Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft
File: FvAucKZVP_DGZROe5VZxyGBlgIE.mft (raw, json)
Hash identifier: BqFkRx3rxGI7apWCMr4Wt8NLtARWbQ3DdGqqc/zgIrY=
Subject key identifier: DC:59:F9:C6:11:12:DA:61:D6:C6:3C:40:78:3A:95:F1:61:98:B2:E8
Authority key identifier: 16:F0:2E:70:A6:55:3F:F0:C6:65:13:9E:E5:56:71:C8:60:65:80:81
Certificate issuer: /CN=16f02e70a6553ff0c665139ee55671c860658081
Certificate serial: 0197688502974053FA345AB4C09F428156C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft
Manifest number: 1588
Signing time: Fri 13 Jun 2025 09:00:36 +0000
Manifest this update: Fri 13 Jun 2025 09:00:36 +0000
Manifest next update: Sat 14 Jun 2025 09:00:36 +0000
Files and hashes: 1: FvAucKZVP_DGZROe5VZxyGBlgIE.crl (hash: IrCNZ6thnZvGFt2kkyZ8LOZ+gq4Bhp2Tsb6HAYHaWN4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:02:97:40:53:fa:34:5a:b4:c0:9f:42:81:56:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16f02e70a6553ff0c665139ee55671c860658081
Validity
Not Before: Jun 13 09:00:36 2025 GMT
Not After : Jun 14 09:00:36 2025 GMT
Subject: CN=dc59f9c61112da61d6c63c40783a95f16198b2e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d6:0f:f6:75:12:bc:c5:97:34:74:28:ef:26:
fb:05:4a:0b:bd:ef:21:56:ec:be:06:73:af:c8:f9:
82:90:98:6e:29:75:a5:a4:af:83:5a:26:1c:02:84:
cd:f8:a2:f2:83:d9:63:b3:74:fe:cd:0b:70:3b:91:
9d:ea:84:fd:5c:80:7c:39:26:29:cb:85:87:e6:06:
d0:04:72:64:da:18:82:0d:f5:bb:48:17:cf:23:87:
fd:a0:18:8d:ca:8e:0d:2a:5d:8a:96:9c:82:d0:bd:
9f:08:31:d1:2e:d7:54:61:b2:a3:a6:61:57:29:f9:
e5:9b:8d:a9:7c:75:18:b3:77:af:0a:e1:c3:2e:f6:
6d:33:79:5f:24:1c:9c:73:0b:50:ff:73:0e:89:0b:
a3:74:6f:39:24:af:5c:74:13:e9:3d:15:6e:03:07:
20:24:9b:ac:0d:ec:d5:5d:0e:73:e8:44:16:fc:1c:
8d:e4:c0:af:5a:fd:7f:1d:66:c9:a0:39:a1:c1:33:
b9:f9:11:c5:37:e6:31:c3:db:1c:60:92:84:a3:10:
d1:8f:84:09:5b:14:ca:72:1d:d9:a8:f2:4d:27:6f:
cc:8d:d3:0f:d1:49:61:ac:18:9e:13:8b:5e:4c:e3:
c2:32:3c:6d:84:1e:3a:d5:40:5f:78:78:83:92:22:
53:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:59:F9:C6:11:12:DA:61:D6:C6:3C:40:78:3A:95:F1:61:98:B2:E8
X509v3 Authority Key Identifier:
keyid:16:F0:2E:70:A6:55:3F:F0:C6:65:13:9E:E5:56:71:C8:60:65:80:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FvAucKZVP_DGZROe5VZxyGBlgIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/9383b5-7083-4cc3-9e69-97f6f2a39626/1/FvAucKZVP_DGZROe5VZxyGBlgIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:84:81:fc:a9:2c:69:7b:2e:be:1a:6f:d6:cc:9a:ce:fb:cf:
08:50:2a:7f:89:43:e1:d8:37:85:a8:8b:d7:78:72:52:c0:89:
f4:b7:8b:bc:db:cb:0f:27:2f:74:c4:ea:97:ea:a2:96:9a:ff:
5a:86:8c:e7:e1:3d:10:63:65:ae:29:9e:f9:62:c6:3b:f6:6d:
7a:fe:99:e1:d8:c1:cd:24:10:5c:02:e4:7b:23:27:5c:12:a2:
7b:c6:c0:86:60:96:29:90:e7:05:69:a4:c3:c1:e9:b9:ea:50:
5a:56:d3:38:3e:b2:4f:b2:c7:67:7f:7b:a2:66:f2:61:3a:bb:
7b:97:01:36:bb:cd:02:68:e7:12:af:93:db:0a:88:57:e8:32:
20:a1:85:48:e3:62:ba:66:16:e2:06:08:a5:ee:4b:42:25:11:
89:fc:b7:b9:8b:3e:9b:d1:e8:a6:3d:bd:ae:16:64:84:52:16:
4d:1c:4a:50:f7:2c:10:fd:bd:f7:8f:a2:82:36:3a:3b:cd:3f:
d7:55:1f:47:25:4b:d9:b5:10:4a:05:62:28:28:93:97:03:dd:
69:0b:48:a3:82:a1:03:85:1b:06:29:6c:2f:ac:94:e1:0f:7d:
a6:e3:d8:a4:d5:d1:a9:d4:b8:28:67:f1:c5:42:71:39:9d:8b:
ea:fe:98:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:49 2025 by rpki-client