Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
File: FXHxV8OlvVz_XRpH1BlkiifjWps.mft (raw, json)
Hash identifier: ZQTaqmGIH0rFn3G6QCG9ScIOHxi8XR9sIi/3BDk0Joc=
Subject key identifier: 83:EA:8D:11:89:EC:65:1D:10:B2:19:9F:29:DD:66:7B:10:20:BE:57
Authority key identifier: 15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
Certificate issuer: /CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Certificate serial: 019874F531446791A0662861CB3BC4AEFC73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
Manifest number: 1528
Signing time: Mon 04 Aug 2025 12:01:22 +0000
Manifest this update: Mon 04 Aug 2025 12:01:22 +0000
Manifest next update: Tue 05 Aug 2025 12:01:22 +0000
Files and hashes: 1: FXHxV8OlvVz_XRpH1BlkiifjWps.crl (hash: gyTJXZMX3xSUifv48Ug41/XsIfCWHnQjEYcBJCvA2Ck=)
2: SbwwM1J0cW50ffjT8dS57JOEZaY.roa (hash: KDW7Xd6V5dGu/swRg1Y5NG1n0fbHWB4uQ3FumDxnAtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 12:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:f5:31:44:67:91:a0:66:28:61:cb:3b:c4:ae:fc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1571f157c3a5bd5cff5d1a47d419648a27e35a9b
Validity
Not Before: Aug 4 12:01:22 2025 GMT
Not After : Aug 5 12:01:22 2025 GMT
Subject: CN=83ea8d1189ec651d10b2199f29dd667b1020be57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:30:37:e5:37:f5:0e:8a:04:8a:16:51:49:96:
51:2a:08:9f:f5:fa:a0:8c:1e:c7:88:78:a8:63:25:
0f:8b:c7:00:55:a6:58:1a:68:70:c4:22:ea:b8:77:
c5:b5:0c:4c:87:2c:5c:6c:fa:85:09:09:67:a8:82:
74:86:d0:b8:01:60:c5:8b:98:f5:ef:b5:d8:5c:67:
b4:bb:7c:c7:60:72:f1:be:81:51:08:42:d7:b0:e6:
1b:5d:3c:42:45:6e:04:de:b7:18:8d:b7:1e:f8:a0:
43:d9:41:e6:68:47:70:73:8e:79:3f:3c:47:a5:5d:
25:f6:1a:01:77:0d:7f:9c:3c:28:81:fc:29:3d:85:
57:9c:56:4e:ca:8e:ac:6b:b9:4b:e3:5b:93:13:16:
e0:a8:23:27:a6:8b:32:cf:34:29:f3:5d:c8:01:81:
52:cb:bd:f9:59:2e:1b:56:ca:0b:90:b1:e1:46:25:
2f:ba:be:08:ac:f2:ae:d4:d6:a2:65:ef:1c:77:d5:
d7:4c:df:65:a6:b6:bd:cd:28:f7:0d:59:35:7a:c1:
1b:ca:20:05:7d:78:40:49:d9:4a:f4:47:86:db:99:
a3:d9:99:41:6e:e7:a2:66:8d:9d:5b:01:81:56:a3:
2b:58:a4:6c:b3:17:96:6b:fa:b5:7d:11:83:09:a4:
19:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:EA:8D:11:89:EC:65:1D:10:B2:19:9F:29:DD:66:7B:10:20:BE:57
X509v3 Authority Key Identifier:
keyid:15:71:F1:57:C3:A5:BD:5C:FF:5D:1A:47:D4:19:64:8A:27:E3:5A:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXHxV8OlvVz_XRpH1BlkiifjWps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/4624d2-484b-4bb2-aad2-02ddcd6bda92/1/FXHxV8OlvVz_XRpH1BlkiifjWps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:aa:44:82:fb:60:fb:87:29:f4:cf:34:f0:a0:8c:15:a3:8b:
bf:fc:4f:e3:c5:ff:bb:b2:22:49:c0:9b:a8:cd:90:70:00:2f:
03:4a:8f:b3:62:2f:2d:47:77:04:af:47:b1:5e:8f:d7:32:e3:
e9:04:a8:40:64:78:57:4b:58:e4:86:e1:ee:17:db:22:d8:d6:
12:98:14:e9:9e:d6:97:57:cf:ce:6b:44:d2:32:6e:ee:4f:ca:
40:74:bc:f1:0e:d2:7e:c8:94:e1:77:ad:c4:1e:d6:42:cd:a7:
e2:a7:02:c6:1c:be:9e:44:8a:1b:40:8e:08:43:33:f8:0d:53:
ee:8d:d7:e7:de:21:79:3b:13:91:e7:7a:32:91:7b:6b:58:4a:
c5:2a:c5:9a:c8:bc:f4:92:b8:41:19:45:b4:2e:b5:b7:cf:4f:
6b:ad:f5:5a:f6:7c:f3:0d:bf:78:23:83:c3:a8:8d:82:31:3d:
14:ac:7b:b3:b2:35:55:5b:6e:6e:94:38:33:62:80:80:9b:2c:
bb:f7:87:c6:46:f4:c7:c1:c1:53:f9:2c:43:e1:73:84:1a:e3:
41:f9:de:3e:e1:cc:84:e9:b8:4c:47:a5:6d:aa:b4:9f:20:24:
45:45:3b:b4:a7:99:e1:ed:53:6a:04:c6:4d:a7:68:42:3b:42:
21:8c:a5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:33:15 2025 by rpki-client