Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
File: fj-4U_hAs3cM0_pCs_nS-b59G38.mft (raw, json)
Hash identifier: h6KSgidlU8ZEwOkwPQwhg1qyDsSN3NOxdBjfjSXTIlA=
Subject key identifier: D7:38:95:4D:DE:66:65:F2:3D:00:6C:C8:4D:4A:F1:4C:28:A9:A7:98
Authority key identifier: 7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
Certificate issuer: /CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Certificate serial: 0199239F8D230485ADC02E31CB9F4EBD8885
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
Manifest number: 1524
Signing time: Sun 07 Sep 2025 10:01:22 +0000
Manifest this update: Sun 07 Sep 2025 10:01:22 +0000
Manifest next update: Mon 08 Sep 2025 10:01:22 +0000
Files and hashes: 1: fj-4U_hAs3cM0_pCs_nS-b59G38.crl (hash: tbTbnHew96HtKNhC/4rbAx3dKjNs8pbPp5ae/LQOYqM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 07:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:23:9f:8d:23:04:85:ad:c0:2e:31:cb:9f:4e:bd:88:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e3fb853f840b3770cd3fa42b3f9d2f9be7d1b7f
Validity
Not Before: Sep 7 10:01:22 2025 GMT
Not After : Sep 8 10:01:22 2025 GMT
Subject: CN=d738954dde6665f23d006cc84d4af14c28a9a798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:31:62:6c:95:be:d6:5c:3f:6e:1e:fc:c8:
cf:0a:3f:0c:7f:a7:03:84:fb:6f:18:0c:4c:b0:12:
50:92:62:0b:77:26:16:1e:d2:d0:18:77:12:ed:cc:
05:7b:db:22:5b:e1:3e:04:d1:e4:5b:fb:3b:e9:9e:
e4:2a:d3:d2:42:cb:ce:2c:53:b2:99:49:34:de:f1:
33:0e:8f:6b:27:72:ec:53:34:78:0e:9a:14:67:c6:
d3:7b:3c:f1:f9:a6:2a:17:e0:3d:84:dc:b3:26:4a:
3d:23:f1:1c:01:da:ad:2a:dd:6f:a9:53:b5:f5:1d:
09:cf:89:fb:c3:6e:3d:34:8f:0e:c9:8c:39:4f:ba:
31:9d:15:11:1d:5e:46:98:d9:dd:11:09:be:ea:67:
9c:ca:47:d8:29:09:d2:be:75:19:f0:95:bf:4d:d3:
b9:81:3d:6d:a2:b3:1c:44:ea:15:68:eb:15:02:56:
84:e1:ba:d3:60:c0:4e:bc:bf:73:cc:4b:9e:db:81:
1c:a5:5b:54:97:2d:bb:21:7d:d0:97:0f:28:c4:57:
b8:e1:30:a4:1d:29:4d:38:f3:2a:5e:3e:aa:34:49:
3f:df:92:1c:73:85:56:2f:88:cb:f4:40:a0:ee:05:
70:54:72:39:af:0a:50:9e:be:c9:15:b1:54:9a:6f:
8d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:38:95:4D:DE:66:65:F2:3D:00:6C:C8:4D:4A:F1:4C:28:A9:A7:98
X509v3 Authority Key Identifier:
keyid:7E:3F:B8:53:F8:40:B3:77:0C:D3:FA:42:B3:F9:D2:F9:BE:7D:1B:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fj-4U_hAs3cM0_pCs_nS-b59G38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/eddeae-b59b-41bb-8fd6-163f0e077f23/1/fj-4U_hAs3cM0_pCs_nS-b59G38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:24:bf:5d:61:b1:d5:58:f2:79:fc:7c:fe:fa:12:c2:28:4d:
44:34:a4:a3:2c:f7:f0:41:78:ab:58:52:f0:ac:5b:28:4b:a4:
8c:0f:fc:ce:f3:54:d4:15:5c:57:aa:69:d1:c0:99:65:70:a7:
2a:35:73:bd:0b:24:3f:d4:67:55:b8:5f:0a:df:1b:ad:13:45:
f0:f8:b6:58:e2:00:59:7f:82:29:08:5c:04:72:dc:2d:67:e8:
48:a1:6b:37:86:f4:41:d3:d6:1f:38:9d:b3:b6:15:f2:11:b3:
70:ae:2c:44:ff:de:ca:37:03:b2:09:d9:c3:ed:da:4b:83:ee:
3c:5f:7b:39:5b:91:ac:0e:ab:1f:c7:b0:98:af:ca:a1:9a:18:
be:c9:53:e2:20:cc:88:75:d3:5e:09:50:79:cb:22:3d:7e:88:
04:25:60:dd:ba:6d:58:27:5c:ea:aa:09:e2:73:2c:76:c6:8d:
5f:3a:38:ee:cb:62:7b:1c:0d:91:c9:c6:ce:a5:20:07:f8:96:
bb:d2:96:74:89:5c:8e:5e:c0:f7:1a:42:bc:43:3b:be:ae:5f:
31:66:3f:2f:f8:ee:d5:04:dc:a0:5a:3e:bf:43:20:ca:d8:36:
8f:42:13:f9:a4:bb:12:b5:57:66:32:10:91:32:5b:cb:f1:bd:
3c:15:f2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 13:53:46 2025 by rpki-client