Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File: FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier: JC8s1JUD5MJ5UsZojyi1vNWQuNz6iomrT+i6uhTpsSM=
Subject key identifier: BD:8C:08:78:FC:7B:6C:A9:90:6C:79:82:BC:D6:67:48:9B:51:0D:41
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer: /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial: 01988F59981C51EAD5845348FD01539E2CEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number: 160F
Signing time: Sat 09 Aug 2025 15:01:09 +0000
Manifest this update: Sat 09 Aug 2025 15:01:09 +0000
Manifest next update: Sun 10 Aug 2025 15:01:09 +0000
Files and hashes: 1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: dFgjbX+uzplwws/MPBTrkI3MX2MzurZ8ruNVh+YX0T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:59:98:1c:51:ea:d5:84:53:48:fd:01:53:9e:2c:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15894575555cde14c770cbb183da5535d144b540
Validity
Not Before: Aug 9 15:01:09 2025 GMT
Not After : Aug 10 15:01:09 2025 GMT
Subject: CN=bd8c0878fc7b6ca9906c7982bcd667489b510d41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:41:11:65:d1:26:bb:7e:2b:ba:78:c2:fe:
9b:9d:cd:ac:74:4b:d5:58:42:91:67:66:b1:bb:c8:
bf:cc:04:eb:f2:c9:8a:95:19:34:13:e3:65:8d:64:
35:84:fd:03:5a:a8:14:33:6a:14:c7:a2:54:0c:6c:
ce:4d:fd:b1:89:68:a9:60:1a:74:f1:89:0a:88:d8:
b2:1f:88:2b:8e:a9:f0:78:d0:95:31:c7:eb:15:ae:
17:d5:a6:9c:0b:18:ab:48:a1:ca:d6:17:01:e8:1d:
a4:b8:d7:3c:40:bc:0a:1b:b4:9c:1f:c8:ec:9c:8b:
96:6b:6a:70:39:db:0e:3f:b9:93:2b:68:0b:96:76:
88:80:e5:ba:f8:72:3f:a4:1a:60:2a:7b:23:e8:be:
30:61:ee:2f:6d:0d:c9:94:26:d8:f2:90:fa:19:1d:
ab:c4:67:55:41:7b:50:55:2a:aa:dc:57:7c:6f:f4:
2a:50:af:5c:02:3d:12:e4:63:66:b7:14:1c:bc:78:
64:47:6b:6c:53:90:7b:f8:b3:99:0e:98:32:65:fb:
14:07:f6:c3:de:b9:da:4a:fc:f2:cc:aa:4e:8b:f9:
36:2a:c9:a4:af:22:bf:a6:5e:7e:a2:0a:de:21:ad:
5d:e3:15:4e:78:39:07:74:73:ce:d0:0f:e5:d5:91:
d6:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:8C:08:78:FC:7B:6C:A9:90:6C:79:82:BC:D6:67:48:9B:51:0D:41
X509v3 Authority Key Identifier:
keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:ff:cc:5a:e7:62:1b:5b:f8:f1:f1:ab:74:e5:3b:cd:c3:99:
99:56:53:36:11:0b:01:e2:ef:24:61:52:48:a4:42:29:29:dd:
e9:e3:a5:34:04:18:41:7c:4e:1c:22:04:c9:33:ba:ac:db:0e:
8e:31:c4:75:e9:dc:1d:da:b1:6f:82:41:20:42:5a:25:87:1d:
81:d6:e9:6c:2f:e9:4c:74:b5:10:36:35:88:88:07:7b:a7:43:
d9:27:06:bf:ce:b7:09:ed:91:c1:84:87:8b:5e:8a:bb:cd:45:
bc:e1:e6:1f:b7:40:9d:88:14:45:33:9b:eb:70:2a:06:b5:77:
af:6c:52:fe:33:08:85:ad:1e:44:97:23:ed:79:ed:74:a9:80:
bc:6d:2c:e0:fb:1e:1a:26:8a:5d:3d:84:0b:2f:96:59:52:29:
4a:c7:65:3c:19:64:a6:b9:aa:de:e4:fe:f4:3b:1b:e4:a0:af:
01:42:b3:0b:62:10:44:ba:cb:0a:da:fd:8b:61:45:df:6b:f0:
9a:94:ec:4d:70:da:21:4b:3f:03:b1:cf:47:1d:cf:fb:69:c0:
5a:21:8f:5c:1c:9d:2e:9c:30:47:90:31:9a:da:15:9c:d5:8b:
ab:81:e1:1c:81:e0:24:5f:cd:73:e4:43:25:49:c4:a6:08:6d:
cf:10:15:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 22:47:22 2025 by rpki-client