
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
File: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft (raw, json)
Hash identifier: WhPGPYUmGiSfe6HnHC2c29FcskKMJvFgkcl+xWpL53Y=
Subject key identifier: 9F:42:DB:AF:62:F5:59:BE:24:09:B8:7A:79:F6:A1:DD:3D:A5:9E:EE
Authority key identifier: 17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
Certificate issuer: /CN=171839a0b6476dfbf8335101613ce1a7721ef385
Certificate serial: 019875D1DF1BDA63C856424AFF385CBD48F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
Manifest number: 15A7
Signing time: Mon 04 Aug 2025 16:02:25 +0000
Manifest this update: Mon 04 Aug 2025 16:02:25 +0000
Manifest next update: Tue 05 Aug 2025 16:02:25 +0000
Files and hashes: 1: Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl (hash: rctwGG74Zx3mox66mTpqOFHkBtk0i3HB5TQmgpjAqZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:75:d1:df:1b:da:63:c8:56:42:4a:ff:38:5c:bd:48:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=171839a0b6476dfbf8335101613ce1a7721ef385
Validity
Not Before: Aug 4 16:02:25 2025 GMT
Not After : Aug 5 16:02:25 2025 GMT
Subject: CN=9f42dbaf62f559be2409b87a79f6a1dd3da59eee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0f:ed:2c:66:8b:7b:eb:e9:0d:c4:fa:1f:d6:
5f:9f:5f:c3:c4:1b:5b:46:c9:26:b4:6b:93:1b:e9:
e3:40:e6:de:cd:f2:02:37:9e:a0:c7:cf:76:85:8b:
3d:ac:db:6f:f9:79:b8:f9:da:48:33:74:23:72:0c:
5e:3f:1a:b4:6e:f1:c2:1c:5c:96:b2:02:48:5e:25:
60:f7:be:1d:ba:ef:58:51:45:85:3f:bb:0f:e1:3f:
4d:1e:9b:10:ab:33:40:5a:58:f7:05:18:bc:d8:ad:
7a:96:d3:23:bb:10:d1:01:a8:bb:ed:8b:cb:01:1d:
e7:3d:a7:ea:7a:1f:40:78:05:40:dc:9d:bd:91:5f:
58:21:02:17:88:51:70:31:2f:6c:25:3d:c8:80:94:
a6:53:62:d4:be:a8:4b:8d:bc:ba:8b:5c:cc:11:a9:
2f:d7:dc:94:08:d3:b7:82:ae:a8:13:3c:a2:65:f5:
62:22:70:65:d5:6e:21:1d:64:04:0e:30:2f:aa:87:
c3:e4:3c:ed:06:6b:90:15:ee:b4:7f:fb:f4:85:d0:
f6:7e:66:aa:26:db:09:86:3c:fb:9c:97:3a:e1:eb:
7c:89:78:6c:c2:a9:6e:d9:8c:8e:95:45:17:95:30:
65:96:05:cb:3e:38:72:5f:2c:f5:a3:84:4e:3b:b6:
b1:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:42:DB:AF:62:F5:59:BE:24:09:B8:7A:79:F6:A1:DD:3D:A5:9E:EE
X509v3 Authority Key Identifier:
keyid:17:18:39:A0:B6:47:6D:FB:F8:33:51:01:61:3C:E1:A7:72:1E:F3:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/2935a1-2aeb-4798-aadb-251e2dcb399f/1/Fxg5oLZHbfv4M1EBYTzhp3Ie84U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:51:e6:78:50:6b:40:3f:06:43:35:36:2a:1f:62:0b:59:1b:
ef:62:0b:6d:de:d7:cd:b3:08:40:30:a2:17:46:5a:39:7c:02:
36:bb:f5:1c:b2:26:2a:96:0b:3d:30:99:e9:cc:6f:9c:4b:5c:
15:02:4b:98:f9:80:42:c3:97:e7:82:db:e1:4a:8f:d8:20:88:
85:9a:f1:bc:32:7f:a9:0e:40:e1:98:12:7c:d9:26:a5:b8:03:
7b:ad:64:ba:fc:14:3d:ba:8b:28:0b:e8:ba:a8:24:27:98:8d:
41:08:20:ab:93:b2:6c:16:18:8a:67:af:82:72:ef:55:ab:69:
5c:0f:67:a1:dd:55:0a:f4:2c:c9:59:30:2c:b5:7f:ef:92:49:
0d:15:56:71:16:4a:e8:e4:c4:66:4f:b2:79:78:1b:81:3b:71:
fb:b9:a2:a4:fe:8d:cc:fa:6a:ca:22:0e:6d:0a:96:76:eb:b4:
57:0c:2c:40:3e:21:7b:d3:88:24:d4:db:6c:32:35:f6:15:e3:
db:3e:8c:e3:f0:8a:04:9c:6b:66:93:12:d8:41:3c:6e:17:dd:
b4:21:67:09:c5:98:9e:1d:fd:47:e6:57:38:c1:5e:00:fb:cb:
29:f9:ed:d3:ff:21:f5:a1:88:6d:97:cb:aa:94:57:ab:ab:1b:
a1:84:93:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 18:35:49 2025 by rpki-client