Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
File: FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft (raw, json)
Hash identifier: 2ymPZapad2ohMzlsmLffJvhlhkvDMrUULyeSp/z22hw=
Subject key identifier: E3:B5:B1:74:B9:36:73:D9:74:C9:66:04:BC:77:B1:1D:17:2A:4C:11
Authority key identifier: 17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
Certificate issuer: /CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Certificate serial: 01976884C2186172F50F83C2E2D10380733B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
Manifest number: 0E00
Signing time: Fri 13 Jun 2025 09:00:20 +0000
Manifest this update: Fri 13 Jun 2025 09:00:20 +0000
Manifest next update: Sat 14 Jun 2025 09:00:20 +0000
Files and hashes: 1: FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl (hash: JFNdj1X8lJH0x/59Vl5asgWnDSOXswrwdgls654kC4w=)
2: f0fm_m6mqyncGFPg2zPkibsoBcI.roa (hash: R5AqcJr/crlHYVpexq/9b2IVn+Dod1jCAKFqkiICDJI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:84:c2:18:61:72:f5:0f:83:c2:e2:d1:03:80:73:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1722e9678fb0d414d2ddfbd2420c4c748263f34b
Validity
Not Before: Jun 13 09:00:20 2025 GMT
Not After : Jun 14 09:00:20 2025 GMT
Subject: CN=e3b5b174b93673d974c96604bc77b11d172a4c11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2e:95:a2:e0:bc:52:76:7e:31:e1:8f:a0:ad:
da:6d:d8:a2:ab:ec:6d:d8:91:ad:d7:4a:42:e2:a4:
fa:04:a4:2c:3d:1a:31:97:22:e7:ec:79:4a:4e:bf:
68:aa:e1:4b:e1:76:c6:fb:24:4f:2f:d0:a7:ef:94:
26:9f:d5:02:98:79:a1:9f:28:d7:45:1b:83:bf:0d:
09:4e:34:fe:c4:3f:ef:d1:45:63:28:8c:5f:9a:e5:
69:03:98:da:e6:ff:b4:fc:0b:f2:dc:31:85:77:19:
69:62:e7:e1:2d:30:3d:42:25:4c:10:a8:16:82:af:
f7:a8:61:b4:1c:91:cc:e4:29:17:a7:cc:9c:11:62:
ef:59:20:ba:f4:19:05:c5:4b:78:bd:7c:ea:1e:1f:
1c:84:58:de:5c:fb:fc:70:12:1c:b3:f0:83:d8:0e:
0b:7b:18:f8:3c:88:26:28:87:9b:05:85:bc:a7:39:
a9:aa:9b:41:ed:08:19:bf:c6:ca:f8:4e:a1:ee:8c:
5f:88:43:ca:7c:2c:52:fa:1f:20:fd:f5:ce:01:de:
29:64:90:d2:e6:c5:68:b5:77:e5:02:e6:4c:bc:06:
21:0f:a3:62:68:04:51:a9:e8:c5:f3:e8:2a:96:6b:
1a:41:cb:91:76:2a:0f:b0:1c:d8:9c:1f:2f:d1:6c:
86:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:B5:B1:74:B9:36:73:D9:74:C9:66:04:BC:77:B1:1D:17:2A:4C:11
X509v3 Authority Key Identifier:
keyid:17:22:E9:67:8F:B0:D4:14:D2:DD:FB:D2:42:0C:4C:74:82:63:F3:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FyLpZ4-w1BTS3fvSQgxMdIJj80s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a6e1b5-e781-4018-960b-88c951cee784/1/FyLpZ4-w1BTS3fvSQgxMdIJj80s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0f:0d:61:13:dd:bb:42:27:0a:a2:53:3d:09:9e:ac:16:a3:
98:97:e5:91:1f:79:12:ca:02:2a:40:be:3f:72:57:14:e1:72:
ae:3e:11:4e:3b:5e:62:14:e9:37:90:5f:f4:1f:04:6f:be:02:
b4:e3:6f:21:0f:84:db:e7:86:5d:ce:74:97:c1:00:39:94:9a:
7d:37:1f:ca:39:9e:e8:4e:84:4e:36:90:8c:1f:be:68:14:2c:
24:40:ec:80:fa:21:08:21:f2:ad:19:91:4d:71:f4:d4:8c:04:
65:f1:b9:b5:cb:bc:be:c2:92:2c:7d:32:31:b1:1d:ba:60:25:
50:31:dd:fa:fb:16:92:7f:90:74:a3:88:03:83:91:2a:3f:f7:
d3:1d:6c:2d:30:a9:66:0c:e2:ea:7d:33:79:8f:f9:3f:6f:b8:
f0:78:c9:8d:a1:e8:b1:ac:bf:08:ec:00:6f:d0:bf:2e:95:d2:
55:3a:39:91:dc:4c:12:5a:a8:9e:41:a5:69:90:f1:9f:9d:70:
14:d0:35:58:88:38:03:ce:9e:fe:69:8c:df:65:e1:9e:24:5d:
05:b3:0b:60:a9:07:4d:f2:23:45:70:fc:17:eb:7f:cf:38:fc:
33:ea:b8:bd:e9:76:49:6c:49:49:57:fa:58:c8:eb:76:0e:9a:
59:09:b8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:11:36 2025 by rpki-client