Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
File: FnguRefo6SnFw_lkQafmTFQfguY.mft (raw, json)
Hash identifier: ibC1dotFsw21msWtvHI1N96Risy6JVvcyUzpNqpDcCI=
Subject key identifier: 79:88:5D:B2:40:07:51:87:1A:1D:54:85:FD:6B:DF:B4:E0:B3:16:8F
Authority key identifier: 16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
Certificate issuer: /CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Certificate serial: 019849651E6C581B13B9BF7AEEB666820DE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
Manifest number: 0D61
Signing time: Sun 27 Jul 2025 01:00:20 +0000
Manifest this update: Sun 27 Jul 2025 01:00:20 +0000
Manifest next update: Mon 28 Jul 2025 01:00:20 +0000
Files and hashes: 1: FnguRefo6SnFw_lkQafmTFQfguY.crl (hash: PU22/g27ywbtqITjWk0RTa3ve6BJ0hMN1v+gi4+7bsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:1e:6c:58:1b:13:b9:bf:7a:ee:b6:66:82:0d:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16782e45e7e8e929c5c3f96441a7e64c541f82e6
Validity
Not Before: Jul 27 01:00:20 2025 GMT
Not After : Jul 28 01:00:20 2025 GMT
Subject: CN=79885db2400751871a1d5485fd6bdfb4e0b3168f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:ba:be:06:ab:ab:86:20:28:f4:e1:58:4e:
a9:9b:e1:69:0d:34:ae:91:68:a4:1c:fa:0e:84:f5:
1b:6a:34:83:cc:64:f7:3c:a6:d4:8c:53:2b:ec:0a:
13:6d:3b:92:e3:09:cb:0a:2c:c7:70:23:63:ee:47:
62:08:18:03:e1:94:80:cf:8b:b1:ba:a0:fe:8b:ce:
91:00:46:7c:ec:e3:67:85:b0:9f:3f:e1:dc:5e:92:
31:f4:29:1b:6e:b3:41:76:d4:1d:43:6f:6c:bd:71:
18:7b:3c:13:3c:df:b7:bb:43:5d:46:a0:80:10:f4:
fc:22:a2:f5:96:c4:c8:69:18:47:da:e3:07:1b:af:
cd:d0:63:f2:6e:09:8c:a4:90:7c:b0:8f:fe:82:aa:
6e:fc:ff:8e:bc:37:48:33:ba:ae:e7:ae:f8:a6:f8:
4e:bf:3f:44:38:f8:a1:26:8f:c1:59:87:70:57:b4:
2f:b1:0c:4f:47:f0:5b:82:e8:36:d8:a4:4d:bd:57:
a5:b8:2c:2a:80:71:d9:ca:5b:98:68:07:c2:4b:7f:
e5:b5:76:a6:68:18:8b:11:16:41:4b:bc:a1:1b:16:
a2:b6:3d:45:ec:3c:b8:50:cc:96:80:73:5f:06:74:
7a:83:ae:30:7e:4e:40:c4:cf:5d:9c:98:6f:cc:6f:
c7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:88:5D:B2:40:07:51:87:1A:1D:54:85:FD:6B:DF:B4:E0:B3:16:8F
X509v3 Authority Key Identifier:
keyid:16:78:2E:45:E7:E8:E9:29:C5:C3:F9:64:41:A7:E6:4C:54:1F:82:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FnguRefo6SnFw_lkQafmTFQfguY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/ef01a5-5867-419f-83c8-7d57f58360a0/1/FnguRefo6SnFw_lkQafmTFQfguY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:20:c0:66:87:33:1f:21:84:38:be:15:82:8f:17:09:66:e1:
f3:a7:b6:5e:45:a7:a7:1c:a1:48:1c:47:b4:40:39:d8:69:e4:
35:da:0b:af:b6:55:f3:c6:3b:1b:d5:6c:03:30:ff:ae:02:e0:
e9:a7:5c:89:5f:63:08:53:1c:97:47:77:ce:b4:66:f1:4b:91:
f7:1b:a2:0e:21:43:d5:4a:43:34:a6:76:9c:a4:40:24:3a:7f:
8a:43:73:28:29:b9:d2:21:92:c9:06:70:d7:6d:00:09:02:f9:
63:2f:8f:ff:fd:73:7b:1f:99:6c:ec:5e:34:7d:32:c5:16:96:
29:b0:a9:a5:dc:b1:82:81:1f:2b:38:3a:10:09:e4:78:40:bb:
d8:4f:e2:14:a4:ac:aa:23:e4:69:76:cf:03:68:6c:9a:bf:3d:
6a:c6:bf:18:dc:2a:38:5e:7e:02:4b:c0:6f:7c:30:ae:74:51:
f6:4f:f2:55:da:69:2b:9a:83:55:4f:56:83:09:cd:74:d0:5c:
fa:75:2a:79:96:d7:6d:d3:50:b0:68:b8:a8:66:47:7a:78:7c:
a7:b2:75:d4:64:5d:26:75:92:21:4f:43:43:1d:b0:d6:b4:b8:
e1:27:20:b5:04:6d:e8:ae:4f:05:f4:b9:41:81:2f:f8:73:34:
3a:33:a5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 09:58:48 2025 by rpki-client