Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
File: FXll7fKBfF_wlm8i1yscqI4NNyw.mft (raw, json)
Hash identifier: ta/rpiuWlnG8DUbtcQWxbMS6tttnvvwy2SAQhqqOtpo=
Subject key identifier: 31:D9:8E:79:F4:06:17:36:3E:5F:10:20:9C:74:03:2E:51:0B:BC:33
Authority key identifier: 15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C
Certificate issuer: /CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
Certificate serial: 01977AC3462F47774AE4C747046CF128D227
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
Manifest number: 1590
Signing time: Mon 16 Jun 2025 22:01:47 +0000
Manifest this update: Mon 16 Jun 2025 22:01:47 +0000
Manifest next update: Tue 17 Jun 2025 22:01:47 +0000
Files and hashes: 1: FXll7fKBfF_wlm8i1yscqI4NNyw.crl (hash: bC8fgnnWJRB68LyXvLLNScdXdxsICC6KvTsYb/JVBcg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c3:46:2f:47:77:4a:e4:c7:47:04:6c:f1:28:d2:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157965edf2817c5ff0966f22d72b1ca88e0d372c
Validity
Not Before: Jun 16 22:01:47 2025 GMT
Not After : Jun 17 22:01:47 2025 GMT
Subject: CN=31d98e79f40617363e5f10209c74032e510bbc33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ad:b5:98:40:86:b0:e9:93:90:a3:9d:6d:d6:
47:91:c9:9f:d3:a2:a0:09:07:de:8c:02:34:6d:c5:
10:88:93:3d:f3:a9:62:c3:69:6c:04:38:2c:38:3f:
8a:14:5f:9c:65:1f:8f:31:27:a0:e4:8e:bb:01:4a:
76:eb:3b:95:45:be:fb:13:66:b9:de:b8:e9:76:3e:
39:d7:7a:5c:9b:3f:d5:de:09:35:15:83:29:58:f0:
e8:00:25:3e:a8:f2:ac:b4:38:9d:f5:b6:72:c0:34:
b9:7c:82:ab:f9:30:12:02:a5:88:81:7e:2c:16:0d:
a6:b3:0f:29:87:4e:be:b4:1b:ad:a5:70:44:1a:d6:
e8:cb:97:b7:02:9a:b4:33:54:65:e8:1b:50:4c:83:
c4:19:c3:ee:85:8d:18:32:0f:cb:28:08:5b:8c:b1:
f0:1d:12:07:8a:56:e6:00:a6:5b:ec:a4:e5:26:fc:
31:03:99:4e:e9:ea:27:35:23:f5:eb:71:12:ed:7b:
a4:ae:d9:a9:b8:01:ba:98:e8:b0:da:63:ec:f1:e8:
e6:43:8a:3a:5e:97:ba:0a:60:8b:19:3d:5f:c6:e5:
9b:bf:30:48:b4:e9:cd:71:5e:59:ab:52:58:1b:81:
0a:a1:c1:16:16:fe:5b:26:96:e8:16:c4:07:b3:7a:
82:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D9:8E:79:F4:06:17:36:3E:5F:10:20:9C:74:03:2E:51:0B:BC:33
X509v3 Authority Key Identifier:
keyid:15:79:65:ED:F2:81:7C:5F:F0:96:6F:22:D7:2B:1C:A8:8E:0D:37:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXll7fKBfF_wlm8i1yscqI4NNyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/1bce30-13d2-425a-8fa3-31a0ab48a52f/1/FXll7fKBfF_wlm8i1yscqI4NNyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:b9:b8:7c:91:2a:cf:8a:d7:93:e8:8b:f5:2c:30:48:83:c8:
da:f2:4c:9e:ca:87:fb:2e:eb:4e:30:62:e0:0b:35:63:d0:02:
93:19:44:e2:bf:6d:5e:9e:52:ee:a2:ba:e8:84:b2:63:ce:e3:
02:6c:3e:ac:15:d4:8c:1c:62:1a:96:36:87:07:a1:83:9e:71:
eb:f2:fc:9d:f9:e7:8d:92:da:2e:48:09:0b:6b:09:30:e7:a8:
c9:dd:a3:79:38:a4:a0:1f:c1:bc:dd:cb:e1:7a:f2:e5:f9:91:
fb:7b:77:4e:0a:84:a1:32:42:20:92:9b:b8:5c:3a:a8:db:85:
a0:50:90:f9:36:c5:2d:8b:2d:22:fd:8c:e5:08:9e:d1:91:46:
20:33:3b:24:aa:01:7b:ee:81:41:c6:8f:5a:0f:25:e4:76:c9:
dc:94:08:21:12:03:a9:df:e5:25:41:63:bf:44:f7:98:8c:54:
56:bf:2f:42:75:78:07:b3:03:d4:ed:94:bf:2e:22:53:5b:37:
f2:a8:91:8b:fd:96:9a:84:63:1e:6a:eb:92:d9:a5:83:91:b1:
49:4d:9d:46:ba:3d:02:1b:31:94:57:dc:ca:ec:15:2d:6d:7e:
54:0a:e4:82:9a:91:67:57:f2:29:66:8d:b2:af:dd:14:88:3c:
2d:80:8c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 02:37:44 2025 by rpki-client