Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
File: FMFDiPKGLX4nqH_m9gHjTzRXI04.mft (raw, json)
Hash identifier: JCFmUBa2Lj9hjNR6cIc6MrKEx0nAeMURbvu92Vg6yMI=
Subject key identifier: D2:5A:5C:FD:28:A4:D6:1C:92:49:3E:65:47:E0:F0:E7:57:C4:5F:3C
Authority key identifier: 14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
Certificate issuer: /CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Certificate serial: 019847E516B423BE7386D79F8727248D6777
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
Manifest number: 0A79
Signing time: Sat 26 Jul 2025 18:00:52 +0000
Manifest this update: Sat 26 Jul 2025 18:00:52 +0000
Manifest next update: Sun 27 Jul 2025 18:00:52 +0000
Files and hashes: 1: FMFDiPKGLX4nqH_m9gHjTzRXI04.crl (hash: wgAdFSse3US/jq+3ZQYnNUWrAp0zIaH3QCA0CSy81ss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:e5:16:b4:23:be:73:86:d7:9f:87:27:24:8d:67:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14c14388f2862d7e27a87fe6f601e34f3457234e
Validity
Not Before: Jul 26 18:00:52 2025 GMT
Not After : Jul 27 18:00:52 2025 GMT
Subject: CN=d25a5cfd28a4d61c92493e6547e0f0e757c45f3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ba:82:53:16:a2:28:81:17:03:12:49:42:78:
76:6b:6e:d4:bc:33:24:3f:78:a9:6f:61:5b:33:82:
91:4c:26:44:f9:3f:8c:e3:61:9e:03:8d:ea:cd:32:
56:77:8d:43:ec:b6:88:3a:11:1c:76:f4:12:6e:f4:
9e:d1:f1:1f:40:0c:cd:99:84:fd:34:e6:d3:cd:89:
81:e9:b9:b6:5c:f9:61:d8:76:ec:71:a5:8a:97:90:
11:34:fe:5f:aa:9c:5f:13:07:00:82:63:ef:a2:6f:
b3:71:da:44:52:3d:53:2b:e0:b8:0c:85:88:52:0b:
37:c0:e1:af:ee:af:48:08:02:fb:a0:ea:ca:2f:9e:
1e:ee:c7:fd:fe:17:e6:61:81:93:af:40:d8:21:07:
0d:3e:60:53:c5:1b:36:dc:c7:7d:c5:86:58:1f:fc:
31:60:96:34:b9:2d:32:3b:cb:4c:7a:55:e8:4f:9c:
d3:a1:41:bd:5b:f4:60:ab:4f:5d:7e:32:3b:b7:e1:
61:d8:0e:ba:d5:13:fc:8e:cc:40:46:2a:bb:33:5d:
3a:3f:13:6c:98:23:41:91:38:fe:e7:e0:46:dd:2f:
c9:fd:f3:3e:1c:2c:ba:58:16:47:0d:bf:0d:b6:68:
99:9e:43:30:6d:ce:92:24:32:78:e0:ec:ec:82:e5:
c4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5A:5C:FD:28:A4:D6:1C:92:49:3E:65:47:E0:F0:E7:57:C4:5F:3C
X509v3 Authority Key Identifier:
keyid:14:C1:43:88:F2:86:2D:7E:27:A8:7F:E6:F6:01:E3:4F:34:57:23:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FMFDiPKGLX4nqH_m9gHjTzRXI04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ba6a0f-b9c7-4f40-9e3c-88a4be7a4cb3/1/FMFDiPKGLX4nqH_m9gHjTzRXI04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f6:29:6f:7e:c5:58:47:f8:9f:4b:a3:45:35:bc:a5:e8:d1:
dc:0a:07:ac:20:c1:66:ca:a9:7f:9b:25:d8:5c:c5:e2:22:33:
67:15:00:6a:4d:59:7e:36:87:f1:1c:c7:28:28:a0:94:1e:0f:
ec:f3:3e:ea:67:7d:fe:c4:7d:c1:33:55:d8:53:7f:79:40:0a:
03:69:3d:1c:da:7a:e0:29:7d:c3:87:66:9a:74:b1:26:00:9e:
52:fc:a4:27:da:3b:43:2b:c7:ee:23:1d:40:04:26:25:a1:4e:
b7:f2:21:38:a5:06:3c:d6:4d:f2:31:26:f4:41:2d:ba:2f:01:
63:b9:96:21:82:30:8d:a0:2a:3c:47:69:ee:56:98:48:42:c6:
16:21:ce:f9:ff:cf:40:09:ea:38:a0:58:93:95:0b:30:17:89:
c3:a9:fe:50:8f:8c:cc:ee:83:c9:7b:38:c4:4b:7e:fb:4c:cb:
61:6e:b2:65:c5:2f:6b:a8:7a:f8:6d:bd:f8:dc:99:35:94:65:
a0:55:94:85:bf:0a:43:19:55:bd:ee:65:db:c4:de:e8:fa:69:
2e:ea:9d:6a:1a:ee:89:85:e0:7c:4f:70:07:4f:d2:79:71:e8:
96:58:6e:3b:24:59:e9:94:1c:fe:84:9b:80:3d:4d:6f:bd:29:
cc:9a:1b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 00:50:33 2025 by rpki-client