Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
File: FAyGl-PS6UuFRiU9zyZJymAGKmg.mft (raw, json)
Hash identifier: MTlcBVWMnlG7kcN9sKXJAtTPiVturKuhwZ3PvEH5ve0=
Subject key identifier: 2D:F2:42:B7:96:6A:7B:73:5D:2C:8D:BC:64:A4:F9:96:D1:8D:AC:CE
Authority key identifier: 14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
Certificate issuer: /CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Certificate serial: 019844ACE575D0AD97BA13FD773883966912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
Manifest number: 15FA
Signing time: Sat 26 Jul 2025 03:00:38 +0000
Manifest this update: Sat 26 Jul 2025 03:00:38 +0000
Manifest next update: Sun 27 Jul 2025 03:00:38 +0000
Files and hashes: 1: FAyGl-PS6UuFRiU9zyZJymAGKmg.crl (hash: 4IH0rvt2n1x19+hkJ9mn3p9rSis2hffEfMUVzfigXB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:44:ac:e5:75:d0:ad:97:ba:13:fd:77:38:83:96:69:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Validity
Not Before: Jul 26 03:00:38 2025 GMT
Not After : Jul 27 03:00:38 2025 GMT
Subject: CN=2df242b7966a7b735d2c8dbc64a4f996d18dacce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:af:00:4f:ec:5c:65:91:e8:01:de:fc:35:2e:
3e:e5:81:98:d0:5f:2d:56:fb:2f:2e:3e:d6:68:e2:
16:38:f6:35:0a:52:8e:94:ae:62:7d:f2:b5:4f:2b:
bc:4d:80:de:ff:d8:bb:c2:25:0f:56:72:fe:85:67:
f0:27:1a:73:27:d2:51:92:96:fe:61:0c:a1:d6:d8:
4a:e7:fb:c7:d1:72:b0:5f:ca:45:05:20:f7:03:b6:
11:e5:bb:56:e7:c3:e8:ab:2a:75:ab:5c:cd:89:09:
17:bb:6b:2b:96:a0:5a:3f:bd:e5:f0:c1:e7:6d:fd:
a3:89:f3:64:4b:08:09:28:d3:3b:c9:f8:2d:9b:bc:
ed:ea:b7:af:c9:67:ea:4f:58:6b:ea:8f:30:fe:55:
be:1c:29:54:31:51:57:88:3d:7e:51:0c:56:ba:90:
ee:45:2c:33:55:8d:aa:32:2c:3e:04:66:ba:9f:57:
11:77:5d:f1:bc:88:fe:cf:ef:f3:b4:76:a9:1a:57:
0c:50:9f:a7:c5:39:f2:08:0f:33:02:9c:65:09:f4:
f8:dd:ea:80:58:14:cd:c0:9d:63:e9:d8:46:67:5e:
dd:80:aa:a7:d5:93:ef:7e:5a:59:87:47:55:7b:84:
df:54:a1:21:c3:22:c1:6e:82:85:16:c0:c3:e7:14:
31:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:F2:42:B7:96:6A:7B:73:5D:2C:8D:BC:64:A4:F9:96:D1:8D:AC:CE
X509v3 Authority Key Identifier:
keyid:14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:33:0f:70:b6:b8:13:0e:24:47:e7:fe:7a:f4:96:ce:9e:5c:
f3:aa:fc:f1:43:59:a2:09:aa:2b:11:5d:71:12:c7:d7:5b:cf:
39:62:7a:06:d6:42:dc:55:de:8e:62:11:ce:6e:0e:7b:d1:be:
0c:25:7d:66:07:26:de:42:e3:86:32:37:13:68:ee:a4:ff:80:
e9:37:de:48:43:2a:8d:cf:c7:ed:9c:ae:8c:1b:da:34:a0:99:
4c:92:14:28:52:a0:13:ae:4b:20:89:a9:71:cc:13:65:53:41:
04:46:96:50:10:72:5b:6f:05:17:cb:ee:e3:06:83:d5:00:8c:
9e:a8:83:4d:05:fc:7d:74:6d:9d:66:9f:d8:69:c9:29:1e:80:
2c:13:8e:d8:33:03:28:60:09:5b:e9:26:5b:96:bc:4f:3b:0e:
9c:fd:54:a3:1d:f2:87:62:3e:20:36:1c:2a:33:88:3b:6f:bd:
04:b9:79:89:b5:5d:7e:ce:e2:e5:ef:8b:de:48:80:67:b2:91:
3a:93:c6:15:40:41:1e:2d:a4:5c:0f:b0:54:74:cc:67:0a:af:
94:06:ce:ad:25:93:17:5b:c1:47:25:6c:78:70:0b:57:eb:fc:
55:2e:a7:0f:f3:04:32:9b:2a:b3:01:1f:78:5c:35:a2:6d:c4:
4e:56:62:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:20:21 2025 by rpki-client