Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
File: FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft (raw, json)
Hash identifier: 8KNt0m2GmDapgRrC430Z5iVegI+Dtl+kz9X3QQjNtYE=
Subject key identifier: 17:BB:2D:60:8B:89:ED:24:60:C3:F7:72:E6:FA:62:33:48:AE:F2:EF
Authority key identifier: 17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
Certificate issuer: /CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Certificate serial: 0197B5FC459E63C82F0E15747F8B50188BA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
Manifest number: 056C
Signing time: Sat 28 Jun 2025 10:01:38 +0000
Manifest this update: Sat 28 Jun 2025 10:01:38 +0000
Manifest next update: Sun 29 Jun 2025 10:01:38 +0000
Files and hashes: 1: FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl (hash: 9ao4/xUAJEg9L9Yk/54DafLe//iWTneGmkfdmxgBIpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:45:9e:63:c8:2f:0e:15:74:7f:8b:50:18:8b:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1702685b1a4ef6cd313980a42ffd95eed139772c
Validity
Not Before: Jun 28 10:01:38 2025 GMT
Not After : Jun 29 10:01:38 2025 GMT
Subject: CN=17bb2d608b89ed2460c3f772e6fa623348aef2ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d2:39:dc:80:0f:4c:26:5b:05:93:df:e3:43:
01:92:86:ec:96:5a:95:d9:26:08:ea:90:6e:62:3a:
4f:a9:4a:a8:51:35:09:09:e3:89:cb:1b:75:65:dd:
4a:6d:a5:fe:54:5a:62:79:49:55:ee:4a:93:5a:b0:
1e:11:4a:4c:5d:51:5a:87:d5:23:4d:30:7a:fe:73:
9c:df:75:4f:3d:be:5a:eb:db:c7:ca:cc:cd:e8:7a:
aa:d7:b1:6a:4e:c0:1a:06:a3:8c:9c:b6:2e:c4:b5:
be:81:42:63:a9:1a:f4:0f:d2:ea:ee:f5:6a:8c:a3:
71:9f:44:6c:14:ac:4b:2b:9a:ba:90:10:e0:31:9a:
27:ce:76:75:e7:73:75:5d:01:54:e1:13:70:b0:a8:
20:9b:06:77:b7:db:85:cb:2b:e3:ee:9a:e3:de:fc:
a5:7a:5d:3e:64:32:81:05:22:28:80:32:ee:c3:47:
28:86:44:e9:f3:9e:57:cd:95:65:ea:76:49:f4:95:
7d:a2:b2:2c:ac:be:7e:9c:19:e5:ac:5b:98:05:a2:
9c:74:80:4b:bf:db:be:8d:7c:e0:7c:d6:30:a4:58:
24:ee:fb:e4:ed:3a:e6:80:8a:bc:e6:07:89:4a:75:
0c:95:ea:15:61:8c:12:30:7c:df:64:ba:61:35:d5:
21:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BB:2D:60:8B:89:ED:24:60:C3:F7:72:E6:FA:62:33:48:AE:F2:EF
X509v3 Authority Key Identifier:
keyid:17:02:68:5B:1A:4E:F6:CD:31:39:80:A4:2F:FD:95:EE:D1:39:77:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FwJoWxpO9s0xOYCkL_2V7tE5dyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ca8f2f-16c4-4f94-af49-69e1ffafb16e/1/FwJoWxpO9s0xOYCkL_2V7tE5dyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:37:de:3e:2c:a3:ce:03:76:29:bf:e6:a0:e9:93:35:8d:32:
49:a1:7d:eb:58:9d:9f:f7:a1:47:f8:87:20:5e:1d:5b:78:39:
0d:fe:a1:23:60:6c:1c:0f:f7:a0:0a:8d:ca:67:21:b8:35:5d:
73:6c:3d:6b:29:36:81:84:64:b7:38:7e:7d:14:5d:d0:ef:bc:
64:06:7c:6c:ca:82:e5:38:39:d2:dc:34:59:2e:64:96:9d:2a:
36:16:c2:e3:c3:a0:74:c9:50:77:23:7a:7c:6a:5b:d0:63:25:
d9:63:e7:60:63:a8:58:a8:af:e5:ad:f6:0c:97:ab:cd:a9:21:
91:97:32:5b:91:66:7a:e2:52:59:f4:47:69:2a:81:6c:82:f1:
9c:ab:1e:a5:ba:18:1d:2a:dd:5a:d4:08:fd:e9:c9:f0:c5:d4:
e8:97:d0:63:ec:b2:d2:6f:37:d2:99:0b:02:e4:dc:d1:d8:f6:
4d:5a:b9:06:7e:82:49:1c:65:22:f9:5b:c4:a1:bb:19:da:69:
68:18:d0:ef:ce:bd:6a:71:60:ba:8a:88:75:0e:56:fb:28:01:
16:cd:26:46:42:dc:91:f7:9f:33:14:ac:c9:12:fc:89:fd:3f:
c0:0e:cf:de:89:32:3b:57:75:70:26:9a:3a:24:4b:86:5f:c0:
78:d9:f2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:23:09 2025 by rpki-client