Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
File: jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft (raw, json)
Hash identifier: 2iwMA4PZsa8mbfOXRAg5jF9Wu7VVnRKpIXtzBh6SYvE=
Subject key identifier: 08:F4:8F:78:E9:31:CC:EE:14:E6:08:60:5A:58:31:77:C3:45:8E:86
Authority key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
Certificate issuer: /CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Certificate serial: 0197711A6F7425EB3E17A77A93F91044D817
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
Manifest number: 07AB
Signing time: Sun 15 Jun 2025 01:00:47 +0000
Manifest this update: Sun 15 Jun 2025 01:00:47 +0000
Manifest next update: Mon 16 Jun 2025 01:00:47 +0000
Files and hashes: 1: jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl (hash: 65nf48qVQm9NUfocgnHKCeXW3ZDbZhWWIa2n530BrTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:6f:74:25:eb:3e:17:a7:7a:93:f9:10:44:d8:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Validity
Not Before: Jun 15 01:00:47 2025 GMT
Not After : Jun 16 01:00:47 2025 GMT
Subject: CN=08f48f78e931ccee14e608605a583177c3458e86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:0b:ef:ac:21:ef:b9:64:a9:d5:0b:05:b6:87:
2c:b0:b3:45:52:78:6c:f4:de:0c:03:d6:8e:cf:e0:
4a:b1:48:6e:6f:35:fb:fe:19:2b:be:e7:02:2e:5f:
4c:d7:67:5f:cc:55:e1:af:a3:52:cf:7e:c2:ac:dd:
b5:06:d0:39:0a:5f:4b:80:da:40:cd:ca:d4:69:45:
e5:5a:c3:ff:be:35:d9:d0:78:59:9f:ce:33:b9:65:
b8:db:0d:c8:a3:28:23:4f:67:61:cf:cd:e7:5d:e9:
67:5e:04:6e:e0:aa:f4:43:36:22:f9:59:06:e5:35:
38:d5:b8:84:1b:75:ce:9f:73:53:d3:14:f2:14:ad:
de:a0:ab:d7:86:e1:cf:db:30:70:04:41:d6:f0:ef:
28:80:45:c6:da:46:9f:b9:66:25:56:82:44:3e:ea:
c1:d7:d1:2d:5d:36:81:65:92:f8:c7:21:a5:97:8b:
8c:d1:5a:cd:59:94:e3:90:d9:88:36:a9:40:b0:2c:
eb:a5:ce:b9:49:b8:8a:bd:7d:d0:69:54:e4:0b:84:
5e:4f:6f:62:32:ad:9b:75:c1:47:95:ba:24:c7:08:
04:69:87:b6:4b:e6:5d:06:d5:0c:c0:13:53:88:43:
77:ed:27:04:0e:0c:61:8e:57:b4:3f:c1:c8:67:65:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:F4:8F:78:E9:31:CC:EE:14:E6:08:60:5A:58:31:77:C3:45:8E:86
X509v3 Authority Key Identifier:
keyid:8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:a8:09:84:fb:b1:cb:b6:e5:6a:55:a6:56:44:26:3e:1d:ef:
d7:e4:b7:b3:42:9f:5e:e3:27:10:87:6c:9a:d9:8b:fc:f0:f6:
34:d1:4f:6e:da:2e:2f:f8:c7:ac:c8:19:b1:6b:e3:8b:8d:03:
bd:f1:de:66:bc:ec:63:b9:8a:93:43:cf:0e:6f:1a:ee:1c:ad:
e2:58:9d:c4:96:8e:4d:28:57:c3:ee:42:ee:8e:0a:62:69:79:
e7:12:c2:d5:fe:14:e3:e1:3f:95:16:c1:db:a4:fa:22:d7:40:
f3:e8:3f:02:42:bc:3b:9a:ea:a6:04:bc:e4:dc:71:61:07:1b:
80:d3:af:54:5c:2c:e8:d2:6c:55:27:56:d5:06:96:5b:e8:41:
62:13:08:eb:dd:43:bb:7d:e2:e0:25:f7:88:38:30:91:21:64:
9c:62:3f:31:56:43:85:41:94:50:61:d3:55:bd:06:d4:8f:73:
63:ba:ba:30:78:12:09:00:71:ad:0b:d3:10:4c:e4:49:aa:6d:
e5:89:4f:7e:32:14:36:c6:d2:14:fc:c4:df:7c:c6:84:0f:46:
e7:d0:e1:a5:4e:df:e9:3b:0f:c9:94:ec:0c:74:f6:d8:79:68:
d9:70:a6:f2:0a:f9:61:8b:5c:63:39:46:66:db:d0:81:50:28:
e4:5f:a0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:46:08 2025 by rpki-client