Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
File: fKnhWNylWE83ofg0myiaaBLbkko.mft (raw, json)
Hash identifier: CsKKN8i50OGt3lHzLiVdaYZMTE3h5AghylDwFAupG0Q=
Subject key identifier: DB:E5:85:FD:81:66:46:6D:79:20:26:77:AE:86:7D:8E:B2:DE:F0:48
Authority key identifier: 7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A
Certificate issuer: /CN=7ca9e158dca5584f37a1f8349b289a6812db924a
Certificate serial: 019848C04A5AD04364F000F9134635EF7408
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
Manifest number: 086A
Signing time: Sat 26 Jul 2025 22:00:18 +0000
Manifest this update: Sat 26 Jul 2025 22:00:18 +0000
Manifest next update: Sun 27 Jul 2025 22:00:18 +0000
Files and hashes: 1: fKnhWNylWE83ofg0myiaaBLbkko.crl (hash: OvwuoqxVCpIGykwxSn9Z7XZpdNmMo8mFtXFrWrgRK40=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:c0:4a:5a:d0:43:64:f0:00:f9:13:46:35:ef:74:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca9e158dca5584f37a1f8349b289a6812db924a
Validity
Not Before: Jul 26 22:00:18 2025 GMT
Not After : Jul 27 22:00:18 2025 GMT
Subject: CN=dbe585fd8166466d79202677ae867d8eb2def048
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e8:04:14:e1:0c:a1:47:9a:6a:ab:ec:bc:14:
0d:7a:74:0b:ff:5d:d6:84:9a:75:45:2d:64:ea:4f:
59:42:ca:50:28:00:24:79:d2:13:ae:32:39:46:f6:
09:14:21:76:34:81:8f:91:40:eb:b0:4c:14:11:81:
65:dd:84:4c:c0:5a:c5:09:56:92:9c:56:fe:b8:e1:
0a:d9:33:ad:f7:fc:13:c5:12:30:22:74:30:65:71:
49:15:4d:91:e5:d7:8c:b2:cb:ce:50:8c:7f:09:d8:
ee:75:66:3a:5f:a0:24:63:6c:3f:71:f1:7d:44:e5:
74:87:c9:b0:93:d2:89:74:f5:94:cc:e7:c6:90:e0:
8d:0e:9a:d3:e0:75:a1:5f:49:f3:68:b5:74:a4:c9:
ea:82:89:b7:28:b2:81:99:1e:cf:cd:85:4d:2d:6b:
28:28:4f:42:ed:f9:7f:52:92:55:88:3f:f7:83:75:
2b:c1:2c:94:de:75:25:b3:d3:aa:30:1c:c2:1c:e2:
81:86:af:89:20:be:d9:49:01:1b:95:6b:a3:04:0b:
89:14:41:96:18:bd:53:e7:6e:20:5e:4e:87:d6:30:
9d:b2:e5:3a:b9:96:cd:a9:c4:cb:38:71:e3:54:f0:
bd:e5:14:9f:9d:cd:a2:3d:f0:af:72:7e:53:0c:85:
82:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E5:85:FD:81:66:46:6D:79:20:26:77:AE:86:7D:8E:B2:DE:F0:48
X509v3 Authority Key Identifier:
keyid:7C:A9:E1:58:DC:A5:58:4F:37:A1:F8:34:9B:28:9A:68:12:DB:92:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKnhWNylWE83ofg0myiaaBLbkko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/fb34e4-ed61-4e1d-a46d-78a77f7a1342/1/fKnhWNylWE83ofg0myiaaBLbkko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:78:23:3f:9c:60:db:65:8f:7c:53:6a:0d:83:23:74:00:30:
aa:92:b2:b7:ab:3d:f7:37:d2:07:3f:16:86:0a:f6:40:18:0e:
1e:d5:c8:4e:65:ec:9a:42:d0:97:99:c6:05:d4:d1:0d:f6:ae:
51:74:5c:0f:12:13:ef:6d:b7:c1:0f:b2:7d:b3:c4:b2:dc:cf:
43:31:be:7d:87:3a:29:07:bb:37:c3:ba:83:4a:4c:bc:66:29:
77:d0:b0:88:8c:f1:e6:d1:55:c6:46:6a:08:2a:54:54:c6:b2:
d2:f3:56:f6:9b:cc:f6:10:54:14:34:6d:e6:1a:2f:fb:d6:d3:
db:bf:c5:4b:9e:e3:11:73:8d:61:25:a1:4a:bf:f1:0c:92:a8:
44:9f:e3:4f:36:db:2b:f7:05:75:5c:8e:a6:46:7a:68:5c:cf:
48:86:f5:7b:43:8e:d3:f1:80:77:a4:b6:75:c8:27:5b:54:c7:
94:46:ba:cb:62:f9:80:0a:97:ce:a3:29:f0:42:41:38:ba:4c:
26:7f:e5:56:16:a4:66:ac:94:dc:66:7d:d4:33:3a:2b:e5:9a:
c1:94:3f:2b:8d:24:4f:42:3e:88:7c:ab:71:60:3f:b8:29:44:
ae:7b:79:57:58:96:37:0b:57:33:f0:39:1f:1c:9d:b6:c6:d4:
4a:25:f6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:39:20 2025 by rpki-client