Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
File: jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft (raw, json)
Hash identifier: Q3qXF2A7nCc8fIW3W/SNrlnZCZojMDc13yWlXbi+sOU=
Subject key identifier: 88:84:E5:6A:02:1F:64:7B:43:5E:EF:D8:F8:04:34:04:EB:C8:9C:A8
Authority key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
Certificate issuer: /CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Certificate serial: 0197B6A095F0C19E92E3F8A728ECBE5E043C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
Manifest number: 07CF
Signing time: Sat 28 Jun 2025 13:01:06 +0000
Manifest this update: Sat 28 Jun 2025 13:01:06 +0000
Manifest next update: Sun 29 Jun 2025 13:01:06 +0000
Files and hashes: 1: jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl (hash: pZizBnbzOKDCH8kn5MxoW33thabDjzx7vQfju8pf/+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:95:f0:c1:9e:92:e3:f8:a7:28:ec:be:5e:04:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Validity
Not Before: Jun 28 13:01:06 2025 GMT
Not After : Jun 29 13:01:06 2025 GMT
Subject: CN=8884e56a021f647b435eefd8f8043404ebc89ca8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:45:8c:f2:7e:34:e5:15:86:f7:93:80:24:73:
63:e1:90:59:5e:a1:12:2d:6c:62:c5:6a:fd:dc:04:
47:78:d0:3f:44:d5:aa:1d:2c:12:86:ca:6b:14:c9:
8c:b7:0c:d0:b8:3a:50:e4:f7:56:9f:00:ee:a1:2e:
04:0c:a7:8f:1e:2c:9c:35:01:6c:64:02:7c:1b:0d:
5a:fb:bc:5d:20:84:c9:15:c8:c2:37:0b:1f:8d:28:
f2:78:0d:1b:86:8f:2d:47:26:44:31:35:7b:4b:8d:
f9:24:56:07:a8:38:5e:6a:d6:de:7a:d3:24:f0:8e:
a4:db:5a:28:aa:16:6c:bb:85:26:d1:92:33:72:2c:
de:b0:bd:98:f6:80:e5:7f:78:98:47:5e:53:64:ba:
a1:7d:ff:a4:fe:f7:2b:66:4a:f5:d0:1d:7f:49:df:
eb:ce:57:2f:73:32:aa:1b:57:8e:58:56:2d:40:ae:
d2:95:6b:f5:08:a6:8f:d3:37:26:28:63:87:07:8f:
99:ea:ce:e0:0b:c5:6b:bc:da:8a:af:ce:c2:93:99:
f5:91:36:c7:ef:ca:84:a9:5e:ed:96:49:4f:2a:17:
f1:09:4c:45:dc:1a:80:73:63:de:0f:e3:a7:4c:81:
3e:3c:68:a4:aa:bf:67:1c:cf:e4:3c:0f:ff:59:b0:
12:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:84:E5:6A:02:1F:64:7B:43:5E:EF:D8:F8:04:34:04:EB:C8:9C:A8
X509v3 Authority Key Identifier:
keyid:8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:71:a8:4e:87:81:5e:cc:00:c7:f4:1b:a0:37:e1:15:72:84:
f3:66:1c:d0:47:99:56:16:cd:9a:0c:52:e7:bc:58:4e:de:85:
4e:8f:0d:f7:30:5d:86:9f:a3:19:97:d8:8e:76:12:71:6a:62:
b7:16:28:aa:09:72:41:bb:8b:e4:a9:6d:1c:47:e2:c7:cf:65:
7f:da:25:7d:2c:3f:44:16:3c:1c:ed:37:df:c9:2d:21:fd:29:
fc:53:5e:b2:31:2b:0a:44:14:1a:db:d4:d4:f3:89:4f:d9:57:
ce:34:63:53:66:bc:db:73:c6:60:af:44:3c:ca:1e:a2:2e:18:
9a:ad:68:ef:a9:4c:11:ae:f7:ed:f3:c0:a8:fe:42:ce:0c:f3:
4d:3e:47:5a:34:33:ee:c7:7b:01:01:8a:b9:87:b4:49:fe:ec:
9e:7c:39:76:04:4a:9b:c2:d0:e6:16:98:91:03:22:90:75:9f:
16:f8:2f:ca:9c:d1:ec:b6:73:55:c8:88:ab:e2:aa:8f:10:a2:
bf:04:af:00:25:03:09:d9:af:be:69:0a:c3:29:1f:35:62:8c:
13:26:7b:93:8c:42:ad:21:b2:0e:8c:1b:7a:af:16:6a:71:18:
6a:f6:00:0c:04:d6:42:eb:ed:8a:5d:61:28:2f:f1:bf:fb:97:
f9:e5:e0:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:30:38 2025 by rpki-client