Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
File: fm16FsP81nnQXSjtkgk1wIaujP0.mft (raw, json)
Hash identifier: 3GWK+wCnWCa0dAH/BQcaQZRku1qHQ3o8q/SUGi+vgiM=
Subject key identifier: CB:3D:53:E4:96:92:55:EA:C6:FF:B5:26:F2:6E:59:12:C4:99:BD:76
Authority key identifier: 7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
Certificate issuer: /CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Certificate serial: 01976395DCC7849D88F8834E37E76FA2A544
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
Manifest number: 1588
Signing time: Thu 12 Jun 2025 10:00:55 +0000
Manifest this update: Thu 12 Jun 2025 10:00:55 +0000
Manifest next update: Fri 13 Jun 2025 10:00:55 +0000
Files and hashes: 1: fm16FsP81nnQXSjtkgk1wIaujP0.crl (hash: q5NcQS6JudBGxfjfks9eKzxL1H8H9xE6CEMbwKz1Q9k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 10:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:95:dc:c7:84:9d:88:f8:83:4e:37:e7:6f:a2:a5:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e6d7a16c3fcd679d05d28ed920935c086ae8cfd
Validity
Not Before: Jun 12 10:00:55 2025 GMT
Not After : Jun 13 10:00:55 2025 GMT
Subject: CN=cb3d53e4969255eac6ffb526f26e5912c499bd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:27:75:cf:43:d7:98:fa:7e:3b:ac:fa:49:18:
b1:ce:55:dc:15:7d:a3:da:a2:61:aa:33:f5:8c:e2:
3a:44:a0:b1:d1:04:78:4b:9e:ba:65:9f:d3:c4:17:
fa:5f:81:33:28:29:d5:9e:29:d6:9d:62:8d:b5:59:
72:6d:cc:56:d9:50:12:87:e7:84:f6:20:6f:74:17:
39:2d:b6:8f:aa:bf:e0:02:e4:22:c5:36:f4:ea:aa:
43:d8:70:c6:8f:1d:73:77:a8:6b:4a:f3:22:96:9f:
75:b4:47:4a:9a:bd:b6:80:c7:5e:68:9a:13:fd:b4:
26:92:2d:8f:d1:16:58:7f:79:b2:a6:eb:18:17:fb:
bc:0e:ec:c9:71:1c:c0:92:6d:48:d7:fb:a2:92:24:
29:d1:77:bb:c4:6c:c3:e2:b9:1f:36:f5:38:56:f8:
6e:0e:28:4b:7d:f5:53:c3:2b:c5:41:97:a9:be:9a:
f9:35:ff:cb:3b:1f:16:b0:d2:83:8d:e8:eb:85:3c:
e6:e7:8c:88:84:23:47:df:62:2c:66:66:81:62:d1:
18:1d:f6:81:c7:4b:91:f7:bd:91:4f:a5:a8:09:f7:
c2:55:f0:bf:bf:7d:fe:65:5a:65:7f:c9:96:1e:33:
35:8f:e3:c0:ce:7c:23:75:d4:aa:b7:07:0c:da:47:
fa:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:3D:53:E4:96:92:55:EA:C6:FF:B5:26:F2:6E:59:12:C4:99:BD:76
X509v3 Authority Key Identifier:
keyid:7E:6D:7A:16:C3:FC:D6:79:D0:5D:28:ED:92:09:35:C0:86:AE:8C:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fm16FsP81nnQXSjtkgk1wIaujP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/5c7468-1a33-4255-827f-4bfc66ad08c9/1/fm16FsP81nnQXSjtkgk1wIaujP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:97:67:ac:aa:d8:04:d4:67:5d:ae:b9:32:58:db:b6:a1:6d:
d5:15:6f:3e:63:56:1e:28:78:4e:03:85:ae:5c:2e:d1:75:60:
d7:c2:15:7f:63:7f:99:a8:be:e7:4a:e9:56:b1:1a:38:90:3d:
de:7f:33:a7:0f:13:f1:af:fc:78:98:0e:a3:33:03:c5:06:3d:
6a:b9:45:d1:01:a1:22:b4:2a:d1:20:b5:4d:2f:56:42:b5:69:
df:57:1a:f4:3f:1f:b1:72:62:c5:62:45:06:3f:70:fc:09:8e:
c1:95:39:02:4e:b2:63:24:69:ec:9b:ce:14:69:e4:16:0e:e6:
29:4e:8f:86:0f:2e:73:21:99:bb:f0:ee:60:11:87:3d:e3:68:
83:a2:f6:8b:0c:ab:ed:65:72:5d:7c:05:bd:5c:2b:2d:a1:2b:
84:1e:71:4b:41:d8:c8:e9:0c:04:c1:e2:2d:6a:a9:c7:61:50:
62:c7:fd:0e:75:6d:d3:df:0f:a0:c9:47:6a:31:c1:ba:59:41:
e6:05:e4:16:fd:7f:37:8b:1d:36:3b:8d:34:b3:e3:a3:23:f0:
1f:54:70:04:3e:fa:23:89:28:f3:97:dc:f1:14:8c:c2:a7:84:
a1:69:3b:20:70:65:57:a1:6a:ef:58:3d:b1:1d:30:fe:c7:65:
b2:5a:b3:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 16:38:49 2025 by rpki-client