Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
File: fXyyl4u1TrVXyuP_s15GrE1cIr8.mft (raw, json)
Hash identifier: fu/r9ilvl4aZ3wpXMTOiQ6tO9CKNtZs5+jcVHQwNAMc=
Subject key identifier: D9:02:D8:7A:CA:E6:3A:EB:BF:E5:76:B3:E5:D4:83:DF:39:BF:D0:2C
Authority key identifier: 7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
Certificate issuer: /CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Certificate serial: 01976DAB21FF51B4CCAE806696FF31CE1012
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
Manifest number: 0E8F
Signing time: Sat 14 Jun 2025 09:00:21 +0000
Manifest this update: Sat 14 Jun 2025 09:00:21 +0000
Manifest next update: Sun 15 Jun 2025 09:00:21 +0000
Files and hashes: 1: fXyyl4u1TrVXyuP_s15GrE1cIr8.crl (hash: jaRDH6nws0K0VsdMK8S7DWReAmErbLf3N3YCfs/qCT8=)
2: pxwAVluVRwPaC4_K6Ek3Wx-er_U.roa (hash: lPs9NFo1GbKQdNopdVVC2UFKPHRxF4UKX2B76mlkhRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:21:ff:51:b4:cc:ae:80:66:96:ff:31:ce:10:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d7cb2978bb54eb557cae3ffb35e46ac4d5c22bf
Validity
Not Before: Jun 14 09:00:21 2025 GMT
Not After : Jun 15 09:00:21 2025 GMT
Subject: CN=d902d87acae63aebbfe576b3e5d483df39bfd02c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9a:11:a5:1f:43:94:dc:17:96:a8:6f:30:41:
0c:c5:eb:96:fd:f0:1c:bb:7c:71:97:2e:84:69:14:
37:65:3d:ff:3f:a7:c0:b9:99:47:5f:61:ac:53:4f:
a1:f3:80:18:c5:f7:8d:35:ce:fc:97:6d:98:54:68:
a9:2c:ef:97:62:f2:1b:cd:40:2d:88:a5:eb:59:fa:
2f:ab:cf:2b:8b:ca:a6:b1:60:ee:ed:22:39:77:b2:
97:c5:d3:81:eb:05:55:b2:16:39:9c:b8:a4:34:b9:
98:54:ac:54:73:1e:3a:90:10:37:98:42:34:9b:73:
73:58:03:9f:0c:ae:0d:d0:32:b2:0d:51:df:40:15:
ca:b3:9b:cc:e5:f0:2a:e1:8e:2f:f1:c9:dd:eb:c0:
ba:50:f2:2e:a8:9b:5a:0a:9c:b5:19:74:67:b7:3b:
5c:a9:3b:92:d8:d7:32:0b:33:6c:1e:55:4f:ac:5b:
6e:b5:43:0f:9e:a3:60:79:ca:58:3c:f5:04:f0:b6:
a7:6f:d7:76:6a:5a:b4:e1:c4:78:53:75:34:4f:13:
a1:0a:77:09:0b:b0:69:b9:ac:5e:d3:cd:a2:3f:8e:
0d:05:39:82:ec:28:5c:64:de:37:8a:cb:2a:30:45:
29:76:cd:28:6b:c7:f3:0b:a8:ac:18:10:c2:7b:9b:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:02:D8:7A:CA:E6:3A:EB:BF:E5:76:B3:E5:D4:83:DF:39:BF:D0:2C
X509v3 Authority Key Identifier:
keyid:7D:7C:B2:97:8B:B5:4E:B5:57:CA:E3:FF:B3:5E:46:AC:4D:5C:22:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fXyyl4u1TrVXyuP_s15GrE1cIr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/6cea37-d270-4d1c-a937-24c3d9e25401/1/fXyyl4u1TrVXyuP_s15GrE1cIr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:fd:5e:8f:f1:b5:5f:bf:80:c4:4f:88:4f:ed:e1:19:dc:28:
8c:1c:ff:8d:87:0f:f0:d1:9d:38:17:bc:fc:8b:64:e1:2e:99:
44:15:19:d1:6d:b8:46:6e:44:02:0b:85:71:fd:31:1d:5c:29:
2a:5b:6f:d3:81:f1:29:2c:f1:50:a5:71:2a:60:7b:56:ca:af:
d7:e9:7c:11:6c:fc:83:ca:83:14:43:45:9b:d9:23:58:f8:16:
38:1a:d8:d1:6f:cc:9a:13:c2:33:fb:38:1b:78:7d:ba:7c:cd:
34:b3:89:c0:b1:58:68:55:77:cb:11:2d:c1:d9:64:30:c7:ee:
d8:39:5f:e0:26:c2:92:9c:12:dd:78:0e:d7:30:ca:cb:b3:15:
9b:e1:29:f9:e5:dd:1d:6d:69:72:be:5f:69:0e:36:77:ec:f8:
ed:9c:90:e6:e4:2d:8c:b7:e5:c7:c3:95:e8:78:26:3c:ea:8a:
49:dc:3b:3a:04:1b:1d:d5:6e:4c:32:8d:df:73:52:7c:e6:fe:
29:14:ba:0b:8d:cb:18:a1:bc:22:e1:b6:50:e8:0e:e1:b9:65:
d0:50:9a:60:c6:e2:27:c4:63:00:ef:9c:ae:d9:a7:97:ee:06:
1a:4c:9a:c3:4e:23:60:14:bd:0a:af:ab:03:19:21:f1:b4:d9:
59:df:2e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:37:58 2025 by rpki-client