Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
File: FAyGl-PS6UuFRiU9zyZJymAGKmg.mft (raw, json)
Hash identifier: 16FtpHa47vEawd5rbXh2DVU6Ej/lZs8U9+LLw7RRhZs=
Subject key identifier: 04:A0:59:AE:8E:4B:6F:8A:C1:88:19:29:E3:62:65:F8:F7:91:AE:11
Authority key identifier: 14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
Certificate issuer: /CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Certificate serial: 01974F6A526042755CC4D76E0590B86594A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
Manifest number: 157B
Signing time: Sun 08 Jun 2025 12:00:57 +0000
Manifest this update: Sun 08 Jun 2025 12:00:57 +0000
Manifest next update: Mon 09 Jun 2025 12:00:57 +0000
Files and hashes: 1: FAyGl-PS6UuFRiU9zyZJymAGKmg.crl (hash: wzDDL5WJu9fF+NvS0SAzS7o3JBEAU350eXcX//SxjCA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:6a:52:60:42:75:5c:c4:d7:6e:05:90:b8:65:94:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=140c8697e3d2e94b8546253dcf2649ca60062a68
Validity
Not Before: Jun 8 12:00:57 2025 GMT
Not After : Jun 9 12:00:57 2025 GMT
Subject: CN=04a059ae8e4b6f8ac1881929e36265f8f791ae11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:5f:76:c8:02:97:4d:83:d3:90:02:3b:4b:48:
8c:70:cf:67:a8:26:12:d5:7b:26:fc:61:53:56:33:
e4:df:f6:7d:51:a0:f1:e6:c6:6e:33:b3:5c:88:4f:
1b:8e:a8:a3:3c:f6:0d:b6:c8:2f:76:a3:53:1c:46:
73:15:e5:8a:93:6b:28:6d:09:46:e9:76:bb:7e:1b:
c7:6b:9d:1e:aa:06:80:f2:f6:d2:28:60:bd:2c:c0:
a3:df:8a:53:70:31:0d:e6:84:ee:5e:b7:3c:ac:73:
cc:0c:1b:fc:9a:af:32:51:c5:0f:c1:81:f1:9e:97:
ac:53:3e:b7:47:5d:ba:68:6d:fe:8c:03:62:a8:f3:
bc:53:dd:d8:9d:6f:23:4b:ec:9e:85:38:34:e1:92:
77:f5:ca:3b:87:3c:ee:9e:9a:ea:bf:a9:49:fb:1e:
28:ec:1b:98:a6:82:2e:c5:48:62:82:1c:95:c4:fc:
44:09:c0:55:a0:55:1e:63:7e:e8:ea:9b:47:cb:21:
e8:5b:77:aa:8d:1b:e1:6d:fb:35:c8:b2:7c:34:09:
37:e1:80:d2:d7:dd:c2:53:d5:b6:37:24:b6:3d:b5:
61:a5:c0:0b:3a:57:ce:94:c9:8f:69:b6:3a:bb:63:
39:87:b5:06:20:3c:52:3a:d0:1e:03:2d:0a:98:c9:
f6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A0:59:AE:8E:4B:6F:8A:C1:88:19:29:E3:62:65:F8:F7:91:AE:11
X509v3 Authority Key Identifier:
keyid:14:0C:86:97:E3:D2:E9:4B:85:46:25:3D:CF:26:49:CA:60:06:2A:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FAyGl-PS6UuFRiU9zyZJymAGKmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/304fe9-89a2-4f83-997f-bff64d4ccf95/1/FAyGl-PS6UuFRiU9zyZJymAGKmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:67:87:1d:16:dd:86:d7:07:a3:eb:11:b6:ae:fd:63:56:21:
30:f7:66:aa:ca:21:fd:45:e5:ca:70:aa:c2:da:43:03:2c:70:
9a:f5:8b:db:0b:95:ab:5b:ef:14:ac:25:6e:e6:29:dd:fc:ad:
2e:d2:9a:b5:22:8a:7d:10:f2:17:dd:f3:fe:83:92:29:e4:86:
f6:68:21:83:42:5a:28:0d:29:86:e0:21:88:5d:07:e4:23:24:
a1:e2:17:a5:22:c9:35:ae:7e:d3:6e:9c:ee:3e:71:aa:da:b3:
b9:75:c5:77:02:06:8a:12:4f:55:7c:e9:2f:22:22:b3:ef:4f:
50:ea:2a:32:c5:a7:fa:82:1c:5f:a9:01:1f:77:bd:8e:ae:aa:
4b:96:17:87:be:0c:93:70:98:a7:1f:d7:55:17:e7:b6:38:d0:
d3:38:78:9b:1f:b2:f2:64:e3:b6:8e:64:a7:67:69:08:a7:03:
ff:82:f1:6e:f4:f2:98:ba:61:52:fb:bd:8c:2f:81:5d:84:39:
3a:c4:c3:cc:d9:e9:bc:9d:e0:bf:a6:ea:fb:4e:48:78:f1:41:
b7:d4:2f:c7:be:cd:16:a9:d0:8f:35:da:87:28:90:59:58:dc:
f2:e5:83:d1:14:12:a5:e0:1a:f2:33:d4:a6:6d:52:d7:ec:d6:
a2:45:0a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:43:20 2025 by rpki-client