Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
File: jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft (raw, json)
Hash identifier: FR4VVgOAynZ14MpuauQyuBIGO7/gKm5rYTCikdVCxmo=
Subject key identifier: 71:1D:FD:9E:94:54:9B:7E:03:99:17:FB:0B:AF:11:C9:23:B7:6A:15
Authority key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
Certificate issuer: /CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Certificate serial: 0196B5C7A6863F276A77E685818B60D600C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
Manifest number: 074A
Signing time: Fri 09 May 2025 16:01:22 +0000
Manifest this update: Fri 09 May 2025 16:01:22 +0000
Manifest next update: Sat 10 May 2025 16:01:22 +0000
Files and hashes: 1: jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl (hash: CyfNo1iEH9WqZAiNMqxizIbNcRQIN5SGOXKAwYxu6zo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 May 2025 10:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b5:c7:a6:86:3f:27:6a:77:e6:85:81:8b:60:d6:00:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Validity
Not Before: May 9 16:01:22 2025 GMT
Not After : May 10 16:01:22 2025 GMT
Subject: CN=711dfd9e94549b7e039917fb0baf11c923b76a15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:db:7f:1d:ce:40:cf:73:b7:20:ff:0f:e0:81:
b0:cc:39:74:50:af:60:4a:da:6d:9d:19:c9:a2:dd:
f9:d1:fb:23:ed:84:e5:ba:81:84:dd:0c:69:fe:d6:
d9:d9:fa:20:8b:31:a1:73:0e:6e:66:89:8e:e8:74:
fb:fc:3b:f1:0e:5b:2f:d6:18:f2:e6:1e:5a:48:37:
83:b3:01:4f:05:65:ba:92:de:58:4e:aa:3e:ce:b0:
3b:1f:fc:16:4b:71:77:ab:83:a0:6c:29:78:88:45:
83:c0:9f:2e:49:dc:e0:f5:ec:c5:4a:a1:21:9f:cc:
4a:ed:bb:a3:ed:2f:d2:43:0e:52:43:99:f3:0f:3f:
ed:b1:05:76:08:f3:45:1d:a1:e3:7f:c4:90:66:ee:
04:b0:7b:9b:0b:cf:49:1a:f3:f1:9a:af:7e:d6:4f:
3e:11:3e:c3:4b:b5:0c:e4:9c:54:7b:a0:72:5a:22:
f3:ca:d0:4c:e9:12:63:c7:41:a8:3d:ec:dd:d3:fc:
5a:61:1d:82:e9:d4:a7:0e:8d:11:c2:33:da:0a:9d:
07:57:b5:16:ae:43:1e:77:ea:9f:88:55:1e:ac:13:
2f:84:f9:e3:15:eb:ef:0a:54:f5:e5:79:94:92:0f:
cb:60:28:14:f4:6e:e6:70:8c:68:8c:3a:83:99:cb:
38:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:1D:FD:9E:94:54:9B:7E:03:99:17:FB:0B:AF:11:C9:23:B7:6A:15
X509v3 Authority Key Identifier:
keyid:8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:0d:23:46:a4:ca:f9:63:76:3e:c5:6c:93:e2:81:c2:4e:da:
48:5c:ae:42:04:c3:d0:fd:c8:c4:64:54:49:f1:c3:8f:58:91:
91:d0:bf:cb:d3:f2:12:a0:6a:72:44:8f:65:e3:c2:1b:5f:5c:
42:65:88:46:58:46:ac:c6:91:8c:ec:8f:38:6c:f6:3f:ae:2d:
e0:6a:54:3b:b1:b4:31:01:c2:08:dc:e8:3e:f3:c7:c7:3d:bd:
88:a4:f5:a0:16:e2:29:b6:9e:d7:0e:15:ea:a0:71:e3:55:68:
17:62:05:be:fb:e7:66:81:e1:46:f1:5b:d2:18:2c:d9:25:52:
2d:b8:33:7b:5d:9b:eb:72:fa:f6:86:68:15:75:18:0d:e5:99:
25:5b:b5:4a:b3:87:65:1e:35:56:19:c5:51:6c:95:5e:4c:a9:
a9:14:31:3c:6d:33:a8:6b:41:46:a4:7e:a7:a7:4a:e9:24:11:
bb:b9:c6:28:63:f7:77:19:9a:e8:fb:ae:20:13:4c:d7:df:cc:
45:bb:10:81:a1:40:68:ea:5d:d7:f2:ce:b4:64:60:14:02:3e:
6f:11:69:f4:b1:28:c5:99:5d:3b:a6:fc:a4:a9:17:8e:53:b5:
44:91:b5:49:95:2c:b1:3e:42:22:77:66:02:f6:65:d9:eb:f7:
20:50:0d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 20:01:40 2025 by rpki-client