Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
File: FnguRefo6SnFw_lkQafmTFQfguY.mft (raw, json)
Hash identifier: 8YdYViVC6LPpPVNnMcdp2WVxlWdDIX1Sv13KSUxkebQ=
Subject key identifier: 43:80:AE:0C:E7:ED:55:5E:0D:F0:01:37:6B:87:13:E7:C4:3F:09:AD
Authority key identifier: 16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
Certificate issuer: /CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Certificate serial: 0198D660C2C7E56BF5FA91E2012C43114207
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
Manifest number: 0DAA
Signing time: Sat 23 Aug 2025 10:02:02 +0000
Manifest this update: Sat 23 Aug 2025 10:02:02 +0000
Manifest next update: Sun 24 Aug 2025 10:02:02 +0000
Files and hashes: 1: FnguRefo6SnFw_lkQafmTFQfguY.crl (hash: MM/KE5sh99PPpHFq5C0yqiOJF58VGSptnZ8TQasQQPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:c2:c7:e5:6b:f5:fa:91:e2:01:2c:43:11:42:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Validity
Not Before: Aug 23 10:02:02 2025 GMT
Not After : Aug 24 10:02:02 2025 GMT
Subject: CN=4380ae0ce7ed555e0df001376b8713e7c43f09ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:10:f1:d3:9c:16:5f:1c:8b:c6:7b:95:16:77:
7d:3e:47:8e:08:00:55:7e:98:2b:fe:3a:63:b9:bb:
50:3b:ba:9f:1d:9e:75:4a:5b:c4:ac:78:64:8d:9c:
32:93:07:82:dd:b7:54:d8:e6:77:1a:8a:2b:17:e4:
b2:68:76:35:73:6d:84:2c:e1:16:30:02:ad:85:a9:
7f:f7:db:b9:c8:b2:c2:4f:9c:44:d3:6b:cd:18:ab:
ec:6a:7c:ab:72:b7:df:1a:e7:91:f2:23:f0:ff:3e:
28:b1:0f:86:54:8f:b8:19:2d:04:e7:b1:b3:67:2e:
eb:f9:0e:50:08:b3:0e:9d:97:2e:a9:2d:4d:7a:00:
f7:eb:21:49:99:e6:bf:90:a9:18:03:4f:d3:c1:98:
03:6c:5c:50:1e:5d:a9:61:b8:4f:e1:37:ef:df:0e:
4f:0e:07:5c:0a:5e:78:0e:df:03:54:a0:6e:4f:bc:
fd:5c:f8:4c:76:12:99:fd:fa:45:47:c7:5b:da:f7:
e5:f2:65:ca:67:84:46:4e:62:03:86:32:71:2b:9d:
dc:1b:17:2e:a1:75:ed:32:32:9d:45:63:7e:43:0f:
f7:03:1a:ec:71:bb:d9:f8:87:76:3e:20:9c:c2:df:
ee:6b:7b:57:c3:ea:f0:c0:b7:27:a3:57:96:6f:e9:
8d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:80:AE:0C:E7:ED:55:5E:0D:F0:01:37:6B:87:13:E7:C4:3F:09:AD
X509v3 Authority Key Identifier:
keyid:16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:f8:47:14:5a:97:a1:af:88:76:9c:98:e5:59:f3:c0:9d:50:
a9:c2:28:3b:5b:63:0c:27:6c:c1:4a:ca:a0:09:9d:aa:f4:26:
10:50:54:71:ab:ea:ac:3b:18:c1:0a:5d:97:2a:9b:f0:0b:0e:
07:7f:54:2a:f6:81:4c:6c:1f:ff:83:29:c3:b6:e1:4c:7f:36:
1f:b0:96:b0:17:d3:c7:33:e6:a8:ee:08:95:0d:be:a9:b0:0e:
ef:be:a5:31:81:85:fa:87:6c:54:5c:d4:1f:45:3a:bf:4f:95:
ff:d6:c1:c8:65:37:3f:61:fc:a8:d2:bd:f8:89:13:93:04:02:
02:c5:12:4f:d8:e4:8e:fe:e6:00:8e:d3:5a:39:45:9b:bf:63:
70:85:39:8c:2f:2d:28:0b:18:5a:01:b3:f1:a5:d3:f7:d7:44:
05:57:a9:37:76:54:ee:54:5e:15:a5:d9:a7:d1:bd:f9:de:04:
a6:46:f5:1b:c9:f9:7b:76:98:3d:af:16:6b:81:64:84:52:03:
75:02:36:0e:74:d4:a3:e5:e2:ac:ba:a7:6d:7b:fd:11:19:28:
44:ed:89:a3:bd:b9:cd:4e:33:73:49:e8:fe:e5:c0:c8:98:ca:
ab:96:51:78:16:fb:79:78:e5:81:39:2f:7a:4b:f8:8e:46:08:
1e:75:4f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:46:09 2025 by rpki-client