Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
File: FxGAccwfrZwvkqEikhrUeLE0ew4.mft (raw, json)
Hash identifier: VtvmEP9R+4xEF3+iaHrZZIKUZ/2ywdMlsfDSnVCBBB0=
Subject key identifier: 87:E3:24:09:6A:F9:0C:EA:83:DE:EC:42:2B:3F:1C:A0:B2:69:38:3C
Authority key identifier: 17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E
Certificate issuer: /CN=17118071cc1fad9c2f92a122921ad478b1347b0e
Certificate serial: 019896A69262894A5E16583E91BA80D97718
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
Manifest number: 06C7
Signing time: Mon 11 Aug 2025 01:02:35 +0000
Manifest this update: Mon 11 Aug 2025 01:02:35 +0000
Manifest next update: Tue 12 Aug 2025 01:02:35 +0000
Files and hashes: 1: FxGAccwfrZwvkqEikhrUeLE0ew4.crl (hash: VnJ9Ny1dLl57MTyNf96Pvps0Q5r4kInEbtk2oq55JXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 01:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:96:a6:92:62:89:4a:5e:16:58:3e:91:ba:80:d9:77:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17118071cc1fad9c2f92a122921ad478b1347b0e
Validity
Not Before: Aug 11 01:02:35 2025 GMT
Not After : Aug 12 01:02:35 2025 GMT
Subject: CN=87e324096af90cea83deec422b3f1ca0b269383c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:be:7f:01:bb:0b:a8:89:c4:21:fe:64:b8:44:
29:1a:27:fc:e1:4a:b6:dc:48:7d:bb:0d:d1:19:34:
eb:6b:03:75:90:6b:90:bb:9b:92:c5:37:b3:ea:ed:
40:b7:c6:55:d3:c1:1c:66:55:81:b1:12:9c:cf:07:
e4:e7:7c:98:b9:95:06:a1:30:61:ea:0c:98:cc:2e:
61:da:30:5a:68:6b:2e:9f:25:b0:1c:97:f7:f6:d8:
1c:40:73:64:3a:61:01:a7:87:a1:09:ea:85:0d:cf:
3d:52:75:d0:f6:b1:a0:3c:c6:d5:13:42:02:03:0a:
49:f0:a5:bf:17:c4:23:fe:7c:db:4f:cc:76:0c:58:
83:96:11:af:70:a2:c9:f2:de:a0:95:f8:22:8a:1f:
80:1b:35:d4:5b:a2:af:2b:22:54:75:6f:64:8f:fa:
09:1c:44:3b:2f:42:ca:c0:2e:9e:9f:02:c1:db:8c:
14:10:60:93:6f:ff:ad:87:1d:84:cf:fb:04:4e:9a:
1d:fb:4b:62:a8:e3:6b:b0:5f:a4:fd:1d:6e:88:af:
33:80:af:17:6a:33:dc:18:78:89:32:36:4e:40:9d:
80:28:98:b2:bf:ae:35:b8:d7:8e:54:27:74:98:e1:
c7:fd:ff:80:df:24:90:a7:7e:da:f7:dd:79:f8:79:
e3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E3:24:09:6A:F9:0C:EA:83:DE:EC:42:2B:3F:1C:A0:B2:69:38:3C
X509v3 Authority Key Identifier:
keyid:17:11:80:71:CC:1F:AD:9C:2F:92:A1:22:92:1A:D4:78:B1:34:7B:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FxGAccwfrZwvkqEikhrUeLE0ew4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/5d38bf-634e-464b-b466-e90f16fc6fc4/1/FxGAccwfrZwvkqEikhrUeLE0ew4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:22:16:b1:c7:fe:f4:42:d1:72:1e:fb:a6:c2:eb:88:31:e0:
03:5a:a8:3b:4e:77:10:5c:70:5b:5a:f3:85:c1:84:bc:09:ae:
54:67:aa:ac:f3:4b:92:95:11:43:30:78:8c:36:66:cc:c0:d3:
21:f1:a8:f5:d3:55:a9:20:b1:c0:81:bd:03:b4:f6:af:5d:91:
e7:5f:d2:7e:b8:e1:d6:2c:2b:95:27:38:32:fe:48:be:ff:a2:
b2:f2:c9:10:9a:c9:14:6b:eb:4f:df:a8:0b:f3:39:08:9d:84:
14:af:36:0f:06:61:e0:5f:6b:e5:a7:81:8f:27:9f:40:1e:60:
cc:fb:c9:ab:b1:6d:e4:1b:62:06:00:e1:40:63:06:ed:2c:d3:
97:9d:7a:46:c0:ab:36:78:b1:6a:86:fe:2b:d2:d9:0d:c1:77:
a1:20:a7:a0:0e:ac:ea:6b:f5:2f:cf:d5:1c:f5:3a:58:a5:73:
58:79:5d:ef:ca:08:2b:6c:09:11:25:68:fc:73:ae:6f:4f:19:
b4:c0:dc:49:49:d8:24:c5:52:a8:f6:4e:6f:01:a4:5b:45:ce:
b0:65:d1:18:e5:aa:a4:d0:3c:51:a9:8e:1a:96:97:31:dd:04:
f6:51:a4:85:36:e7:31:ec:e9:2d:bd:74:07:17:85:c0:f4:58:
7b:80:f8:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 09:53:46 2025 by rpki-client