Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
File: FK_dm9_GCroGLnxVwq4ukYoynMo.mft (raw, json)
Hash identifier: p6TLb2r2YnJSxu+gtmE+6nMr2HJ0SRA/4OOtc6+mHjw=
Subject key identifier: 4F:CD:B2:24:CF:67:06:F5:E7:59:38:BE:14:3B:5D:2D:D0:7A:AC:24
Authority key identifier: 14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
Certificate issuer: /CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Certificate serial: 0198D4A7EFBB7E5565E2B40ACD7478A0C619
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
Manifest number: 0A5B
Signing time: Sat 23 Aug 2025 02:00:32 +0000
Manifest this update: Sat 23 Aug 2025 02:00:32 +0000
Manifest next update: Sun 24 Aug 2025 02:00:32 +0000
Files and hashes: 1: FK_dm9_GCroGLnxVwq4ukYoynMo.crl (hash: U7VtkQB0ygJKN28og4kMKe+uTirPigo5PaROr/JATPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:ef:bb:7e:55:65:e2:b4:0a:cd:74:78:a0:c6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Validity
Not Before: Aug 23 02:00:32 2025 GMT
Not After : Aug 24 02:00:32 2025 GMT
Subject: CN=4fcdb224cf6706f5e75938be143b5d2dd07aac24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e8:82:9a:46:ae:6c:83:dc:74:c4:ed:37:a9:
f4:30:b5:ad:a5:ac:ef:37:90:ba:c9:db:a6:b0:38:
02:11:72:a9:da:8e:83:12:b8:71:4c:02:8c:d5:54:
81:ae:2f:55:20:12:81:71:96:3f:4b:d5:e0:78:77:
9b:4a:ea:29:c7:f9:17:be:b9:50:d6:e1:e3:ca:cf:
66:67:fe:92:3d:d5:f9:82:7a:3e:59:e9:4c:fa:02:
e2:08:15:58:62:cb:cd:50:0e:24:e8:75:bf:e6:e5:
75:47:61:45:ad:03:1c:82:3e:cb:e2:31:6c:e1:c8:
f1:f6:73:cf:cc:a9:79:df:5d:05:2a:03:d8:41:1e:
22:e3:ee:40:d1:99:7f:d7:db:61:b5:b1:a7:42:b5:
ea:9b:75:dc:2a:94:e3:90:9f:ed:cd:61:14:86:b7:
4e:05:89:ca:5f:f2:51:30:ee:3a:50:8d:fc:bb:53:
18:7a:50:7b:af:5c:e9:a3:6a:74:3f:63:96:40:9a:
1b:3c:1e:d9:7a:c2:03:86:71:71:ff:cb:1c:2f:ed:
3d:b3:7d:36:81:5c:a7:7f:49:f1:34:fb:75:c8:c5:
fc:61:f8:25:ea:55:03:c3:b0:fe:ba:98:7a:27:a3:
ed:b3:61:1e:c6:26:62:b4:58:e2:28:c5:d8:b4:2c:
a2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:CD:B2:24:CF:67:06:F5:E7:59:38:BE:14:3B:5D:2D:D0:7A:AC:24
X509v3 Authority Key Identifier:
keyid:14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:16:35:ae:e9:d1:7b:b4:b6:91:b4:50:a1:85:4d:ca:67:9e:
89:d8:cd:3f:30:53:b4:69:ef:d2:49:fd:43:96:e6:94:09:c0:
76:7e:46:57:af:67:66:e4:35:c1:a4:d0:3f:3b:4c:34:2a:6a:
71:0a:a1:29:9e:14:e5:1b:17:f7:00:ee:75:9c:d1:69:f9:9b:
06:d0:9b:41:e2:0d:34:59:b3:25:4c:7d:01:af:c3:1c:7e:eb:
e1:a5:34:91:bb:07:b6:bb:98:e8:b1:99:7a:cc:df:e0:1b:14:
0b:fa:eb:8c:27:55:97:c9:be:fa:18:f3:c5:f0:70:fb:f9:0f:
4a:8d:13:d2:94:4b:05:73:47:2f:d2:21:a6:bd:f0:93:58:17:
0c:9c:85:97:b6:2b:f8:da:b5:e0:fd:02:ad:2a:1f:a0:64:d7:
09:46:96:95:5f:2a:d3:a7:9b:5c:3a:3e:91:78:61:82:2c:a5:
69:dd:b7:3a:18:aa:12:64:6f:f9:47:3d:d2:f6:16:86:9c:96:
f9:4a:0d:c6:5f:4c:2a:3e:56:ad:17:7c:e4:b6:74:44:41:cb:
c9:ba:4a:e6:8b:18:07:78:54:d4:6b:da:c4:d3:bc:e3:18:78:
9e:91:2f:5c:70:c6:f5:c9:69:84:e1:95:83:83:a3:1a:0e:c1:
de:b3:bb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 10:49:58 2025 by rpki-client