f:02:3f:68:bf:a7:4b:c2:
2a:7b:09:2d:a8:bc:90:0d:a6:c0:42:50:9c:57:2b:34:1f:7b:
36:49:23:8b:76:fb:01:b6:04:7b:e3:01:15:b5:e4:85:3e:c3:
4e:97:c2:2e:21:1c:59:75:1c:0a:6f:38:54:b4:be:1e:d3:fb:
fa:30:7d:d8:3a:6c:56:15:5c:b1:9c:92:4c:73:2c:59:b7:f7:
da:71:e4:41:56:c0:ed:d1:a9:db:64:b1:dc:1f:3c:de:7e:cc:
f6:33:88:b8:11:50:3a:05:48:b8:2e:d8:98:78:59:70:61:dd:
ed:a6:06:f1:0b:ef:da:3b:17:7a:a8:f6:5d:b5:eb:07:9a:95:
e3:31:b2:3b:9d:ef:ce:3a:90:39:1e:88:20:59:52:5a:01:e5:
eb:a0:2e:3f:b4:15:3f:89:05:89:80:0a:c8:a9:9a:a8:81:64:
0e:2c:ab:d5:08:6c:e1:44:a8:fd:2f:28:b0:04:7e:15:ee:48:
01:88:14:5b:23:34:37:b7:8a:92:87:6c:d9:90:ee:e6:53:65:
45:73:33:06:db:d8:d3:5d:9b:28:8a:e9:b9:79:0b:54:c2:ec:
94:c0:7c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:01 2025 by rpki-client