Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
File: FK_dm9_GCroGLnxVwq4ukYoynMo.mft (raw, json)
Hash identifier: tw6gSY8kkBbZCqfkvzf0m13Hxj3TXd3okFtuP5/4co4=
Subject key identifier: 17:29:58:E7:5D:59:B7:7A:B6:FE:E9:4C:82:2E:37:A0:5C:D0:C7:B8
Authority key identifier: 14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
Certificate issuer: /CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Certificate serial: 01976F62FE2EAE4CAA7363BDFF417840AE57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
Manifest number: 09A2
Signing time: Sat 14 Jun 2025 17:00:47 +0000
Manifest this update: Sat 14 Jun 2025 17:00:47 +0000
Manifest next update: Sun 15 Jun 2025 17:00:47 +0000
Files and hashes: 1: FK_dm9_GCroGLnxVwq4ukYoynMo.crl (hash: h2AldDU/BQh3SiUiie8BaM8hdlnGdpIv7oTLrYjL5cw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:fe:2e:ae:4c:aa:73:63:bd:ff:41:78:40:ae:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Validity
Not Before: Jun 14 17:00:47 2025 GMT
Not After : Jun 15 17:00:47 2025 GMT
Subject: CN=172958e75d59b77ab6fee94c822e37a05cd0c7b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:08:1e:74:4f:34:55:7f:95:4b:9f:c0:ce:b0:
c7:18:9b:bf:6d:5b:94:ca:54:40:6d:2b:ef:4d:18:
ba:f1:3f:18:33:e1:58:74:b4:62:56:ea:e8:cc:e2:
c3:7c:57:52:6b:04:32:0c:82:ef:b3:98:8e:84:c3:
f5:fb:d7:a6:75:57:79:d0:39:5d:f8:b4:b6:ce:f7:
3c:00:cd:17:4d:2a:41:c1:df:b1:6b:57:92:bb:8e:
ba:4e:01:c1:b1:11:7e:94:e3:60:ed:e5:98:e0:eb:
c7:73:4e:0c:4a:b6:ad:d9:3a:6b:56:1f:77:2e:b0:
2b:ae:a3:0d:11:c8:36:61:9d:17:81:5a:cf:5b:05:
2f:0b:ba:3e:d9:87:32:5c:ee:e8:f7:fe:d6:9e:2a:
f9:22:d5:1a:de:ac:7c:90:3f:4f:63:b5:f7:94:44:
6c:0d:ae:40:de:10:13:8b:88:d7:74:78:4e:f6:25:
39:fe:f8:68:8e:e3:91:8d:19:94:2d:68:b1:04:4f:
b0:05:c0:b6:32:d8:bf:98:75:92:fd:bc:bb:b8:56:
fa:96:34:e3:b5:92:96:cb:6e:7a:22:fc:a6:11:37:
02:f7:83:a0:b9:53:f2:eb:b1:8e:80:ea:48:80:25:
8a:28:9f:1a:f2:5e:fc:6c:4d:73:eb:d8:ff:c9:7e:
6e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:29:58:E7:5D:59:B7:7A:B6:FE:E9:4C:82:2E:37:A0:5C:D0:C7:B8
X509v3 Authority Key Identifier:
keyid:14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:0d:57:86:c1:eb:4f:fa:c3:64:78:99:91:91:ba:dd:02:fc:
fe:52:eb:7e:bc:99:3e:4c:0d:f5:b3:7c:3d:b5:34:5e:08:18:
9d:18:75:04:54:58:7c:93:25:41:1c:34:e5:4e:15:1b:cf:51:
59:7d:ce:95:23:a4:23:df:96:54:87:08:93:53:3e:8b:18:10:
d3:4d:0f:63:46:58:54:5d:fb:56:50:e6:b3:55:c6:2c:c8:91:
2e:e3:72:db:5a:5c:af:55:32:06:8e:ea:ac:75:a8:f3:46:43:
0e:ed:ed:d3:c1:0c:3c:f0:a4:24:4c:dc:1f:39:a2:39:c0:2c:
cb:dd:c0:8f:4c:46:e2:18:09:55:0f:63:c1:af:96:b3:78:bc:
d3:3b:fd:db:ac:0e:77:29:a2:6c:32:16:2d:13:17:68:0e:01:
49:4b:15:e0:44:73:3e:30:10:27:16:12:9a:d5:fb:b6:d5:1f:
be:3b:a5:c7:4a:e8:0a:94:11:ad:7c:4e:d2:f8:13:d6:71:3b:
59:2c:f9:bc:d0:64:0c:19:ba:20:58:e4:b5:95:a1:4d:72:93:
54:3b:b5:fe:fd:af:26:73:6b:cc:84:12:9f:32:b0:e1:b5:91:
e5:66:58:e4:b3:9d:01:75:bc:dd:ab:29:e9:d2:25:8e:ea:21:
fb:a3:83:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:03:09 2025 by rpki-client