Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
File: FnguRefo6SnFw_lkQafmTFQfguY.mft (raw, json)
Hash identifier: /8GBYJPz0W3XmBFR88zztCTyGUbXa7+ZE2Kd1MWbiME=
Subject key identifier: 7E:0B:41:9A:45:AB:DB:F2:02:D9:96:F7:88:A0:8F:9F:CE:88:DD:C9
Authority key identifier: 16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
Certificate issuer: /CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Certificate serial: 0197B6A0F4A3340FA523DA3C4678F2CA86F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
Manifest number: 0D15
Signing time: Sat 28 Jun 2025 13:01:30 +0000
Manifest this update: Sat 28 Jun 2025 13:01:30 +0000
Manifest next update: Sun 29 Jun 2025 13:01:30 +0000
Files and hashes: 1: FnguRefo6SnFw_lkQafmTFQfguY.crl (hash: dfAzjapzm8lkO8zCJEOK30PUhfPVQB9FAZ14nS7j3qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f4:a3:34:0f:a5:23:da:3c:46:78:f2:ca:86:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Validity
Not Before: Jun 28 13:01:30 2025 GMT
Not After : Jun 29 13:01:30 2025 GMT
Subject: CN=7e0b419a45abdbf202d996f788a08f9fce88ddc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:49:32:65:b0:6e:cd:15:8f:9f:e9:26:0c:a8:
49:24:d1:f4:d7:0e:65:b2:df:9d:cf:fa:bc:ef:e7:
fe:71:83:fd:5a:96:bf:2d:79:3e:e5:ee:d3:cf:6f:
70:59:e2:5c:d0:7a:bc:d9:1b:ea:0f:7b:cb:a5:de:
de:51:67:a6:01:25:1c:4c:09:03:e5:b6:69:dc:e5:
3b:fd:4b:9f:ee:76:e1:54:ca:e7:72:19:c6:13:dc:
cd:79:32:6a:5a:be:73:f7:3c:36:44:a6:53:ad:35:
30:a3:75:67:23:c9:f0:2d:7a:08:7a:9b:43:f0:8f:
5a:f1:95:44:69:44:f4:cc:e8:6b:60:c6:d0:45:3f:
3a:93:21:46:f5:53:b8:78:38:fc:11:dc:7b:ee:fa:
37:4f:9b:cb:0e:c9:d0:2f:db:ee:00:d0:7f:f7:81:
56:cb:43:5b:d2:5e:5b:4b:80:c4:7e:ff:b6:f7:18:
c4:4b:21:47:21:17:82:29:34:ff:7f:35:db:b0:4b:
6c:08:c0:ae:6f:35:65:8c:10:27:0a:3e:b5:72:43:
89:58:79:76:fa:fd:5b:8c:86:dd:b9:7f:aa:a8:cc:
e9:42:8d:d7:68:cf:7e:c3:3c:1c:87:51:82:f3:ef:
67:1f:3b:5d:9b:13:16:31:44:a5:d2:69:e8:5c:90:
e2:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0B:41:9A:45:AB:DB:F2:02:D9:96:F7:88:A0:8F:9F:CE:88:DD:C9
X509v3 Authority Key Identifier:
keyid:16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:91:bd:e4:17:e8:5b:5a:64:d7:fc:c7:96:1e:e3:b7:f3:22:
a6:50:ad:7f:46:60:bb:23:49:ef:db:b1:50:ec:64:a9:85:02:
a3:85:a0:73:b0:66:ff:ad:66:36:a1:85:c2:73:05:18:50:d6:
c4:fe:86:1e:54:10:32:4b:38:70:ec:7e:1e:9e:57:74:be:d5:
68:53:d9:e3:32:cb:79:f7:f8:a0:e6:cc:e7:71:2c:5b:ee:bc:
61:7c:61:60:e1:ee:b7:fb:75:f2:0e:3d:cc:6a:8d:13:22:f0:
37:d9:61:a7:12:0c:23:df:f5:ec:e0:ba:11:15:54:71:1c:45:
51:e2:5b:9d:7f:0b:ed:19:4e:18:c4:5b:6a:7c:d2:8d:8f:3f:
db:b5:1b:50:04:a2:22:5a:20:46:8f:68:29:ad:57:71:fe:8e:
67:3b:c3:e0:26:2a:95:a7:89:10:4f:6e:05:da:d9:a5:83:3c:
91:82:47:a9:05:81:d5:19:20:07:3d:1d:d6:90:50:e5:3a:58:
07:ae:eb:b8:6d:be:ee:95:07:c4:09:c4:d7:e2:d6:8d:02:26:
2c:dd:10:53:ab:72:35:66:60:ce:32:cb:be:79:cf:73:18:27:
98:21:ca:f2:51:66:ff:7b:ad:1c:dc:a6:45:b8:6b:56:b3:8b:
2a:1f:d8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:45 2025 by rpki-client