Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
File: FMFDiPKGLX4nqH_m9gHjTzRXI04.mft (raw, json)
Hash identifier: ctaBfypIakPt6HjLl6xu0xFVAdqkBxEfXsw0iKrVNg4=
Subject key identifier: 80:6E:59:F2:3E:4C:8C:0F:90:7D:CB:94:2C:24:60:EB:C9:05:F8:BF
Authority key identifier: 14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
Certificate issuer: /CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Certificate serial: 01976BBD671C2478242A7AFE774DE7BC409A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
Manifest number: 0A07
Signing time: Sat 14 Jun 2025 00:01:04 +0000
Manifest this update: Sat 14 Jun 2025 00:01:04 +0000
Manifest next update: Sun 15 Jun 2025 00:01:04 +0000
Files and hashes: 1: FMFDiPKGLX4nqH_m9gHjTzRXI04.crl (hash: aGFOwMQnEVu2uYs51ZyGjocUQPnnrNbLUvr7c2sfj+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:67:1c:24:78:24:2a:7a:fe:77:4d:e7:bc:40:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Validity
Not Before: Jun 14 00:01:04 2025 GMT
Not After : Jun 15 00:01:04 2025 GMT
Subject: CN=806e59f23e4c8c0f907dcb942c2460ebc905f8bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f7:bf:2b:82:98:61:75:ea:1a:b8:e0:c3:cd:
1e:14:a7:ae:3b:79:13:5b:d0:08:ef:af:f2:d3:7b:
30:25:47:d1:3e:07:dc:0a:71:67:3d:a5:dd:63:5b:
e9:8d:f6:ab:cd:8d:05:09:83:7d:1e:e5:71:b9:5a:
2f:f8:5f:94:3b:52:8f:24:fb:ea:09:6f:82:31:be:
c8:57:b3:b3:44:2b:56:2f:ab:5a:a9:1d:d6:e5:e0:
1e:2a:75:89:f2:ba:5c:44:b2:6b:03:90:1b:f7:13:
ea:04:68:29:47:d8:8a:fa:9a:4a:80:1c:23:f1:4f:
6d:ea:61:f6:4e:cd:40:4f:64:a1:58:1e:d6:5d:ae:
1d:4b:2c:34:3a:d9:c9:16:34:f3:8c:b4:28:5f:e0:
d1:83:6f:4c:04:46:c1:81:21:c6:b9:44:07:7e:65:
0a:8a:f0:da:a5:16:da:dd:05:06:48:20:95:3c:12:
52:f2:a6:95:e8:a4:27:25:8b:92:ac:33:a1:00:ca:
95:88:17:cf:b9:d1:50:51:f9:da:ba:08:0f:00:0a:
9d:4b:6f:4c:79:6b:07:3b:89:d9:92:d7:10:2f:86:
d3:be:85:fe:e7:cf:4d:5a:ae:82:3d:fe:c2:0d:f6:
03:a2:d9:b9:65:2a:f5:02:ba:30:35:14:16:54:c3:
d2:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:6E:59:F2:3E:4C:8C:0F:90:7D:CB:94:2C:24:60:EB:C9:05:F8:BF
X509v3 Authority Key Identifier:
keyid:14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:90:55:1b:ee:51:92:16:f6:d0:52:90:90:25:a0:6c:82:46:
c0:68:b2:23:9f:54:f1:0b:84:52:10:45:20:6e:a7:42:d6:87:
0a:8d:b7:4d:f4:04:c7:27:a0:de:2d:b0:aa:4f:27:60:2f:0e:
74:66:93:97:fd:5f:fb:b5:ac:4b:c9:4e:e7:58:b9:59:b5:c9:
59:27:13:a9:58:00:73:35:c1:f1:70:a1:50:54:c1:3d:5b:34:
b4:25:ee:06:03:87:20:21:69:b6:31:81:8f:53:6c:fb:1e:0e:
a4:a0:f0:53:a6:f4:b4:ba:5f:d1:fb:07:3a:44:7b:e6:5a:a6:
6b:c6:14:1f:4c:8e:e6:cf:48:8f:9f:4b:d8:bd:55:fb:bc:66:
29:27:4b:af:53:29:f9:0d:ca:f4:56:bd:88:fa:3e:4d:1c:b6:
71:94:70:c5:a9:65:05:ff:57:3a:7a:01:ea:06:5e:e4:92:0f:
70:f5:3d:df:81:23:72:19:b2:2b:40:b2:c3:28:88:ae:5b:4b:
99:54:7e:39:4b:e7:0f:fa:43:d8:8b:8c:f7:61:47:9d:96:9f:
4c:cc:91:21:37:f6:32:17:8e:8b:76:fe:12:8d:0d:ce:7b:d1:
ff:0d:07:2f:00:93:a6:00:67:5b:22:93:7e:02:c3:88:14:1f:
ca:50:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:14:41 2025 by rpki-client