Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
File: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft (raw, json)
Hash identifier: si9h460PnmsTS0ikNOrKVEdn93Im3kYBk4rjSwcOJ90=
Subject key identifier: AF:24:66:BA:D2:4F:42:56:E0:11:BF:DC:11:B2:2F:28:D3:C8:90:73
Authority key identifier: FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
Certificate issuer: /CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Certificate serial: 0197470C1B986A04E566A0426556F9D0F1FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
Manifest number: 10FA
Signing time: Fri 06 Jun 2025 21:01:05 +0000
Manifest this update: Fri 06 Jun 2025 21:01:05 +0000
Manifest next update: Sat 07 Jun 2025 21:01:05 +0000
Files and hashes: 1: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl (hash: mpah+BY60lukoldqUR5TUaQ35xN/LNj9YXciON0pPaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:1b:98:6a:04:e5:66:a0:42:65:56:f9:d0:f1:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Validity
Not Before: Jun 6 21:01:05 2025 GMT
Not After : Jun 7 21:01:05 2025 GMT
Subject: CN=af2466bad24f4256e011bfdc11b22f28d3c89073
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:4d:11:b7:6c:8b:d8:87:85:67:c3:2c:91:6f:
c9:52:09:4d:16:a3:20:fa:be:ce:4a:55:81:56:08:
b1:08:19:e0:c4:84:22:85:c1:8a:45:a5:3e:0c:b4:
5b:d9:6a:42:55:cf:40:58:1e:be:9c:08:d4:2f:44:
9e:af:2b:66:c9:46:6d:92:19:7e:14:fc:4d:98:d7:
3f:5b:2c:c2:6d:c6:63:aa:c5:1f:88:e3:57:b2:e5:
26:c5:17:7f:68:fc:5b:bd:02:f0:ab:c2:5e:fd:73:
11:2a:04:42:d4:3d:5c:67:9f:35:f5:f2:bb:37:b0:
46:d8:55:38:cb:b3:71:02:48:59:6b:dc:1a:8b:b3:
9f:14:49:00:6c:6d:ac:03:4d:fb:45:ec:ef:86:72:
64:b4:00:1d:b6:52:d9:1b:f1:f3:24:3d:86:1a:37:
f7:f4:60:bc:3a:47:17:52:d9:a7:49:90:96:88:5b:
48:66:a8:dc:dd:68:a0:9b:3f:fa:72:62:9d:2c:ad:
66:fb:14:90:6d:44:72:5d:11:92:eb:63:63:46:63:
79:db:29:60:4f:41:5b:58:c6:c4:59:5d:4a:93:55:
2d:6c:f5:fc:17:0c:ca:a9:bc:57:a0:36:8c:f6:a6:
4b:5d:48:54:ad:d2:77:70:d0:0f:77:de:9a:1a:eb:
3e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:24:66:BA:D2:4F:42:56:E0:11:BF:DC:11:B2:2F:28:D3:C8:90:73
X509v3 Authority Key Identifier:
keyid:FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:67:89:bc:07:28:69:13:6b:07:35:bc:72:ab:23:90:07:f0:
01:0e:d7:dd:28:3f:8e:22:0d:54:77:05:b4:39:ef:bb:f7:64:
80:dc:2e:53:9c:65:fa:4f:09:37:0c:c2:c1:96:73:92:34:dc:
69:0b:81:cb:56:27:56:7e:ce:f1:33:e3:5f:cb:da:45:8f:0e:
66:0d:c6:f2:b1:88:e5:25:94:6c:41:98:82:69:9f:ab:4a:0f:
87:a5:32:4f:99:05:b9:73:ea:92:5e:dc:dd:88:e3:f3:52:6c:
fb:8f:c6:84:67:0b:54:ff:20:b3:02:f9:31:23:c1:59:93:a0:
bd:ed:dc:74:f2:c9:81:17:a1:c6:b1:1a:7e:a2:cf:f6:1a:45:
ae:e1:2e:4b:6c:39:3f:f3:d4:0f:70:84:25:d5:46:be:b9:47:
c8:5e:c8:68:05:07:f5:bb:9d:60:ea:e8:1c:e3:d4:75:1b:92:
ee:12:d3:f5:c2:69:80:a2:c6:37:6a:c5:4d:b8:90:38:52:38:
2c:a0:78:58:7e:3b:64:67:6f:b6:88:6b:1c:ee:33:2f:41:e6:
ba:a5:e2:0b:48:78:16:a2:b9:8a:2d:c0:20:25:84:9b:27:fd:
00:07:6a:a7:e7:5b:6d:dd:ba:31:1e:06:07:b5:23:b8:ba:aa:
e0:ef:d8:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:03:56 2025 by rpki-client