Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
File: fKnhWNylWE83ofg0myiaaBLbkko.mft (raw, json)
Hash identifier: q0GwOSW9THZv/CfX9njcYHRyj7xxQFwWwWmvmEurK6k=
Subject key identifier: DB:79:20:E1:90:D4:EE:26:61:01:EB:36:8F:D5:A9:AA:CE:30:40:8A
Authority key identifier: 7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A
Certificate issuer: /CN=7ca9e158dca5584f37a1f8349b289a6812db924a
Certificate serial: 01977263DE94DA09E1337C5B5937103B4582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
Manifest number: 07FB
Signing time: Sun 15 Jun 2025 07:00:36 +0000
Manifest this update: Sun 15 Jun 2025 07:00:36 +0000
Manifest next update: Mon 16 Jun 2025 07:00:36 +0000
Files and hashes: 1: fKnhWNylWE83ofg0myiaaBLbkko.crl (hash: 3dmBBc4jAsEsVSBONF7nXcyL3IAC+R0ydq7kIxDgm/M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:63:de:94:da:09:e1:33:7c:5b:59:37:10:3b:45:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca9e158dca5584f37a1f8349b289a6812db924a
Validity
Not Before: Jun 15 07:00:36 2025 GMT
Not After : Jun 16 07:00:36 2025 GMT
Subject: CN=db7920e190d4ee266101eb368fd5a9aace30408a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ed:21:04:48:9f:d4:bc:95:05:49:2e:ab:fb:
64:a1:a3:06:d9:6f:a0:d3:3f:fd:aa:df:fd:a2:d8:
c7:26:e3:0d:0a:05:36:ee:1c:35:cf:5c:71:e1:08:
d6:5f:fa:4e:cb:8a:54:bd:55:1f:46:57:14:41:41:
b7:98:cd:d3:7a:22:2e:9d:1e:ca:e8:5b:08:26:ad:
34:51:c4:29:d3:a0:4f:52:70:a0:ab:7e:0d:bd:16:
36:14:14:17:99:06:14:a8:9a:cc:d6:fd:a5:6d:d4:
0f:d3:4b:4f:e8:70:8a:c9:79:cb:0a:08:58:51:42:
0c:84:b0:b9:3b:d9:7c:f9:31:31:ef:27:0a:f0:cc:
54:ec:40:8e:c5:f1:03:cf:12:87:a7:72:5c:37:76:
2b:a8:44:5f:80:eb:92:2b:6f:68:fe:9f:ec:7e:6d:
f3:77:5c:26:da:ca:3e:ce:3f:e4:93:bf:ee:18:4b:
08:a6:c8:4c:56:43:e7:54:ba:94:21:62:41:2e:02:
f4:40:29:67:9d:f9:02:97:04:a9:ac:f9:be:1b:20:
93:0e:c5:20:c1:46:34:1a:d9:fc:50:9b:15:9f:58:
47:75:67:82:c2:47:8f:1b:28:33:7b:51:6d:5c:26:
b6:c3:9c:8c:16:11:06:5f:54:36:6a:bd:d5:12:ac:
d3:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:79:20:E1:90:D4:EE:26:61:01:EB:36:8F:D5:A9:AA:CE:30:40:8A
X509v3 Authority Key Identifier:
keyid:7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b4:63:18:c9:98:6b:b8:d6:6e:08:89:14:ee:cc:8d:6a:56:
e9:25:c9:37:e8:07:e5:5f:43:4d:ca:a4:82:9b:e9:45:ae:0f:
ca:eb:93:6d:71:a2:50:06:e6:55:08:28:ff:e9:f3:0b:56:5f:
55:cc:37:d4:d0:3b:ab:95:71:89:1c:bb:91:42:e6:39:ca:fb:
42:57:a5:07:26:52:b6:1f:ca:cc:27:d2:c8:55:8f:71:e7:88:
84:d6:a3:8f:c3:e2:9c:e6:c2:12:06:97:d1:c0:a4:13:2a:7d:
40:09:de:d4:90:20:8c:41:a6:72:af:70:c9:d7:d0:73:38:2d:
72:d9:98:b1:ae:fb:60:f9:d8:d1:61:3a:58:55:09:d7:40:de:
75:68:52:68:9b:54:e0:de:5b:e9:0a:7b:43:31:0f:c1:d0:55:
9b:0e:17:81:f7:eb:3e:c0:58:2c:c0:1e:2b:e7:31:f5:7a:27:
13:38:3c:39:dc:25:1c:df:51:6a:e8:05:d2:15:a4:17:03:b3:
f5:1d:a1:ff:06:a1:71:f2:e2:eb:18:c2:93:70:35:44:78:6f:
59:97:a7:63:a5:ee:ae:cf:f5:d1:1d:75:6f:9b:a6:bc:79:e1:
f2:95:9c:1e:c9:cc:69:4e:b3:10:9d:a4:4f:60:6e:4f:01:80:
e1:b1:10:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 15:35:55 2025 by rpki-client