
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
File: FK_dm9_GCroGLnxVwq4ukYoynMo.mft (raw, json)
Hash identifier: hg5vsE44ihhX5DlIV9hFaS2HERT0DfA1GhmA1oOZMFc=
Subject key identifier: 7A:0C:1A:5D:29:E5:E0:B5:BD:0C:6F:0F:5A:78:38:EB:D6:68:20:B6
Authority key identifier: 14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
Certificate issuer: /CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Certificate serial: 0199FC219465DF4C8E94591D9CC52F05342A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
Manifest number: 0AF4
Signing time: Sun 19 Oct 2025 11:01:23 +0000
Manifest this update: Sun 19 Oct 2025 11:01:23 +0000
Manifest next update: Mon 20 Oct 2025 11:01:23 +0000
Files and hashes: 1: FK_dm9_GCroGLnxVwq4ukYoynMo.crl (hash: Mc8WL69HS8EJ3PybJyHGYMacXEH7SV2fzBAuRWPIDp8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 06:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fc:21:94:65:df:4c:8e:94:59:1d:9c:c5:2f:05:34:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Validity
Not Before: Oct 19 11:01:23 2025 GMT
Not After : Oct 20 11:01:23 2025 GMT
Subject: CN=7a0c1a5d29e5e0b5bd0c6f0f5a7838ebd66820b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:dd:2c:59:1f:e2:54:6a:96:00:7d:6e:0c:07:
e0:45:3c:18:7e:b0:50:6f:7b:27:d7:19:bc:59:e5:
bb:92:14:6b:71:9e:3f:01:1c:88:33:81:c7:33:49:
9f:31:b8:97:1b:b4:a5:92:01:ed:9d:cb:be:80:a3:
5a:fc:10:e6:92:7d:41:58:a1:4a:69:1c:d2:7d:76:
d6:91:eb:87:4c:6d:5d:7c:ba:99:89:fc:6a:c9:69:
45:b2:ad:10:1e:e9:2b:b7:7a:4e:4d:45:63:a3:7d:
77:b8:b2:de:e2:34:b4:2c:28:4b:0c:51:46:f4:42:
cf:05:79:99:bc:9e:61:42:71:d9:d6:e0:ae:87:f5:
ab:50:c0:23:dc:bf:71:af:ff:19:e0:4d:a2:dd:df:
30:e1:4a:37:ec:11:49:92:eb:35:17:e6:0a:38:1c:
ad:da:d6:57:1a:d2:de:31:5b:fc:45:b9:54:dc:0b:
24:a7:b7:94:27:17:7c:5d:3d:6a:22:9f:a0:d1:61:
f2:ae:da:ee:89:61:1e:7d:d1:c7:bc:3c:55:5b:6e:
b1:8c:ab:af:4b:c8:e7:ab:ec:d0:bc:8c:4b:ce:f9:
36:2d:6a:83:13:b8:e3:6f:1c:34:76:da:95:99:f3:
bb:d4:cd:43:fc:b7:5e:9a:4a:f6:10:c2:fc:40:5b:
c8:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0C:1A:5D:29:E5:E0:B5:BD:0C:6F:0F:5A:78:38:EB:D6:68:20:B6
X509v3 Authority Key Identifier:
keyid:14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:d4:55:fa:fc:31:7f:36:00:b2:6c:80:2b:43:eb:7d:eb:f5:
42:97:b3:fc:e8:67:35:bb:3c:86:f7:9b:d3:79:d2:ed:98:b8:
4d:d9:b7:3c:7c:dc:b9:62:76:64:a6:83:91:55:c8:e5:e4:86:
9a:9a:90:01:64:5a:68:fd:e4:3e:c5:65:0d:13:63:a6:3c:32:
49:87:51:32:15:91:20:1e:fe:7e:33:0e:2e:ac:04:10:1c:5c:
b5:23:61:3d:fc:53:d1:0c:04:6c:76:32:f2:0c:85:cc:75:01:
f4:0d:46:58:79:03:e2:f5:09:5b:24:77:31:6f:55:ad:6e:45:
5a:c0:57:ff:6f:86:9d:5d:eb:6e:56:59:13:51:c5:c3:c0:0b:
1d:0d:bd:a1:45:65:e6:17:af:5e:1c:26:0b:0d:f6:b6:a5:39:
f6:10:74:67:8c:92:05:a7:07:f3:ba:53:ce:c0:f1:92:21:d6:
99:dd:0e:5c:a4:8d:6a:88:16:ac:b9:bc:fa:46:3d:a6:ad:60:
a6:fd:e9:57:73:2d:ad:30:1a:ab:ee:6b:aa:e8:50:c6:44:33:
3f:60:a3:7f:26:57:97:9a:cf:af:be:7e:26:83:18:9a:d9:05:
72:bc:4c:c1:e6:95:03:77:e9:5a:ee:39:3e:ec:c8:ed:ec:88:
8b:43:9a:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 19 15:14:09 2025 by rpki-client