Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
File: Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft (raw, json)
Hash identifier: RBYypkZLfZTLPhw8TSFxaG9yUlkbnOxVpNM91VadIbM=
Subject key identifier: 6A:9A:D2:4F:04:21:69:5E:0A:EA:CF:97:66:EC:C8:98:D7:A2:1A:CE
Authority key identifier: 16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
Certificate issuer: /CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Certificate serial: 0197643AB0365324E12826B0FAF43D0B900A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
Manifest number: 1518
Signing time: Thu 12 Jun 2025 13:00:57 +0000
Manifest this update: Thu 12 Jun 2025 13:00:57 +0000
Manifest next update: Fri 13 Jun 2025 13:00:57 +0000
Files and hashes: 1: Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl (hash: b0zGZu+BpLh/LLwCen1etWmwd/AN0Vp6gh4+k29ZZwk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:3a:b0:36:53:24:e1:28:26:b0:fa:f4:3d:0b:90:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=16a83e083bcd63a01184d20262a42ac7ebd6af88
Validity
Not Before: Jun 12 13:00:57 2025 GMT
Not After : Jun 13 13:00:57 2025 GMT
Subject: CN=6a9ad24f0421695e0aeacf9766ecc898d7a21ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:70:a6:db:1b:1f:90:9d:cf:ce:75:14:df:39:
01:04:2c:76:96:3c:25:55:c9:95:c8:fb:2f:ab:a0:
f5:44:f2:3d:1f:4e:0f:5f:b4:9f:1c:36:27:49:cc:
13:85:16:83:dd:10:a2:49:a6:4d:4c:4b:83:b9:91:
0d:d3:87:d8:cb:9a:f5:aa:e7:5d:6f:c9:71:f8:75:
b1:55:8e:e4:00:44:8a:9e:43:4a:7c:c2:f0:e5:4a:
02:94:a4:16:7a:39:53:79:30:fa:c3:9e:a1:1a:ed:
ba:81:1a:5d:72:d1:5e:f3:c2:d2:3d:7c:91:ac:cc:
5a:38:a4:13:b8:cc:67:5d:18:f0:aa:03:68:44:0c:
75:32:89:a2:dc:13:3e:0c:3d:1a:26:74:87:19:47:
2f:07:ca:13:da:90:21:d6:19:4d:80:3b:84:b9:26:
11:08:10:3d:3e:40:c3:f4:2d:19:50:41:13:b5:73:
60:9f:53:e9:a0:0f:6f:57:70:d3:dd:90:b5:b0:5b:
3f:0e:a0:79:d2:f9:41:0b:7d:30:03:c3:fb:51:34:
27:2d:52:06:3e:9e:3f:4d:0c:02:2a:c6:30:49:45:
e5:4a:4f:3e:1f:e5:4b:63:d6:42:1a:62:78:97:c1:
32:fd:00:51:39:2a:ac:34:d4:10:bc:9a:7a:5f:5c:
fb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:9A:D2:4F:04:21:69:5E:0A:EA:CF:97:66:EC:C8:98:D7:A2:1A:CE
X509v3 Authority Key Identifier:
keyid:16:A8:3E:08:3B:CD:63:A0:11:84:D2:02:62:A4:2A:C7:EB:D6:AF:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fqg-CDvNY6ARhNICYqQqx-vWr4g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/cf894a-0528-4e49-87e2-a45dde7aeba6/1/Fqg-CDvNY6ARhNICYqQqx-vWr4g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b6:a0:e2:ab:45:7e:60:7e:bf:72:5c:f9:4c:76:2f:ba:9d:
dd:90:26:70:6a:df:97:6a:7a:80:b9:e5:c4:b4:99:0e:09:88:
c6:0b:8d:b3:c5:06:52:7b:87:06:d1:28:24:9a:7f:3d:80:0f:
18:d0:6b:da:0b:38:b4:da:19:ac:27:ac:f8:c0:ed:33:5b:62:
14:68:d9:c4:a6:7c:17:ba:b9:97:a0:cc:5c:cf:f1:e1:63:3d:
81:ff:6b:ab:03:17:ff:9d:f0:17:7c:05:a6:39:5a:ad:7c:95:
d6:f0:47:f3:68:37:14:a1:29:8a:da:0c:5b:33:ec:fc:9a:50:
5b:1f:8b:89:ed:0b:3c:6a:ea:47:b3:60:a7:bf:66:cc:0e:aa:
05:58:37:dc:70:5b:62:09:ec:35:70:3c:31:bb:65:14:c5:21:
9a:ff:f5:d1:1c:f9:41:bd:f9:8e:fc:82:70:de:8e:5f:dc:d0:
e7:63:cb:d8:0d:7c:f3:d8:1e:2d:a2:bc:b3:ea:9d:e2:c2:cd:
20:e8:27:14:2e:c7:2c:a9:cf:1c:7b:55:14:df:8f:ff:dd:8c:
4d:2b:2c:94:40:7e:41:28:0d:85:56:55:7f:27:66:30:73:e4:
9f:1e:b2:64:f4:10:44:9e:f1:5a:e2:9e:fb:02:8d:5a:d3:3d:
77:fe:15:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 18:29:25 2025 by rpki-client