Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
File: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft (raw, json)
Hash identifier: 3aqrYscdxugzviC2sd9W711NE22rMKApCyC5HOZ9Yrg=
Subject key identifier: B3:D3:B3:E0:D8:C6:E2:E9:80:52:E2:0E:8F:33:16:53:71:3E:EF:62
Authority key identifier: 15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
Certificate issuer: /CN=15776df6c26a0ff39c43539d02472921b861e4ec
Certificate serial: 0197B74580E6B6AE17490222D0AC6BEB7534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 16:01:14 +0000
Manifest this update: Sat 28 Jun 2025 16:01:14 +0000
Manifest next update: Sun 29 Jun 2025 16:01:14 +0000
Files and hashes: 1: FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl (hash: wszy9P6ycdBGyrP88EmL6wJfPxWdRZdlA1/ujjIO8HE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:80:e6:b6:ae:17:49:02:22:d0:ac:6b:eb:75:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15776df6c26a0ff39c43539d02472921b861e4ec
Validity
Not Before: Jun 28 16:01:14 2025 GMT
Not After : Jun 29 16:01:14 2025 GMT
Subject: CN=b3d3b3e0d8c6e2e98052e20e8f331653713eef62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:18:b3:00:1b:fe:00:41:d6:a8:9a:61:f6:8c:
19:b7:3a:6e:30:b5:c5:ed:e6:29:19:a0:92:bd:ba:
95:b7:d1:91:c5:a2:fe:2f:b6:4c:17:04:68:e3:4b:
f8:04:05:f0:3f:04:d0:6f:c5:65:f9:68:89:87:84:
6a:14:58:24:5f:ad:81:f2:77:86:a8:cc:7c:df:7a:
67:84:5a:fb:9c:61:33:5a:22:34:76:be:26:ed:75:
69:56:cd:0c:e9:0c:32:35:4e:b7:e9:71:82:12:01:
ce:40:50:12:9b:cf:9b:b4:90:6c:0f:a3:0b:db:0d:
de:af:46:2b:09:90:f7:c4:1b:8d:b2:c4:8e:ac:99:
31:34:68:21:b6:ca:f0:24:53:f9:bd:8d:a8:14:ee:
67:e5:14:5d:a2:35:95:db:9f:e6:0c:3e:dc:60:9c:
33:8e:1a:32:92:24:fa:2a:7a:2f:d0:37:ac:54:3d:
63:0e:0b:57:fb:d9:33:d1:0c:cc:82:fa:f1:cc:3c:
1e:ee:ee:f9:0d:54:2e:09:bd:66:4e:d2:41:a5:65:
31:82:77:25:dd:40:f3:bb:56:1b:e9:d9:34:5b:c9:
6f:43:a6:c2:75:91:3c:1a:a8:04:24:33:9d:71:7d:
de:e8:8b:ab:69:72:01:3c:26:47:e8:53:00:4f:7c:
5f:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:D3:B3:E0:D8:C6:E2:E9:80:52:E2:0E:8F:33:16:53:71:3E:EF:62
X509v3 Authority Key Identifier:
keyid:15:77:6D:F6:C2:6A:0F:F3:9C:43:53:9D:02:47:29:21:B8:61:E4:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/3ec808-52e1-4f66-b145-4accf9f53927/1/FXdt9sJqD_OcQ1OdAkcpIbhh5Ow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:da:9f:8f:57:30:07:eb:f2:0e:d6:32:2c:96:f6:8a:26:f8:
ea:b0:af:4e:b5:44:66:d4:84:46:a8:c1:95:86:c2:74:51:ce:
bd:dc:5d:62:01:66:85:3b:43:0a:3b:e6:f3:57:82:10:48:72:
2f:95:39:34:d5:37:33:7f:a0:d0:76:5f:3a:65:27:67:f0:66:
0a:7a:26:eb:ff:65:7b:e1:14:2f:7b:33:45:24:1c:32:61:31:
44:31:01:83:8a:e9:04:38:91:27:75:24:09:14:0e:f8:13:a0:
5c:f6:06:fe:33:cb:63:fc:4e:3d:4d:6e:d3:52:a4:4e:07:0b:
81:6e:d8:39:8b:32:fc:39:43:7b:6f:e2:49:05:55:e3:ba:07:
4d:49:9b:8c:56:da:a7:0d:58:51:e9:3e:90:be:cb:53:70:1c:
cf:dc:57:c7:7f:f5:b7:ef:62:69:0e:52:88:51:da:7d:3e:59:
88:a0:0a:f1:fb:25:b1:bf:2a:8b:a1:0b:34:2a:59:af:09:7c:
df:a4:da:5f:41:09:92:d8:72:a2:90:a1:07:09:19:a4:df:f8:
6d:8d:a2:b2:33:7f:8c:c3:9b:e5:4f:e7:7b:0d:5e:44:2e:55:
ea:d4:56:6b:c9:76:95:2a:2a:b7:30:a9:fe:5d:c0:75:bf:6f:
1c:25:66:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:30:00 2025 by rpki-client