Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
File: FnguRefo6SnFw_lkQafmTFQfguY.mft (raw, json)
Hash identifier: Cfyq4nI+rGQqniJPFGCy6irpGl/bTpFA3f2X9iVW7UU=
Subject key identifier: DC:C3:FA:1E:AE:2D:1B:EB:3F:D7:F0:93:C1:0F:30:23:F8:D4:67:5B
Authority key identifier: 16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
Certificate issuer: /CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Certificate serial: 019683910EF760A0E3B7AC8D31520C496C74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
Manifest number: 0C76
Signing time: Tue 29 Apr 2025 22:00:43 +0000
Manifest this update: Tue 29 Apr 2025 22:00:43 +0000
Manifest next update: Wed 30 Apr 2025 22:00:43 +0000
Files and hashes: 1: FnguRefo6SnFw_lkQafmTFQfguY.crl (hash: yxqc7NUpTwteTdVdkVv8+9Aa0jYJJiHv0iFZsacyDWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 22:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:83:91:0e:f7:60:a0:e3:b7:ac:8d:31:52:0c:49:6c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Validity
Not Before: Apr 29 22:00:43 2025 GMT
Not After : Apr 30 22:00:43 2025 GMT
Subject: CN=dcc3fa1eae2d1beb3fd7f093c10f3023f8d4675b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:82:64:b7:ab:fb:ae:a0:03:17:d3:8f:12:
c3:90:07:50:2d:ba:cb:ba:62:03:c9:08:98:cc:e4:
d3:b9:05:07:8f:fb:32:e6:f7:69:47:06:e8:be:21:
e9:0b:99:12:f1:08:92:38:a0:f0:e8:c5:50:b4:74:
ef:7f:87:a6:06:d1:40:23:86:40:ed:8e:fe:d0:61:
96:28:dd:61:28:c3:08:7f:3a:1c:20:1d:3c:0a:c9:
55:3c:12:1a:dc:04:c3:9a:18:9d:da:c6:9f:99:d6:
c6:79:76:8a:9b:a0:d0:52:f4:79:e9:ba:d9:50:7c:
b9:5a:6c:02:ca:c7:cd:43:83:97:e4:08:07:ac:74:
cf:4e:24:24:7a:5c:48:5c:11:bd:af:b9:6e:b9:a4:
8d:62:2b:e1:ff:86:f0:40:a4:79:ed:cd:9a:f6:dc:
7c:d1:19:34:cd:cc:9e:53:47:d6:dd:2f:54:c3:a3:
fb:86:0c:d1:9f:48:f9:8e:58:19:ba:c3:09:40:74:
3b:b0:a3:45:1f:37:5c:65:50:85:e0:11:79:a6:3d:
17:72:3a:e8:8b:77:6f:3d:7d:c2:a1:e8:b4:91:61:
c9:60:d9:99:00:9f:44:f8:e6:c4:07:d3:45:25:5d:
bc:00:3e:5c:70:8a:35:fa:69:e2:78:3c:14:dc:1b:
63:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:C3:FA:1E:AE:2D:1B:EB:3F:D7:F0:93:C1:0F:30:23:F8:D4:67:5B
X509v3 Authority Key Identifier:
keyid:16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a4:ef:a3:00:e1:6d:ec:cb:04:e6:0e:da:36:dd:b8:f9:60:
a0:de:bc:18:6a:4e:3a:a4:a9:6e:a8:ab:b6:3a:dd:9b:84:40:
66:4c:15:2c:f5:36:86:57:63:bb:7f:0a:19:e1:8e:c2:5c:b9:
0e:b9:3c:e3:48:6e:b7:53:09:84:6b:93:c5:10:ea:93:2e:c1:
de:38:81:81:1e:00:7a:e2:e1:10:26:05:f0:09:0e:67:27:9d:
2d:0f:33:cb:71:96:07:b5:26:fa:73:1a:34:87:79:b5:3d:cb:
95:22:4d:45:ab:82:8c:d6:fd:6f:6c:4a:ca:04:5c:fa:c9:67:
51:83:d3:8b:8e:59:23:92:e5:66:55:e7:57:5e:0f:09:3d:ad:
c9:95:53:2d:22:2b:a5:ad:08:c8:aa:19:89:f1:83:d3:5f:86:
18:8e:14:4e:63:eb:b2:b1:76:58:95:29:a5:3d:5d:6c:13:f9:
7b:34:f6:36:ee:de:be:a7:d5:20:a9:a6:7b:31:75:43:de:fa:
5c:b5:28:a0:8c:10:4a:53:90:36:74:66:86:8a:ed:00:da:7d:
f0:06:d8:9c:f3:d8:49:d0:e1:ca:c9:78:01:36:4c:96:1d:55:
61:39:59:66:73:c8:17:b3:bb:43:e3:09:17:0b:0b:71:15:f8:
54:81:13:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 03:32:08 2025 by rpki-client