Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
File: FK_dm9_GCroGLnxVwq4ukYoynMo.mft (raw, json)
Hash identifier: f8rVIW1iqHtEA7bG4luQzJTuWqtOJz5ytMC3blgQUSU=
Subject key identifier: EC:0D:EF:93:A5:5D:1C:87:9B:21:62:57:E5:35:E7:A9:A4:72:AB:93
Authority key identifier: 14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
Certificate issuer: /CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Certificate serial: 0197B6D7A987ACEACC546234982AE3264974
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
Manifest number: 09C7
Signing time: Sat 28 Jun 2025 14:01:16 +0000
Manifest this update: Sat 28 Jun 2025 14:01:16 +0000
Manifest next update: Sun 29 Jun 2025 14:01:16 +0000
Files and hashes: 1: FK_dm9_GCroGLnxVwq4ukYoynMo.crl (hash: lWi3B6/lziaJFpnfGhfPSyULQWT/Bv+mFEP0OJxzt7M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a9:87:ac:ea:cc:54:62:34:98:2a:e3:26:49:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Validity
Not Before: Jun 28 14:01:16 2025 GMT
Not After : Jun 29 14:01:16 2025 GMT
Subject: CN=ec0def93a55d1c879b216257e535e7a9a472ab93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:cb:08:b2:23:d9:41:b3:84:e6:72:de:2c:
e4:d5:08:79:8d:4c:f5:a8:fe:24:78:37:fb:65:b8:
d0:6b:fb:dd:50:be:66:e5:2d:d3:f8:09:b2:4d:f8:
84:c0:c2:70:0e:d9:6d:8e:f3:92:29:12:e7:44:16:
95:e6:14:1e:b2:05:0a:bf:c9:c9:26:ce:25:6c:cd:
65:98:5e:57:3d:ef:5f:5b:e7:97:19:e5:a9:4b:6b:
9f:21:68:5f:34:ef:70:77:16:97:9d:5a:77:f4:29:
8b:f8:34:14:67:f1:0e:4e:e1:d0:c9:5e:78:91:e2:
56:5f:f4:8f:66:88:c8:48:51:e5:62:8d:ec:be:8c:
90:c9:62:35:8c:e8:5d:1c:a2:0d:ac:04:e9:80:80:
14:88:b9:26:ef:66:ff:cc:35:ac:22:cc:85:5b:94:
35:f6:a8:c3:31:5d:a2:0c:d2:17:d4:7a:30:07:9c:
c8:f6:29:9b:90:35:97:73:40:69:78:31:0a:95:03:
23:2a:5e:c3:5c:2e:d1:2b:52:12:83:a7:d0:a5:a2:
87:bb:de:51:4a:1c:50:14:ae:e2:11:5f:63:30:69:
d5:31:54:16:8c:e4:8d:dc:41:b7:f8:38:d0:e2:68:
a5:25:89:80:68:bc:b0:cf:a8:7e:d6:6e:f5:34:85:
2b:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:0D:EF:93:A5:5D:1C:87:9B:21:62:57:E5:35:E7:A9:A4:72:AB:93
X509v3 Authority Key Identifier:
keyid:14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:cb:16:29:da:90:84:2b:95:e9:a8:84:91:77:df:25:92:c8:
bc:0d:69:dc:e4:5f:1f:37:f1:47:34:5b:28:00:23:c9:8f:31:
33:90:ba:73:7e:ea:28:80:2e:3e:2b:d7:3f:73:d9:df:78:4c:
8e:97:0f:c4:4e:b5:fe:a3:1d:47:8a:bc:a8:a3:fb:4c:46:7f:
62:c7:34:30:cf:0e:64:44:35:62:f2:b3:0d:ce:18:52:47:c3:
6f:90:68:b0:81:32:b7:04:7c:76:1e:7e:db:63:68:9f:31:f2:
97:93:32:a8:44:2a:91:ec:d8:61:ed:bf:fb:49:b0:3e:8d:da:
e9:4c:a6:ab:4d:99:86:de:ef:c4:b0:76:cc:96:07:bc:a8:08:
70:23:8e:78:14:b3:5c:4b:0d:a5:e9:2e:f5:57:54:74:6b:16:
e5:a9:cd:5b:5b:93:ad:73:ce:53:d0:1d:22:7d:d0:d7:1b:37:
93:86:8e:f5:8d:39:34:77:1c:d6:6d:52:4e:a4:7a:e5:68:43:
76:60:3d:8f:c7:73:0f:23:ba:3b:80:cf:c3:64:5e:2f:a2:9a:
fd:f2:5d:7a:b9:49:99:dd:59:df:30:a9:85:4b:aa:ef:02:f4:
d4:2f:ed:53:81:6d:bc:ff:c5:65:19:6a:3e:24:21:18:36:db:
6e:6f:64:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:21 2025 by rpki-client