
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
File: FK_dm9_GCroGLnxVwq4ukYoynMo.mft (raw, json)
Hash identifier: 7piVBIZKcNE5fOQuiLxEIrzX87HJJPPsufH/q5wpY+A=
Subject key identifier: 8E:D5:3F:57:32:AF:5B:5D:B4:97:86:FC:9A:0F:E2:E6:98:EB:5B:CF
Authority key identifier: 14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
Certificate issuer: /CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Certificate serial: 0196A49C19DF2C00023747B05D8A97004978
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
Manifest number: 0939
Signing time: Tue 06 May 2025 08:00:15 +0000
Manifest this update: Tue 06 May 2025 08:00:15 +0000
Manifest next update: Wed 07 May 2025 08:00:15 +0000
Files and hashes: 1: FK_dm9_GCroGLnxVwq4ukYoynMo.crl (hash: yrT9HH+rrnqHRjAN9FEhsA5XJVlrF7VprFmt2IKMeuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 May 2025 04:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:a4:9c:19:df:2c:00:02:37:47:b0:5d:8a:97:00:49:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Validity
Not Before: May 6 08:00:15 2025 GMT
Not After : May 7 08:00:15 2025 GMT
Subject: CN=8ed53f5732af5b5db49786fc9a0fe2e698eb5bcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:e1:e4:a9:83:a7:86:d5:96:42:e8:06:7f:36:
29:e3:c0:e1:8c:f2:43:77:b7:69:79:d6:d2:a3:9a:
79:95:21:fc:0a:c6:95:30:c8:5c:8d:15:66:e0:84:
fd:9f:d4:d4:39:3e:6d:53:ee:46:81:e0:e6:4a:5e:
ff:44:6e:41:d1:af:2e:e4:41:a2:65:17:5c:8a:2b:
65:0f:61:e0:97:9f:47:20:40:2e:b9:2f:1e:7b:30:
a0:da:42:d5:53:27:6e:4d:6b:0d:07:db:d4:01:43:
80:7e:6c:a1:28:20:17:b3:fa:62:34:e3:e0:1a:f6:
51:45:88:d1:76:ff:bb:0f:e5:0a:a0:b1:87:b9:6b:
0c:13:a4:96:c1:80:90:51:4d:ac:70:b4:e5:bf:fa:
10:94:e8:8a:a7:40:5b:09:6e:50:79:5d:d7:fd:41:
0b:55:07:ae:f3:1d:d2:ed:9d:21:11:59:e6:80:ad:
1b:c5:71:7e:c9:4e:99:99:ff:30:26:ee:06:63:59:
42:31:c8:0f:b6:cc:d1:ff:c0:fc:e0:ba:ae:86:c3:
4b:69:f7:2b:03:b6:9b:02:85:e0:5e:a4:66:ce:27:
35:46:f9:3a:7e:eb:0e:07:6e:bb:2d:c7:5b:43:24:
77:46:d3:ef:64:58:b1:0c:33:41:54:38:3f:46:23:
58:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:D5:3F:57:32:AF:5B:5D:B4:97:86:FC:9A:0F:E2:E6:98:EB:5B:CF
X509v3 Authority Key Identifier:
keyid:14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:08:77:63:d8:1e:e9:d3:c1:10:10:01:c2:45:99:a4:cc:0a:
6c:7c:5f:cf:b0:41:df:b4:80:1e:c5:3d:e5:0b:b0:c7:0a:b7:
c5:00:43:82:3e:2f:b3:05:4a:d8:a2:c7:81:97:2a:83:84:12:
cb:52:ae:86:cd:3e:25:08:81:43:10:10:df:d4:19:fa:ad:90:
fc:18:54:7b:0b:4a:24:20:61:46:a8:99:64:4c:40:a1:8f:87:
df:39:e1:b5:b6:6e:c5:2a:1e:5f:49:39:fa:2c:ec:d7:ef:00:
50:18:1a:20:30:49:c4:ae:7f:2a:60:38:e7:13:41:b6:10:ae:
80:42:75:e6:be:d8:f6:c3:b4:fb:f5:34:c8:75:96:d7:ad:7d:
ca:9a:f2:fe:99:0c:91:ec:09:f8:ea:df:64:08:0f:4d:bf:17:
f7:0c:44:36:11:d3:0c:45:9c:e3:8e:6c:44:04:ff:c3:e2:07:
f8:72:f9:96:b9:47:5f:33:68:41:d5:82:2e:c9:8b:20:78:f2:
7f:86:39:8e:b6:f9:7b:91:a0:0e:f8:ef:f3:a8:83:d0:3b:d9:
8d:de:95:f7:00:b4:37:05:46:5a:20:ac:75:a4:82:15:67:f9:
da:ea:65:e1:2e:29:e8:ba:98:20:0f:26:1d:98:81:5d:8f:a5:
7c:ea:82:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 12:22:26 2025 by rpki-client