Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
File: fxFBauOSnfN79mpFnNOspjiR6UY.mft (raw, json)
Hash identifier: CzR8V5b/C4vtt538UMTOemqx7MeJM+hQUdtIfbCwOl8=
Subject key identifier: D2:0C:52:AC:3A:13:1F:F2:0E:49:D5:7B:23:C5:2C:B3:E8:7C:D3:F9
Authority key identifier: 7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
Certificate issuer: /CN=7f11416ae3929df37bf66a459cd3aca63891e946
Certificate serial: 019892C9101361DDD531DB02F583325552A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
Manifest number: 1622
Signing time: Sun 10 Aug 2025 07:01:46 +0000
Manifest this update: Sun 10 Aug 2025 07:01:46 +0000
Manifest next update: Mon 11 Aug 2025 07:01:46 +0000
Files and hashes: 1: fxFBauOSnfN79mpFnNOspjiR6UY.crl (hash: JyXNTTRCuGGppYQcI8N6NX1BMBsbYu4UaXZIOZ/Au8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 07:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:c9:10:13:61:dd:d5:31:db:02:f5:83:32:55:52:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f11416ae3929df37bf66a459cd3aca63891e946
Validity
Not Before: Aug 10 07:01:46 2025 GMT
Not After : Aug 11 07:01:46 2025 GMT
Subject: CN=d20c52ac3a131ff20e49d57b23c52cb3e87cd3f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:17:e2:d9:4d:21:5d:22:34:15:a2:df:b5:ca:
2e:01:c7:d2:bd:36:d1:05:66:27:b6:0c:5f:39:27:
26:aa:fb:69:79:39:14:ca:96:fe:a9:ed:c9:f8:ed:
27:b6:e5:44:53:44:c9:4a:d0:15:ef:3c:f5:d8:35:
c8:78:e4:f4:ca:e0:db:9c:3b:32:97:4d:1f:16:e2:
c1:a6:c2:42:e7:c7:06:c4:bc:30:2c:c2:e3:30:79:
ba:ac:4b:0e:88:74:0c:f5:38:35:58:f7:24:09:78:
fd:7d:a3:ac:d3:54:1d:03:9f:c0:7b:12:fb:09:83:
3c:9f:4d:e3:7e:c2:f1:4d:71:c2:66:3b:e2:c3:0c:
e1:eb:35:f8:03:4f:d8:12:a1:5f:31:be:55:14:df:
e0:da:a1:f2:fb:0a:08:09:3c:5f:b3:94:41:ed:d5:
7d:05:4f:14:db:56:c8:dd:94:3e:9d:82:e9:12:9b:
7f:03:45:de:04:d4:d8:2b:b6:34:f7:b2:54:60:7a:
c2:8d:78:2c:f3:e4:8b:e0:ec:e6:a1:5b:bb:28:99:
68:59:e4:50:c1:c2:dc:7f:ee:0a:7d:8b:46:f1:c3:
2b:09:93:3f:87:0f:6b:0a:1e:e5:b9:8b:85:24:4b:
55:99:a1:27:5b:67:4f:46:e7:74:44:f1:25:46:e2:
9f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:0C:52:AC:3A:13:1F:F2:0E:49:D5:7B:23:C5:2C:B3:E8:7C:D3:F9
X509v3 Authority Key Identifier:
keyid:7F:11:41:6A:E3:92:9D:F3:7B:F6:6A:45:9C:D3:AC:A6:38:91:E9:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fxFBauOSnfN79mpFnNOspjiR6UY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6b22e8-3dcd-44dd-9514-6756f7b0c0db/1/fxFBauOSnfN79mpFnNOspjiR6UY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:8e:8d:85:39:fa:04:56:db:0e:e2:b7:21:88:a6:ba:8d:39:
bd:13:8c:0f:b0:49:77:1e:65:ca:4e:d5:4c:85:3d:3e:47:f4:
fe:b6:63:af:05:ce:13:74:d9:68:72:be:6b:cf:db:4b:06:c2:
b9:35:c3:50:2a:a1:99:ea:88:e0:89:0d:f5:1a:4b:ac:f4:3e:
de:cc:4c:4a:92:02:88:4e:f7:3e:04:50:05:58:51:99:00:f5:
53:b0:9f:15:48:ff:39:9e:70:1e:cd:29:1a:07:49:4f:74:90:
7e:0c:e5:a0:64:96:eb:c7:b9:74:16:7e:91:27:59:b5:fa:83:
b5:0f:59:d8:af:15:c0:f6:9e:09:d8:0e:fb:26:2f:d8:71:44:
47:18:a7:dc:35:46:ea:5e:bd:85:4c:70:2d:64:c6:f5:44:3c:
ec:51:40:81:4f:7e:8b:32:74:c8:34:d5:3c:f8:ed:f6:44:40:
67:f2:9c:a5:7e:ad:2a:5b:4a:a0:36:64:88:3b:d7:72:af:28:
2b:af:46:ae:42:72:76:f7:5f:df:72:e6:db:70:13:f8:d2:5a:
41:c7:81:30:89:43:5d:6d:f0:d2:cd:78:f8:9e:7b:89:e7:61:
7b:e8:0b:f1:11:9f:98:20:6f:b0:10:22:e8:df:0b:13:a0:5b:
03:d5:cc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 10 13:42:51 2025 by rpki-client