Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier: vpDlnD3/8RMAOsK34NS2bXM4YhSob2KWnGd7nXTBYIo=
Subject key identifier: DE:8C:42:AA:27:C4:AF:AB:15:B0:C3:2A:06:29:7B:A1:EC:73:86:31
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer: /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial: 0198D5156FEBCC56D6F4932C36D34E13246D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 04:00:08 +0000
Manifest this update: Sat 23 Aug 2025 04:00:08 +0000
Manifest next update: Sun 24 Aug 2025 04:00:08 +0000
Files and hashes: 1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: m4DX64prllEwqjq4rIrdXuncvo/aB9c+qOV2kOMdBwM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:15:6f:eb:cc:56:d6:f4:93:2c:36:d3:4e:13:24:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
Validity
Not Before: Aug 23 04:00:08 2025 GMT
Not After : Aug 24 04:00:08 2025 GMT
Subject: CN=de8c42aa27c4afab15b0c32a06297ba1ec738631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ce:8a:57:65:46:31:10:a9:12:d9:90:e7:2d:
b4:c4:9f:f3:f0:bc:f4:d2:4f:05:33:38:1f:37:51:
5a:27:47:6a:63:9b:04:cf:cc:07:16:40:8c:bb:1a:
8b:de:af:e2:34:24:64:a2:e7:da:0a:e1:9a:9f:cb:
e0:20:45:b5:68:aa:09:03:3b:03:1c:57:11:ae:06:
22:76:a1:bc:d1:24:ba:4f:08:4a:cd:ee:d9:75:9e:
ad:3d:e7:98:93:48:0a:27:ac:38:ae:f0:d3:55:c3:
08:85:4b:d1:3a:0d:2d:1d:0b:24:3f:4d:2c:f2:42:
e2:96:f3:57:6c:b9:16:6a:ae:ea:9d:a4:32:9d:a1:
17:17:e9:5a:37:5d:9d:37:68:33:02:2d:60:93:2f:
e4:0a:2f:d1:27:10:32:e1:e8:31:3b:ee:b5:a9:4e:
aa:0a:b9:58:e6:dc:4e:21:0d:36:d9:75:fc:4c:5b:
56:5d:4b:db:0e:4e:15:c4:99:2d:94:bd:9b:48:c5:
62:8c:32:2d:0f:12:21:d4:18:da:22:0a:7a:64:2f:
ea:af:5a:fc:64:78:67:22:66:3e:87:06:55:73:48:
4a:af:d6:88:27:9d:e1:7f:96:40:e4:c5:8f:50:b0:
31:97:32:f4:d5:a9:bd:30:14:0a:a5:1f:41:42:99:
a6:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:8C:42:AA:27:C4:AF:AB:15:B0:C3:2A:06:29:7B:A1:EC:73:86:31
X509v3 Authority Key Identifier:
keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:26:f4:5b:87:4e:97:f6:bf:d3:25:a7:52:40:a7:5e:d3:40:
e9:31:f1:3f:ca:87:cf:a4:31:4b:fe:8c:47:6e:f0:df:51:10:
7c:bd:be:0d:e3:bd:12:a7:f6:73:58:a9:69:e1:4e:a1:70:13:
d0:a2:fe:59:39:7f:fe:a5:a8:2d:56:d9:02:eb:fa:71:f7:f6:
47:37:a1:3a:57:00:cc:7b:b2:55:bf:1f:1c:96:be:cc:31:e6:
46:4f:5d:43:bb:55:c3:6c:5b:21:50:56:af:46:c5:7f:df:93:
ec:c9:0e:bb:85:c1:e0:89:6b:7c:6b:73:d7:8a:94:06:1d:ce:
63:af:e8:0b:ae:40:21:fc:89:a8:ce:a9:cb:a4:57:68:ff:fb:
f9:33:d5:2c:16:fb:da:71:24:02:c1:9d:2e:71:29:78:9f:e1:
a1:4b:11:67:9d:4b:12:15:5b:e6:f2:32:2e:b1:60:81:79:ad:
5a:37:f9:8d:9f:8e:48:27:9c:c4:5b:8d:a4:d1:97:88:f3:16:
22:5b:48:37:11:6d:67:10:07:38:d2:39:42:5a:4d:ff:32:27:
b1:f1:78:a1:93:5b:ec:d6:7a:49:81:09:42:3b:fd:96:d5:6d:
af:af:ef:c3:6b:33:90:d9:c9:99:a5:9f:2d:47:07:00:e6:f4:
a1:8e:8f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:30:41 2025 by rpki-client