Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
File: FXsyCDCtBupxpybpuLPEcyQSGds.mft (raw, json)
Hash identifier: ErfDrcfTUp81aM/5AD5nps6osSFhTtkyV7k4uTbiHoY=
Subject key identifier: 65:D6:93:91:E0:4D:42:DE:8E:9A:DB:23:B6:CD:CD:10:85:F1:18:42
Authority key identifier: 15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
Certificate issuer: /CN=157b320830ad06ea71a726e9b8b3c473241219db
Certificate serial: 01976DAB76BCA1AA3504A2ABA946A8872EF3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
Manifest number: 0A1D
Signing time: Sat 14 Jun 2025 09:00:42 +0000
Manifest this update: Sat 14 Jun 2025 09:00:42 +0000
Manifest next update: Sun 15 Jun 2025 09:00:42 +0000
Files and hashes: 1: FXsyCDCtBupxpybpuLPEcyQSGds.crl (hash: SkXyQbiUv5yaTkkbZBjjhxuDYpswf+TL/y5ehgmBDV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:76:bc:a1:aa:35:04:a2:ab:a9:46:a8:87:2e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=157b320830ad06ea71a726e9b8b3c473241219db
Validity
Not Before: Jun 14 09:00:42 2025 GMT
Not After : Jun 15 09:00:42 2025 GMT
Subject: CN=65d69391e04d42de8e9adb23b6cdcd1085f11842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:fb:49:ef:36:01:71:28:68:5d:75:9c:7c:
19:76:29:4d:d1:d3:0e:81:6a:43:71:38:38:39:1d:
9b:2d:90:d8:d9:c9:da:c5:45:6f:ff:53:67:22:f0:
80:40:0d:c1:e4:67:03:b4:e1:d9:f8:62:e2:8e:1f:
e9:58:63:2f:91:8c:17:8d:21:17:d2:f4:2f:e9:2e:
6d:e5:66:9a:cc:57:06:98:58:fc:c3:9f:bd:19:70:
20:84:31:b9:3f:d5:7c:c1:6d:63:5f:a0:06:83:24:
e3:d2:be:ff:94:f0:fa:e8:ba:24:fe:7f:d3:39:4a:
4c:e5:fd:c0:a1:95:eb:a6:d1:cc:3d:b6:39:69:e9:
4b:75:19:62:cb:ee:fd:d8:e6:23:6a:45:20:e9:9b:
48:78:fe:32:a5:22:18:43:1e:dd:d9:79:f1:09:05:
6f:50:55:3f:93:db:53:5c:ce:4d:d3:c9:c2:f2:ae:
52:cf:77:74:e3:d1:0b:d0:cc:aa:1e:89:7d:31:35:
7a:8b:be:84:47:d0:bd:66:3b:44:88:e9:10:d6:a3:
32:44:42:70:29:d3:93:9d:6c:b9:f2:b4:01:00:86:
cc:c5:e8:88:24:5e:e9:a3:92:c8:e9:4c:43:81:11:
d8:46:04:66:d7:2e:d6:c7:ee:9b:45:da:b2:d5:ef:
5b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:D6:93:91:E0:4D:42:DE:8E:9A:DB:23:B6:CD:CD:10:85:F1:18:42
X509v3 Authority Key Identifier:
keyid:15:7B:32:08:30:AD:06:EA:71:A7:26:E9:B8:B3:C4:73:24:12:19:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXsyCDCtBupxpybpuLPEcyQSGds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/4c364a-db68-4404-89e3-c650c76d08ce/1/FXsyCDCtBupxpybpuLPEcyQSGds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c4:df:da:65:2c:e0:cc:8f:8c:4d:53:6b:c4:65:b4:f0:23:
18:0c:8d:ce:17:f9:37:e9:d0:41:f7:49:c6:15:92:0e:55:7f:
dd:39:21:69:14:62:71:27:fb:e2:aa:da:28:17:db:92:ef:e0:
4e:1a:fc:2e:5d:f0:b2:bc:5d:09:15:e9:1d:ca:d2:91:0b:74:
3b:d8:71:66:4a:26:e6:d5:28:1b:60:9f:78:b2:57:42:77:de:
e0:83:6e:8e:b8:7d:17:f3:c5:ee:23:fb:1b:9f:cb:95:e9:96:
dd:65:c1:f3:29:5b:35:eb:17:10:bc:b4:61:c0:cb:11:5c:69:
0b:eb:bc:ec:eb:1d:e3:02:05:f7:48:40:51:00:53:4c:fe:7d:
c6:e9:0f:0d:3e:80:f2:e4:0a:b8:8e:ef:2a:85:db:9e:9a:03:
9a:9a:9d:9d:c8:06:50:87:be:03:c4:d1:a2:42:fd:80:b4:7f:
d2:28:0c:be:6e:ca:e5:da:52:3b:08:b1:f9:12:8d:76:c0:5e:
75:6f:3d:fa:c4:f2:68:8d:92:89:b1:01:5d:a7:11:40:44:e9:
35:1a:2d:3f:82:0d:8f:d7:ad:47:13:7b:45:0d:ec:7f:c3:42:
05:7c:42:2b:17:02:18:03:65:f5:3e:90:c2:0b:28:03:10:9e:
3e:b7:d1:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:41:13 2025 by rpki-client