Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
File: FxXHzHtUJNpaIRFv73LOXNVkwPE.mft (raw, json)
Hash identifier: rIgWuu8IuXW//uMoOP+a3fXwolKWmQ5SWF9YKF2rBBE=
Subject key identifier: DD:7B:40:C5:57:55:24:63:A2:F4:67:F1:D0:E5:8B:D0:B7:C9:55:43
Authority key identifier: 17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
Certificate issuer: /CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Certificate serial: 01977FE92CC20C2F290175F4ED9DF99708BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
Manifest number: 029F
Signing time: Tue 17 Jun 2025 22:01:16 +0000
Manifest this update: Tue 17 Jun 2025 22:01:16 +0000
Manifest next update: Wed 18 Jun 2025 22:01:16 +0000
Files and hashes: 1: FxXHzHtUJNpaIRFv73LOXNVkwPE.crl (hash: cs+yJ8JvQ0JxOrqrGVm+kadE8Z61Om1DHVEU1ptA9pM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:e9:2c:c2:0c:2f:29:01:75:f4:ed:9d:f9:97:08:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1715c7cc7b5424da5a21116fef72ce5cd564c0f1
Validity
Not Before: Jun 17 22:01:16 2025 GMT
Not After : Jun 18 22:01:16 2025 GMT
Subject: CN=dd7b40c557552463a2f467f1d0e58bd0b7c95543
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:83:f0:b9:46:1d:11:b6:1d:62:60:a5:dd:d2:
7c:4d:a5:32:fb:c0:dc:dc:35:89:95:23:82:0b:c2:
fa:d5:71:18:b1:88:3b:d9:29:38:27:43:f9:be:bb:
fc:aa:ce:ef:a9:be:66:33:9b:98:43:99:44:6a:f2:
ec:f1:dc:92:1c:0e:97:ff:28:28:b3:89:34:c8:d9:
4e:af:e1:91:0f:05:21:2f:f7:a8:7e:dc:6d:3f:e3:
d0:f1:d4:61:4b:7f:82:d0:21:7a:4f:76:70:9e:24:
7b:22:9e:06:fc:99:18:18:e1:d6:fe:85:96:b7:0c:
d1:b2:19:b5:52:0b:a7:6f:aa:04:50:6b:79:be:ae:
fb:24:dc:6f:30:dd:bc:81:a8:8a:0a:5d:38:8d:70:
1f:42:47:47:a9:80:f0:c2:f4:78:ad:47:88:7d:49:
95:5d:a7:5e:00:cf:7d:61:62:aa:00:ce:a0:1c:7b:
5f:b5:fd:5d:d0:77:ab:0b:44:bf:ce:f3:94:9e:0c:
60:23:d0:25:6e:51:b5:9a:60:3b:96:35:f3:85:1c:
7a:49:85:6c:9c:c7:02:3d:f5:92:05:26:7d:64:33:
93:1c:95:12:21:f7:0a:d0:c0:5e:f2:d1:01:ba:5e:
81:23:bd:f1:64:42:5c:29:49:a2:34:e1:78:bd:c9:
d3:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:7B:40:C5:57:55:24:63:A2:F4:67:F1:D0:E5:8B:D0:B7:C9:55:43
X509v3 Authority Key Identifier:
keyid:17:15:C7:CC:7B:54:24:DA:5A:21:11:6F:EF:72:CE:5C:D5:64:C0:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxXHzHtUJNpaIRFv73LOXNVkwPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/7601ca-de00-4ee3-99ff-c536bf739869/1/FxXHzHtUJNpaIRFv73LOXNVkwPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2b:b0:dd:38:67:d9:40:88:32:ec:b0:2b:47:29:05:f8:66:
71:c3:87:22:ca:3c:94:dd:98:0c:3d:8b:d8:62:fb:b1:65:b7:
25:58:fb:e3:1b:72:14:77:aa:1a:38:09:0a:1d:81:cc:44:77:
15:64:51:3c:ba:8f:b8:a3:bb:56:8d:9d:7a:3d:32:74:8e:3c:
0d:2c:46:2f:4f:40:fe:7c:30:ac:d1:7b:4e:a5:5a:8b:74:4d:
94:a5:a7:29:bd:d3:10:93:31:5c:7d:cd:0f:20:43:24:0d:d5:
f4:84:97:fe:fc:18:f9:da:f7:d6:42:65:32:54:76:59:e2:b5:
6d:a2:af:12:2e:db:a1:69:bd:e8:64:20:c3:fa:11:80:21:da:
e2:2e:cb:be:1b:1c:1f:eb:44:74:79:73:3a:d5:30:15:71:10:
2d:fb:ec:b6:fc:98:2c:8c:18:0b:28:35:7f:3f:5f:41:d0:e7:
46:d7:1f:70:77:f2:24:c0:8f:71:9d:21:08:fb:a4:78:f2:fc:
e0:70:af:b5:da:00:0f:37:1e:aa:13:b2:a4:3c:6f:9c:60:ba:
d5:e9:63:be:f3:62:80:35:43:fe:e8:0b:11:bf:b6:b2:de:a3:
86:49:a7:f9:26:72:bb:ff:51:a3:26:a0:30:be:42:b2:0b:f7:
e0:7f:b3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 06:45:24 2025 by rpki-client