Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
File: FK_dm9_GCroGLnxVwq4ukYoynMo.mft (raw, json)
Hash identifier: po2bp8xbV7A8tW7sQ99Q8hdxTld447cMSGH5dqgeg5s=
Subject key identifier: 5C:B2:DD:C2:CB:BE:CD:53:23:2F:C3:04:EA:B2:F3:78:47:E3:2B:98
Authority key identifier: 14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
Certificate issuer: /CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Certificate serial: 019921E7D8B54090C0214E064CC1A2CCC61E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
Manifest number: 0A83
Signing time: Sun 07 Sep 2025 02:01:06 +0000
Manifest this update: Sun 07 Sep 2025 02:01:06 +0000
Manifest next update: Mon 08 Sep 2025 02:01:06 +0000
Files and hashes: 1: FK_dm9_GCroGLnxVwq4ukYoynMo.crl (hash: 4HTyHRGvNfu9XYrHpWRYeDxnG5mnCsuO1C2nedSdiEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 02:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:e7:d8:b5:40:90:c0:21:4e:06:4c:c1:a2:cc:c6:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14afdd9bdfc60aba062e7c55c2ae2e918a329cca
Validity
Not Before: Sep 7 02:01:06 2025 GMT
Not After : Sep 8 02:01:06 2025 GMT
Subject: CN=5cb2ddc2cbbecd53232fc304eab2f37847e32b98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:29:85:e3:70:a1:a7:b4:6f:03:b1:a4:c2:74:
8d:78:eb:67:ef:a5:67:57:ce:08:11:70:b2:0c:ed:
ac:98:d9:b4:29:7a:e7:bd:20:51:ea:c7:ed:32:6a:
4c:9f:bb:35:ad:e1:7c:1b:a8:36:96:a6:ca:48:4c:
ca:d1:d9:96:8a:57:90:bb:40:02:de:71:b8:1f:b2:
f7:70:22:4d:6e:56:4a:3f:bd:b1:6a:b2:b1:57:42:
7b:a6:2f:dd:f4:f5:1c:ac:56:52:e1:86:a7:c8:76:
7d:f4:16:a7:e1:29:82:b4:f6:12:3a:92:bf:a3:cd:
52:80:ee:fb:b5:fc:f7:64:05:e7:e5:0e:2b:26:7b:
05:73:81:cc:1d:be:8d:af:50:1d:29:eb:b9:78:db:
b1:75:5e:97:42:aa:db:bc:48:14:46:c1:b0:1a:b9:
86:65:7b:35:ce:d1:76:f1:f3:45:eb:d9:02:d3:aa:
19:7d:d3:57:e1:f3:50:f0:e0:30:21:36:8e:c6:5b:
79:a5:c6:19:54:f9:a5:ee:f2:a6:f4:5d:b2:e4:b4:
d1:2f:68:a1:df:4a:4c:54:a8:3e:c7:22:0b:5e:bc:
49:9f:6d:ec:61:49:a7:df:52:88:3d:cd:2a:47:07:
af:3a:e7:8b:c5:6c:85:09:88:58:4e:10:86:a7:37:
5e:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B2:DD:C2:CB:BE:CD:53:23:2F:C3:04:EA:B2:F3:78:47:E3:2B:98
X509v3 Authority Key Identifier:
keyid:14:AF:DD:9B:DF:C6:0A:BA:06:2E:7C:55:C2:AE:2E:91:8A:32:9C:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FK_dm9_GCroGLnxVwq4ukYoynMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/c22f8c-e113-4d55-bcc5-e670271ee141/1/FK_dm9_GCroGLnxVwq4ukYoynMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:01:b1:e2:3d:4d:f7:d9:c2:b3:4b:04:5b:fc:b1:9b:38:ba:
6f:cb:e5:d1:2e:9d:60:d7:32:36:d5:7f:4b:6a:b3:ec:9d:40:
5a:43:78:9c:f0:ba:69:18:20:45:0d:8b:87:12:b2:54:f0:69:
1d:40:a8:db:42:82:a3:62:e7:ef:c3:82:41:c6:f9:1d:86:b7:
67:05:6e:67:9b:a2:77:30:61:e3:e4:52:52:8d:66:ec:f2:c7:
97:5b:bc:12:8d:e2:98:66:2d:67:2e:4f:bf:c4:22:06:02:6e:
a5:1d:da:1a:95:de:3c:06:80:ac:2e:29:6a:0b:1e:77:26:a4:
89:84:40:17:c5:8d:2d:a6:22:8e:02:a2:d2:5e:56:59:ea:12:
18:1f:ed:5a:1c:5e:0c:3b:9b:4e:cf:bd:27:7c:08:6c:14:1a:
e9:cb:7c:12:46:0e:3b:3f:73:7d:52:5f:9d:39:84:8e:c7:c1:
f6:aa:25:b6:89:30:3a:86:66:18:d7:82:55:e9:60:56:3e:cc:
4b:f3:ec:12:bb:61:81:4f:8c:2a:fc:fe:94:a2:37:b1:93:06:
a8:37:b2:9b:67:39:e9:70:82:fc:dc:40:62:7b:77:be:17:31:
2a:8e:a4:d1:49:f4:07:6a:ac:ae:cd:b9:55:f2:fb:ce:b4:7f:
c2:4d:ef:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 12:30:49 2025 by rpki-client