Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
File: jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft (raw, json)
Hash identifier: tmaTpPwu42+Vl+KCaQGym6XfPdsxxz4C73I0wsoIrQ0=
Subject key identifier: 51:31:51:BC:5D:26:E8:FF:6F:51:F8:F5:1D:61:61:AE:49:C7:3E:77
Authority key identifier: 8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
Certificate issuer: /CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Certificate serial: 0198D47401C2C5AABBECE591107449AF996D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
Manifest number: 0863
Signing time: Sat 23 Aug 2025 01:03:49 +0000
Manifest this update: Sat 23 Aug 2025 01:03:49 +0000
Manifest next update: Sun 24 Aug 2025 01:03:49 +0000
Files and hashes: 1: jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl (hash: uBvntP/N/WITdQoqEe1+wuJZF67bb2ngaOhNF/hCnT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:74:01:c2:c5:aa:bb:ec:e5:91:10:74:49:af:99:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c57dcc7e52f58b342b70c83daa21a106ac59291
Validity
Not Before: Aug 23 01:03:49 2025 GMT
Not After : Aug 24 01:03:49 2025 GMT
Subject: CN=513151bc5d26e8ff6f51f8f51d6161ae49c73e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8d:58:f0:b6:20:2d:1b:45:3b:b6:99:a4:c7:
28:b2:b7:81:d8:62:73:f4:0b:d1:36:6b:84:99:3f:
c6:c3:e8:ad:c4:3f:e8:d7:a4:6a:17:1d:a0:d9:26:
db:57:88:2d:67:4b:5e:25:bb:89:14:87:7f:06:25:
52:8e:0c:72:ff:1a:3b:62:88:66:c3:fe:6a:2b:38:
d3:d5:d3:a4:6d:14:fb:dd:ce:14:19:f5:74:cf:25:
f5:51:4d:eb:e3:63:0f:ac:b3:35:ed:4f:89:c7:94:
60:8f:bd:21:9b:79:62:1e:01:31:e8:c8:cf:22:42:
bf:79:11:5b:b8:1c:10:c8:b9:c0:ce:79:8b:9a:0e:
fc:fb:73:af:31:ed:e9:15:75:c3:7e:48:2a:14:69:
8d:b1:66:24:97:51:fc:25:29:0d:9d:e8:70:96:f1:
71:f0:c3:f1:b6:4d:af:af:44:71:5e:1f:0e:3c:c3:
03:a9:6e:aa:67:5a:3f:5e:e7:96:22:25:72:68:96:
71:0b:e0:ae:10:8f:86:6a:14:cf:08:ac:9b:6e:02:
f0:46:2c:97:1c:5c:4b:7c:2c:d4:03:c1:ce:c4:49:
82:df:67:ef:4a:98:7e:e2:f8:66:ee:c0:8c:f3:6a:
ff:7f:33:63:4c:40:f9:eb:bb:2d:0f:f9:4a:81:1b:
2c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:31:51:BC:5D:26:E8:FF:6F:51:F8:F5:1D:61:61:AE:49:C7:3E:77
X509v3 Authority Key Identifier:
keyid:8C:57:DC:C7:E5:2F:58:B3:42:B7:0C:83:DA:A2:1A:10:6A:C5:92:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFfcx-UvWLNCtwyD2qIaEGrFkpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/e83399-0a14-42ac-9fd6-41306c27d6f0/1/jFfcx-UvWLNCtwyD2qIaEGrFkpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:47:6a:7d:b6:bd:e5:e5:4d:fc:31:1d:01:fb:1c:fa:e7:01:
6a:4d:61:e2:bd:35:e6:4b:b9:8f:6b:e6:e4:db:4a:e8:07:65:
cc:5f:a5:b8:47:be:67:c9:2f:d0:81:14:c0:bb:fc:bc:83:5d:
33:fc:b2:dc:aa:48:df:81:e2:3a:ec:3d:2f:93:89:df:97:18:
c9:1f:05:15:37:18:82:48:ae:99:40:0c:ca:d8:8a:5a:9a:d1:
64:51:d8:d2:6d:f7:61:1f:90:4f:5b:b4:47:08:6c:72:57:01:
70:b2:cc:2b:d3:ff:19:91:09:57:5f:58:8e:7c:74:89:79:26:
10:a2:bd:b5:f6:11:dd:89:f7:7b:b4:55:f0:15:c6:34:7e:7e:
04:e3:d0:49:6a:a4:8d:63:fd:c8:79:c0:e6:8e:8f:80:8e:03:
91:f1:20:ce:f2:2e:10:8b:b9:87:a3:86:da:52:0d:f4:de:20:
fd:c1:b3:cb:24:90:eb:83:11:19:b7:8a:37:7b:86:57:42:4d:
e0:69:ba:13:9f:ff:c3:12:c1:85:65:4d:93:5f:3b:58:ff:cd:
a5:b9:38:17:95:1b:24:17:5e:85:45:17:6d:8b:ee:ff:b3:ae:
04:25:76:78:20:5d:be:1c:ac:62:61:1c:dd:8d:53:cc:3c:b7:
cb:af:b8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:31:46 2025 by rpki-client