Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft
File: JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft (raw, json)
Hash identifier: IDwBPFpFg644f5euIPCGXH2O+GNoKKZ/YDLpzBStjjk=
Subject key identifier: F8:7E:8C:E1:FC:7D:27:95:B9:43:45:B4:A6:56:89:5F:0D:F4:8B:23
Authority key identifier: 25:FA:5F:C4:62:74:ED:CD:E5:CD:CE:B0:A9:48:DB:12:0E:33:92:19
Certificate issuer: /CN=25fa5fc46274edcde5cdceb0a948db120e339219
Certificate serial: 01976DE2B5C30D9A603488A52A9651032578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft
Manifest number: 64
Signing time: Sat 14 Jun 2025 10:01:03 +0000
Manifest this update: Sat 14 Jun 2025 10:01:03 +0000
Manifest next update: Sun 15 Jun 2025 10:01:03 +0000
Files and hashes: 1: JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl (hash: ipc8mOU5TLXjis+fDYvfmvLbhe9c7gUIUksZBnO3A6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:e2:b5:c3:0d:9a:60:34:88:a5:2a:96:51:03:25:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fa5fc46274edcde5cdceb0a948db120e339219
Validity
Not Before: Jun 14 10:01:03 2025 GMT
Not After : Jun 15 10:01:03 2025 GMT
Subject: CN=f87e8ce1fc7d2795b94345b4a656895f0df48b23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:d4:16:40:87:14:cd:ce:79:40:57:a1:f9:
c6:25:9b:86:a6:44:bc:ae:67:8b:0b:dd:fe:b1:66:
f8:22:01:f4:7d:de:f6:2b:72:d4:cb:b6:9b:05:1b:
a6:b8:40:db:11:de:dc:3e:70:07:52:86:f6:a8:98:
05:af:d6:0f:f3:b8:00:31:1a:89:98:d7:2d:53:ab:
57:d9:24:d2:8d:8c:c6:75:4a:e9:f7:10:dc:c9:5a:
dd:95:8e:cc:a1:63:96:fc:b1:e7:18:df:63:f0:95:
b4:19:cd:a9:1d:f4:33:ef:dc:d5:fb:2f:f9:ae:85:
7d:b8:c0:3f:9a:69:65:a8:16:a5:cc:7c:71:77:b4:
6a:12:bf:de:14:e6:c4:90:8a:b4:a2:e9:21:c6:2d:
a4:a4:21:2d:3e:a4:19:f6:dd:3a:d1:bd:6c:66:ef:
42:48:67:01:5d:a9:0b:b0:6a:67:08:ec:0a:cb:7f:
58:2a:9c:27:c9:06:9e:a4:b4:42:c8:a3:6e:02:d5:
bc:63:aa:5e:44:a6:42:85:4f:59:8c:98:69:2b:97:
f5:59:9e:59:47:a3:8c:1e:12:18:be:61:c8:ba:c0:
00:bd:be:ad:96:be:7d:65:c9:45:42:82:4a:dd:ee:
90:a3:1d:2c:25:04:7c:76:7a:b4:46:31:42:34:c9:
3b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7E:8C:E1:FC:7D:27:95:B9:43:45:B4:A6:56:89:5F:0D:F4:8B:23
X509v3 Authority Key Identifier:
keyid:25:FA:5F:C4:62:74:ED:CD:E5:CD:CE:B0:A9:48:DB:12:0E:33:92:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:93:c8:00:20:a8:e3:3e:e7:e5:40:fe:27:f7:69:33:db:02:
a4:ee:7c:b9:9b:40:44:54:bc:ab:5c:69:4e:b1:a1:5e:95:be:
46:b5:72:48:8d:a2:b0:49:8c:4b:04:f7:c2:38:24:7d:a9:81:
88:b3:49:85:82:0b:fc:59:63:4c:eb:0c:e2:c7:7b:ed:25:a0:
b6:00:e7:9c:e8:27:6b:ef:6d:b1:2e:de:69:28:93:5f:f5:22:
a8:88:25:b4:68:14:77:33:12:a4:ef:71:c0:8f:24:39:d9:bd:
72:ec:e8:d5:1c:d4:c6:e7:0e:6e:55:1f:03:06:c0:8c:31:4a:
a0:cd:ad:e6:1f:bf:25:d8:6b:a6:b7:cc:17:41:c9:4e:61:2c:
44:1d:88:f0:5f:c4:e0:e9:5f:46:53:ab:34:cb:0f:d6:ab:fd:
59:17:dc:c0:b0:b6:c2:c0:2f:44:00:b9:52:88:b2:70:5a:30:
07:fc:a7:c4:f3:f5:3e:e3:cc:95:fa:bf:2c:6b:a8:8d:49:68:
84:24:7f:cb:46:46:cf:4d:69:bc:b8:bf:7c:0b:be:06:4b:80:
35:f2:bd:0a:bd:52:85:24:c9:eb:6b:6f:f5:0b:40:00:70:ec:
19:7a:0c:28:32:2f:2d:62:da:bf:bb:ad:e8:11:94:32:de:85:
6f:41:7a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 20:10:19 2025 by rpki-client