Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
File: _fnlz5EF-11F34wfudTxx6WQVMY.mft (raw, json)
Hash identifier: KacaTTz/jDB070qn23N0Zjrw62P1JKx5frBHQda/d3c=
Subject key identifier: AB:1A:F5:55:2C:7D:18:4A:35:08:01:78:78:71:5E:13:6C:11:C7:6C
Authority key identifier: FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
Certificate issuer: /CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Certificate serial: 01984965093CD176287F1636959EA83B3316
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
Manifest number: 08D3
Signing time: Sun 27 Jul 2025 01:00:14 +0000
Manifest this update: Sun 27 Jul 2025 01:00:14 +0000
Manifest next update: Mon 28 Jul 2025 01:00:14 +0000
Files and hashes: 1: _fnlz5EF-11F34wfudTxx6WQVMY.crl (hash: dtQTVhmtcFWWaTZyraIyrRpdtHuVK6boDXNun1Xi1Fc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 01:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:65:09:3c:d1:76:28:7f:16:36:95:9e:a8:3b:33:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdf9e5cf9105fb5d45df8c1fb9d4f1c7a59054c6
Validity
Not Before: Jul 27 01:00:14 2025 GMT
Not After : Jul 28 01:00:14 2025 GMT
Subject: CN=ab1af5552c7d184a3508017878715e136c11c76c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ec:95:f6:82:85:5e:9c:08:eb:0d:59:c1:fe:
02:02:ab:e1:d8:ce:1c:74:8f:be:9f:d8:75:66:ec:
2c:33:8d:a9:da:0f:8f:2b:f7:b5:b9:f9:70:a1:e8:
de:00:06:df:e0:3b:71:af:54:1e:bf:64:69:f3:b9:
2d:72:e6:36:3b:89:51:61:0a:00:4b:21:65:cb:48:
3b:74:4d:a9:d2:0c:84:fa:86:72:4f:af:a5:3e:8d:
fe:f1:c3:aa:18:44:c6:73:9f:84:f4:1d:c6:6e:ab:
23:f8:16:cb:fb:d1:56:32:30:e4:45:70:3a:2b:5c:
46:89:5f:d9:e1:42:47:c6:cd:8c:13:b9:4e:95:25:
02:da:40:d9:95:fa:97:d6:80:59:e7:06:8a:22:8b:
7f:12:aa:9f:0a:09:06:f0:20:c9:a1:e1:44:15:d2:
87:13:1f:b2:eb:5c:db:03:06:d2:58:29:a7:18:42:
fc:4b:59:d9:c8:a1:0e:31:ad:8b:63:e1:22:c8:5b:
73:bc:1d:93:6a:9a:7d:d4:53:2a:13:d9:38:a8:70:
22:77:55:de:87:03:e6:b0:2d:f3:32:5d:63:ea:01:
b4:57:11:d6:5b:d1:31:5d:b1:35:34:43:e1:b9:4a:
9b:7d:b8:0b:4f:0d:9e:b9:30:1c:ff:9a:7d:5c:bd:
cf:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:1A:F5:55:2C:7D:18:4A:35:08:01:78:78:71:5E:13:6C:11:C7:6C
X509v3 Authority Key Identifier:
keyid:FD:F9:E5:CF:91:05:FB:5D:45:DF:8C:1F:B9:D4:F1:C7:A5:90:54:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_fnlz5EF-11F34wfudTxx6WQVMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/07d229-7077-4b80-9295-ec0b6f4d4a6c/1/_fnlz5EF-11F34wfudTxx6WQVMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:9b:1d:4f:3e:6d:af:45:b1:1f:a0:b7:13:0d:8d:0f:22:28:
9b:f7:da:fe:0c:a3:99:3c:32:10:40:b4:1c:21:79:25:ff:aa:
b4:6f:e4:bb:de:d5:59:f3:98:eb:7b:75:05:41:eb:7d:a5:65:
a3:2a:c3:0d:0a:d3:73:1c:7b:b7:66:94:ad:61:9b:cb:5e:f1:
64:f7:c0:51:9a:86:86:bc:3e:fa:7a:3e:ad:4c:90:8b:8c:bb:
9e:4f:dd:98:41:da:77:b8:ff:b6:10:c4:0b:ca:8b:fc:0c:dd:
75:5e:10:d3:f3:cf:8d:13:95:b9:09:67:b1:4b:1d:90:a7:fc:
8e:7e:5f:bf:b6:56:5e:6e:24:7f:09:4e:0f:39:cc:2e:7c:41:
60:91:a5:95:37:4c:1f:df:cd:a5:f9:8e:38:15:62:2c:b0:15:
25:ed:db:86:06:63:e7:f4:30:1a:e6:10:42:da:3c:ba:de:ea:
74:f9:58:0c:68:1a:7b:7e:ee:9c:9a:29:d2:c4:15:38:7b:ba:
ef:58:99:1e:1a:7e:24:ee:f2:f3:12:cc:49:e2:e8:12:48:89:
3b:10:bf:6b:c7:8d:36:c5:36:b2:fb:ef:f4:80:ae:77:c1:88:
10:fa:dc:f6:d5:4b:f8:88:ee:f7:15:ee:5e:e5:1c:d5:a1:31:
bf:79:40:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 10:43:20 2025 by rpki-client