Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
File: FzUV9MhBcBT4hBX20EqfcAP8CyI.mft (raw, json)
Hash identifier: WCBHjs19ag11T3IBoRjmpFWKBVEFz5zcYFRvlK7dKJU=
Subject key identifier: 5C:28:16:A5:AC:5D:BD:F2:F3:DD:E8:26:A4:E6:90:08:83:2C:89:45
Authority key identifier: 17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
Certificate issuer: /CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Certificate serial: 019769613F9ADFDEE71BDA7D42DC0461DE6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
Manifest number: 5E
Signing time: Fri 13 Jun 2025 13:01:10 +0000
Manifest this update: Fri 13 Jun 2025 13:01:10 +0000
Manifest next update: Sat 14 Jun 2025 13:01:10 +0000
Files and hashes: 1: FzUV9MhBcBT4hBX20EqfcAP8CyI.crl (hash: aJAr/gEN3lh75BUQ4f9bE+rf25VIkZsaWN/ueN3VHgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:3f:9a:df:de:e7:1b:da:7d:42:dc:04:61:de:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=173515f4c8417014f88415f6d04a9f7003fc0b22
Validity
Not Before: Jun 13 13:01:10 2025 GMT
Not After : Jun 14 13:01:10 2025 GMT
Subject: CN=5c2816a5ac5dbdf2f3dde826a4e69008832c8945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f3:36:ee:7d:70:9b:0a:a7:22:de:c2:3b:ac:
ab:6e:59:e3:a0:11:5d:7f:a9:bb:46:78:d9:cc:cf:
99:6d:ea:3e:4d:86:8b:be:7f:60:ad:c3:05:c8:0d:
03:df:73:a4:18:4b:be:9d:a9:76:03:3b:1b:27:75:
67:e4:de:9b:aa:51:dc:93:09:43:ec:90:64:e0:bc:
e4:65:8f:22:92:df:e6:39:67:4d:93:2f:a1:57:29:
1a:f2:54:88:bb:9d:6b:96:31:18:28:8d:3b:85:64:
39:6f:ec:3d:23:b9:d1:0b:6f:43:5b:7e:1f:12:60:
d4:8b:ce:d1:8e:db:80:6a:55:6f:18:94:e2:ee:0c:
38:bd:ff:0d:2e:90:43:6e:28:7c:7f:d7:df:e5:dd:
b2:8b:bc:18:0d:80:e8:04:04:17:4d:5c:0a:d6:ea:
db:6d:ee:0b:b6:7e:d8:cf:80:73:87:9e:96:76:d9:
3c:7c:37:b2:41:fe:bc:e8:e7:f2:c2:8a:55:cb:fb:
ab:cc:de:b8:50:81:00:25:89:aa:b7:61:e2:7b:8f:
8a:68:7d:ce:b1:bf:46:b0:93:29:88:4b:ea:47:c9:
3c:53:6b:09:a1:a0:30:38:d3:65:6d:88:28:cd:a8:
35:34:fc:a9:99:4f:8c:fd:9d:99:68:5a:44:8c:46:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:28:16:A5:AC:5D:BD:F2:F3:DD:E8:26:A4:E6:90:08:83:2C:89:45
X509v3 Authority Key Identifier:
keyid:17:35:15:F4:C8:41:70:14:F8:84:15:F6:D0:4A:9F:70:03:FC:0B:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FzUV9MhBcBT4hBX20EqfcAP8CyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d4d439-b659-4d7e-b9f7-18264cb78b4c/1/FzUV9MhBcBT4hBX20EqfcAP8CyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:50:cc:52:c2:e3:b8:d7:9b:89:51:9c:9e:f4:dc:2f:52:9a:
c8:9f:a3:93:25:55:7c:2c:c1:23:e2:2b:14:a7:3d:80:aa:a1:
6e:5b:38:d5:b8:1a:5a:63:28:e1:46:8f:c8:ac:b2:a5:cd:e6:
56:a0:6d:e1:91:6e:8d:5c:f8:21:ea:8c:93:18:52:13:4d:74:
52:3a:f8:f6:93:9d:ae:d6:e4:6a:e0:7d:14:61:ea:c3:73:3a:
0e:6a:09:1d:af:45:d0:0e:7d:a4:78:4e:78:3c:44:fc:01:91:
5f:30:18:50:5c:dd:cd:a9:5f:c8:67:38:8d:36:f8:13:13:9f:
d1:05:dd:c2:74:1a:1a:38:aa:01:4e:64:d6:9c:f4:92:20:c3:
a6:c6:97:db:16:2b:80:60:03:f1:24:e3:82:db:37:f7:99:a8:
3c:73:39:47:38:6e:6e:1d:7d:13:d7:21:70:a3:a5:c6:d5:ca:
4c:8b:64:1e:56:2f:71:31:02:1f:72:e4:02:3a:0a:08:ed:20:
ec:84:fb:8c:4a:17:9e:f9:62:0d:de:bd:93:a3:b5:b9:0b:66:
c0:be:98:77:74:c1:e3:39:02:a1:45:88:ec:ad:7c:1e:75:50:
0a:39:90:fc:72:0e:cd:e2:41:33:2f:cc:0c:3d:f4:7c:d1:8c:
c2:99:b9:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:04 2025 by rpki-client