Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
File: jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft (raw, json)
Hash identifier: /i3cDL8DU2q2FCkVUmpcdawKetKvu1mdCdazpMs1Qqg=
Subject key identifier: 01:D5:14:BB:F8:66:48:34:7C:40:6B:1B:CA:A4:B1:A4:45:25:E3:D9
Authority key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
Certificate issuer: /CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Certificate serial: 0199FDDA32BC178C745A649410561369B981
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
Manifest number: 08FD
Signing time: Sun 19 Oct 2025 19:02:39 +0000
Manifest this update: Sun 19 Oct 2025 19:02:39 +0000
Manifest next update: Mon 20 Oct 2025 19:02:39 +0000
Files and hashes: 1: jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl (hash: XjrN9qdCkjkxYOY/qCrUOoDXNN2416RZZyIuxQ2xj64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Oct 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:fd:da:32:bc:17:8c:74:5a:64:94:10:56:13:69:b9:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Validity
Not Before: Oct 19 19:02:39 2025 GMT
Not After : Oct 20 19:02:39 2025 GMT
Subject: CN=01d514bbf86648347c406b1bcaa4b1a44525e3d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:9f:58:fe:dc:e4:0f:b8:2f:58:30:91:5b:59:
8d:82:32:4d:a4:a8:3a:71:52:05:f3:4e:cd:18:08:
b0:9c:8b:a5:34:e4:36:9f:8d:ff:cd:42:12:4a:f6:
7c:90:e2:7e:20:60:3d:fc:e5:7e:31:14:a7:9c:af:
74:c5:f1:57:af:e6:70:47:15:93:2d:f3:b4:9c:ed:
a6:5b:88:e7:ea:fc:7c:1e:52:35:45:39:b7:74:9e:
c0:15:3c:67:98:12:c7:73:15:87:89:bb:e7:e4:18:
2d:96:00:9c:4a:2e:45:81:22:e9:78:f7:2d:ba:32:
eb:75:8b:dd:df:3e:1b:63:71:a4:2f:f6:8f:2e:2a:
71:b8:70:15:86:a6:36:42:33:dd:d8:db:d6:97:c0:
8a:b1:4f:0c:78:eb:58:a3:9c:48:20:37:22:7c:a1:
1a:99:46:cf:ce:a5:ef:ae:a2:6e:4e:01:66:e7:f2:
52:2b:dd:8e:20:0b:48:f1:9d:f3:72:8c:9f:81:55:
21:95:53:af:bc:35:03:dc:df:ce:c4:29:2d:8a:a5:
ef:c1:9b:10:96:f8:21:67:5e:62:1d:85:5e:2c:eb:
30:a7:14:55:01:32:e6:34:33:0e:09:34:78:85:5e:
6d:7d:a3:13:8c:40:42:30:58:1c:b0:60:1e:43:39:
e5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D5:14:BB:F8:66:48:34:7C:40:6B:1B:CA:A4:B1:A4:45:25:E3:D9
X509v3 Authority Key Identifier:
keyid:8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:14:95:ca:4f:b3:94:4b:d8:42:98:dc:1b:d4:b8:76:92:ab:
97:b9:fe:8c:18:74:61:95:04:94:45:26:1e:cc:85:39:e0:66:
4b:5d:8b:72:c3:42:eb:78:75:68:f5:41:96:82:4c:3c:ee:16:
e7:d5:82:48:22:ad:1f:42:d3:98:17:f6:67:11:d5:67:e2:e5:
1f:69:78:93:72:9c:33:3e:b7:08:c3:c4:4d:88:83:8f:35:02:
74:23:d4:5e:af:58:b8:d5:d9:c9:55:9e:44:0b:3e:14:4f:a1:
43:c6:38:1e:98:08:a8:15:fa:83:0c:5a:22:9c:42:59:7e:b7:
b9:7a:cb:70:29:df:a6:9f:ab:77:8b:82:13:17:a0:98:1f:7c:
0c:ce:18:e8:98:91:f3:0c:d0:13:20:bf:b2:d6:e2:47:51:b1:
fa:72:f5:4a:5e:80:52:c3:e8:25:42:f4:b7:43:2f:d4:88:c6:
91:af:67:68:8e:cb:4d:5a:8e:82:64:5b:fb:a7:18:e9:ab:d2:
70:83:ad:39:e3:61:63:92:77:bd:18:bb:b2:eb:9e:56:18:2c:
54:c9:b2:ca:80:ec:84:53:46:bf:61:a4:77:df:01:71:46:cb:
a2:ea:27:cd:a6:44:5c:9f:17:9a:ba:8d:3f:7d:80:66:3d:ac:
18:a2:92:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:15:31 2025 by rpki-client