Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
File: dJFafoze18DuIhnnMMGYy7eLxfI.mft (raw, json)
Hash identifier: 7COfSt0NDBwrNakYsve3hHmGaK1fj+lUWw1simWm970=
Subject key identifier: 7F:BA:3B:A0:2C:6E:69:39:A5:B0:3F:88:A5:0C:C5:38:8F:09:B6:23
Authority key identifier: 74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2
Certificate issuer: /CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2
Certificate serial: 0197BCA2CDD33A7668DDDCDC9EF59AB9C058
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
Manifest number: 011A
Signing time: Sun 29 Jun 2025 17:01:15 +0000
Manifest this update: Sun 29 Jun 2025 17:01:15 +0000
Manifest next update: Mon 30 Jun 2025 17:01:15 +0000
Files and hashes: 1: dJFafoze18DuIhnnMMGYy7eLxfI.crl (hash: uxCiplXpFamaI9iRE3bdeHhJR6/PoP8f4SkFxmUoOFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bc:a2:cd:d3:3a:76:68:dd:dc:dc:9e:f5:9a:b9:c0:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74915a7e8cded7c0ee2219e730c198cbb78bc5f2
Validity
Not Before: Jun 29 17:01:15 2025 GMT
Not After : Jun 30 17:01:15 2025 GMT
Subject: CN=7fba3ba02c6e6939a5b03f88a50cc5388f09b623
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3a:fd:b4:0a:7d:08:24:b5:f7:d7:f3:d3:8d:
fd:f0:ce:56:20:3f:10:6a:0a:23:bf:72:84:79:94:
2c:04:df:19:5d:29:9b:bf:69:91:e4:bc:e0:3f:d3:
75:8b:98:70:df:e8:0f:84:62:88:a5:71:bf:1f:8e:
bf:10:be:cc:67:56:ad:f7:a6:0b:63:27:9f:3b:db:
4e:a5:47:75:11:7a:6d:be:92:ac:55:27:82:84:d1:
ad:8d:40:07:e1:fd:c7:f6:7a:c3:1c:71:b8:8c:ba:
cf:6a:59:02:59:8e:df:dc:4b:43:80:9a:ff:f7:48:
a4:7b:03:8e:27:5e:d3:f0:77:38:fc:98:3f:73:5a:
ad:d7:99:b9:c2:12:7b:0b:67:23:50:9a:fe:bf:98:
ba:c1:c4:44:e9:09:8d:19:f1:76:1d:fd:36:48:f4:
2c:d1:f6:ba:f9:b8:b4:21:eb:f5:b7:c8:b0:9d:8f:
c5:65:ed:1e:c1:d8:19:69:e4:95:b0:dd:bc:4f:e8:
32:c4:db:e4:79:62:6a:78:29:ab:39:39:a4:20:dd:
a5:31:d5:ac:49:be:31:d5:d1:59:ee:33:7a:49:b1:
cb:e6:b4:57:b8:4f:4d:63:20:4f:e6:df:75:81:48:
9a:86:89:21:6f:51:cc:54:1a:32:89:58:97:a6:fc:
7f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:BA:3B:A0:2C:6E:69:39:A5:B0:3F:88:A5:0C:C5:38:8F:09:B6:23
X509v3 Authority Key Identifier:
keyid:74:91:5A:7E:8C:DE:D7:C0:EE:22:19:E7:30:C1:98:CB:B7:8B:C5:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJFafoze18DuIhnnMMGYy7eLxfI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7b1e42-468f-41e7-a9e7-0a2a8c6c95da/1/dJFafoze18DuIhnnMMGYy7eLxfI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:48:fa:ef:e4:32:5c:29:aa:76:ba:3d:dc:2f:e2:ae:38:0c:
50:34:c1:1f:f8:90:51:80:3e:2f:e8:8a:59:19:31:47:4c:03:
29:64:94:94:f2:5c:8f:7c:94:c9:9a:5b:fb:7e:96:4c:91:b4:
7f:c3:e5:1b:c3:55:7d:d9:f8:80:51:5b:77:8e:bc:26:15:2f:
38:56:59:79:11:1f:d9:13:1e:a6:81:ce:5d:62:95:1a:e2:3b:
2f:cb:85:8e:78:e6:28:04:94:ff:d0:74:f7:d4:2a:e8:ae:7f:
b7:ee:20:10:28:2f:e2:41:69:59:cd:4f:3f:0f:20:a8:a1:83:
e0:03:82:25:55:76:2a:bc:a0:06:e5:fd:05:d9:e4:a5:4a:f3:
c7:35:ae:4a:64:ac:18:c6:5c:2e:88:ef:f2:d8:ae:dc:e4:bc:
e4:c4:2e:b4:22:6e:97:ad:57:33:ef:0a:d8:f3:c9:7f:5f:6d:
3e:cf:f4:cd:e5:46:a3:94:71:99:8c:7c:7f:1a:40:27:96:2e:
cf:ac:91:44:6d:b9:36:21:96:6d:f1:59:67:83:06:26:91:20:
7e:7f:db:78:02:09:91:2e:c7:2d:09:1f:23:07:53:71:f6:ac:
dc:f4:d4:b2:2f:74:1d:a3:33:6e:6e:0e:54:d1:9d:6f:16:f2:
52:f1:e9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 20:39:59 2025 by rpki-client