Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft
File: JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft (raw, json)
Hash identifier: nOP7f8zdLNWdtvw89eJ9iTIVTNMhqBCwmXCt8YBwjAw=
Subject key identifier: 51:0E:8A:D4:1B:4A:8D:E7:C0:0F:68:5A:0C:F5:1F:3A:71:FF:CA:13
Authority key identifier: 25:FA:5F:C4:62:74:ED:CD:E5:CD:CE:B0:A9:48:DB:12:0E:33:92:19
Certificate issuer: /CN=25fa5fc46274edcde5cdceb0a948db120e339219
Certificate serial: 01984A09BB41AB97998222C5CC02EDD0472D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft
Manifest number: D6
Signing time: Sun 27 Jul 2025 04:00:08 +0000
Manifest this update: Sun 27 Jul 2025 04:00:08 +0000
Manifest next update: Mon 28 Jul 2025 04:00:08 +0000
Files and hashes: 1: JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl (hash: nRdTgIR2AsX5tf+RUi2x/LNXwgTFl8wLPOEBs8KI4Mg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:bb:41:ab:97:99:82:22:c5:cc:02:ed:d0:47:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25fa5fc46274edcde5cdceb0a948db120e339219
Validity
Not Before: Jul 27 04:00:08 2025 GMT
Not After : Jul 28 04:00:08 2025 GMT
Subject: CN=510e8ad41b4a8de7c00f685a0cf51f3a71ffca13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:b4:c7:b0:3e:9c:5e:16:e8:d3:54:d4:4c:
6d:fa:01:fe:99:d2:e2:a9:a3:fe:42:eb:35:10:25:
1d:d8:bd:87:fb:6a:79:c3:0b:73:1e:7c:16:09:3b:
16:0b:32:cb:f9:f6:bc:fd:75:a0:a7:a5:98:fb:80:
61:6e:92:4e:ac:d5:1c:26:7a:1b:ce:aa:39:5e:9a:
fa:41:cb:7b:aa:17:3c:00:2b:99:09:cd:b0:ec:ee:
7c:a1:f8:af:a1:61:dc:6f:f6:07:47:4f:95:5b:8c:
7d:3e:b8:6b:82:1b:6d:ed:e9:f8:36:77:6c:ed:28:
37:86:2e:15:cf:8b:12:62:09:89:bf:61:c4:e8:6c:
31:96:75:46:a4:bf:b6:4e:a7:e8:1a:d2:81:2f:98:
c0:8c:eb:b3:86:91:2d:21:ae:fd:e7:cf:43:25:50:
19:6e:c8:8c:9f:bb:d1:43:e6:6c:e4:4f:76:13:18:
0c:ed:62:07:ab:21:f5:12:75:ae:3b:ba:1c:8c:d2:
f4:f6:b1:57:8f:f4:0f:0d:d5:f8:67:9d:a6:af:47:
c4:63:53:29:7f:f7:5a:fd:44:b1:3f:bc:1a:c3:17:
92:12:8d:9c:15:53:41:07:da:40:b4:24:0e:7d:5f:
b1:b1:76:d2:0e:ca:7c:f2:43:05:f5:9e:64:2a:cb:
a5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:0E:8A:D4:1B:4A:8D:E7:C0:0F:68:5A:0C:F5:1F:3A:71:FF:CA:13
X509v3 Authority Key Identifier:
keyid:25:FA:5F:C4:62:74:ED:CD:E5:CD:CE:B0:A9:48:DB:12:0E:33:92:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfpfxGJ07c3lzc6wqUjbEg4zkhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/53f263-cf40-4dc5-8865-7dff48c11db6/1/JfpfxGJ07c3lzc6wqUjbEg4zkhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:84:42:aa:47:72:ec:1e:a7:02:aa:54:3d:35:60:20:1c:3e:
af:c3:d7:80:f5:ad:63:f7:f6:a9:6f:66:f0:1c:f2:8c:0c:2a:
92:07:a4:03:e9:3d:57:48:ef:e3:7b:1e:b0:55:e0:73:06:30:
55:f4:c3:1d:99:ed:b6:e3:41:b2:7a:86:12:40:5e:0c:69:39:
4f:73:be:ed:a9:10:08:69:58:5c:44:ff:5c:d6:1b:42:c5:60:
dc:3c:c9:2a:91:09:0c:ed:c8:eb:98:95:57:2d:33:94:ab:3c:
38:0f:30:06:ca:c6:2a:b2:06:d9:2c:ba:57:a5:15:fd:39:e1:
92:db:7a:f9:46:5b:51:61:42:b3:f6:03:0a:98:ba:2a:eb:00:
07:c0:be:96:91:10:76:5c:ad:7a:59:f6:3c:8e:15:9b:b4:a1:
9f:ef:62:64:57:7c:8e:56:9b:fa:79:dd:55:83:e5:b4:f9:a3:
2d:55:71:12:54:25:34:1c:47:d8:7b:28:f3:95:7b:8a:62:b3:
ba:99:cc:9b:42:f4:03:c2:c1:fd:be:13:ab:71:d3:5c:40:2c:
25:c6:51:af:e4:c9:54:93:7d:e3:29:39:b1:b5:91:93:66:15:
2d:74:3d:b1:17:c7:96:78:33:0a:88:55:ef:35:c0:78:8b:3f:
16:12:01:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:27:32 2025 by rpki-client