Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
File: FnguRefo6SnFw_lkQafmTFQfguY.mft (raw, json)
Hash identifier: WBgkRIaWKEHZl0cGpQoV13Fc8yyDulZLWDY4YGbsaCQ=
Subject key identifier: 19:4E:94:A4:8E:50:4E:73:7F:68:6A:16:06:6A:AB:EA:0D:5D:4B:EB
Authority key identifier: 16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
Certificate issuer: /CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Certificate serial: 0196C34B472C7BDB2CAE7E2AA5ED83116543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
Manifest number: 0C97
Signing time: Mon 12 May 2025 07:00:12 +0000
Manifest this update: Mon 12 May 2025 07:00:12 +0000
Manifest next update: Tue 13 May 2025 07:00:12 +0000
Files and hashes: 1: FnguRefo6SnFw_lkQafmTFQfguY.crl (hash: qZItm+CBHfe5KNywXHAzaMq9ka9tHuEJDGnOzhWsKOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 May 2025 07:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:c3:4b:47:2c:7b:db:2c:ae:7e:2a:a5:ed:83:11:65:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Validity
Not Before: May 12 07:00:12 2025 GMT
Not After : May 13 07:00:12 2025 GMT
Subject: CN=194e94a48e504e737f686a16066aabea0d5d4beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ee:58:65:cc:45:2e:3c:25:6d:a5:06:9a:d4:
47:34:c0:5f:be:99:51:42:2e:71:31:6d:f6:39:68:
54:89:73:6c:e6:ec:ce:d5:14:ba:6e:8a:4b:b7:3c:
be:ea:32:bd:7d:ca:15:e1:b9:84:1d:f1:20:04:c9:
8a:32:b6:d4:89:41:b3:7b:0d:cf:56:1a:35:d9:1e:
84:b0:c7:ed:ca:2d:e7:45:a4:c7:ff:0d:35:d2:ee:
a3:db:3e:9a:f1:1f:ac:c6:a3:ee:49:de:a8:5f:9c:
28:04:da:c8:03:9e:29:71:49:1c:2e:2d:8f:99:fa:
d1:99:45:61:e5:6b:4c:f5:2b:6f:bb:2b:78:d8:cc:
0a:be:f6:16:c0:03:82:9a:d9:c4:71:1b:63:0b:5f:
d8:06:72:77:3e:c8:7d:7a:4b:31:c1:34:7f:5a:69:
90:02:88:44:90:4a:32:dd:cb:8c:29:e0:14:25:82:
1c:5a:d1:9f:12:ce:ab:31:db:43:b9:bc:a3:42:25:
26:97:09:e5:10:5e:ce:13:44:69:05:de:d8:ff:45:
42:7a:ae:bd:5a:90:91:80:8c:f5:ae:28:f3:f6:32:
74:8a:f1:ba:b0:5e:0d:96:8b:91:8d:cd:74:30:b7:
02:bf:fe:b5:10:af:87:36:5d:ae:8e:54:9b:50:66:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:4E:94:A4:8E:50:4E:73:7F:68:6A:16:06:6A:AB:EA:0D:5D:4B:EB
X509v3 Authority Key Identifier:
keyid:16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b2:f1:05:7f:ba:15:d1:61:d4:36:fc:ce:ea:03:80:03:fb:
a6:c8:77:5c:34:7b:18:62:f6:d2:3d:e8:85:2f:d8:21:42:c9:
10:c3:cd:37:a6:b5:06:fc:d9:74:10:2e:d9:04:cf:b3:e6:ed:
7a:f4:f6:57:32:4c:9b:1d:02:ab:38:2f:d2:8f:ab:94:27:1b:
f7:76:04:25:10:c7:45:12:24:75:29:58:72:0b:1a:29:c2:1e:
dd:ce:cd:bd:57:18:b0:f8:7c:cc:09:3d:d2:5f:56:a9:cb:ca:
3f:4b:69:0b:e2:98:7c:0b:dd:6c:68:8b:f2:60:21:18:53:e1:
81:d8:16:19:36:57:c5:ef:03:53:20:13:a1:ef:b3:98:17:80:
87:c8:04:8f:70:02:cb:00:a7:56:f3:27:e1:43:2a:ba:62:1e:
0a:c2:6b:13:6c:d7:8b:2e:09:d5:4c:2f:68:c5:46:4a:b7:72:
43:0e:09:c5:09:2a:f9:c8:c3:ac:e8:08:36:43:f2:46:69:26:
02:12:74:6b:00:d1:3d:45:b4:df:79:f0:86:6a:97:1b:4f:4b:
bc:c9:fc:d0:f1:14:39:4e:ee:9f:c3:ae:5c:9f:35:61:8e:cf:
01:88:a0:67:9a:29:79:f7:54:43:c5:d5:f7:91:14:c4:72:00:
39:36:03:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 13:49:06 2025 by rpki-client