Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
File: jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft (raw, json)
Hash identifier: 3pHzd+0gOEzW8JU9mywwYU/zeDsOO5tvQKYRhSEMCC8=
Subject key identifier: FA:38:33:3C:1B:87:AD:3B:22:86:D7:B0:9C:34:B1:66:E2:6D:14:59
Authority key identifier: 8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
Certificate issuer: /CN=8c5002f639e81958d0f9b3585aed76707d2625de
Certificate serial: 019745F979633293C8A73332F3AA8BE673F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
Manifest number: 1576
Signing time: Fri 06 Jun 2025 16:01:06 +0000
Manifest this update: Fri 06 Jun 2025 16:01:06 +0000
Manifest next update: Sat 07 Jun 2025 16:01:06 +0000
Files and hashes: 1: jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl (hash: gCTeYGbZGcTNGTOMc90RWGQoat2/6YWG8Hn8QO9ckWc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f9:79:63:32:93:c8:a7:33:32:f3:aa:8b:e6:73:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c5002f639e81958d0f9b3585aed76707d2625de
Validity
Not Before: Jun 6 16:01:06 2025 GMT
Not After : Jun 7 16:01:06 2025 GMT
Subject: CN=fa38333c1b87ad3b2286d7b09c34b166e26d1459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:97:1f:2e:9c:0b:89:f5:b2:ec:ca:2c:30:0c:
8b:2c:40:9b:f7:de:a5:0f:60:2e:a7:38:12:50:5f:
02:d5:9e:50:65:1f:90:19:34:ef:4b:cb:45:14:e1:
44:ef:86:c2:f6:d3:bd:66:56:86:f7:e7:7b:2c:aa:
9e:a2:cd:07:6c:1a:3f:ec:a0:2b:9f:f0:a6:92:58:
30:bd:eb:ef:17:ea:ca:fc:c0:c8:23:14:44:6e:26:
d3:c3:f7:82:85:82:2d:e8:af:06:4c:81:fb:c5:c9:
7b:f4:4a:b0:1d:d4:d9:a4:ba:ee:81:51:61:4f:c8:
17:51:91:cf:f8:09:40:9e:48:9c:42:30:e7:47:80:
0f:45:d7:46:a0:89:90:71:46:1e:49:e9:bc:2d:c3:
d3:df:85:e4:f7:66:e5:97:8b:10:31:44:66:74:85:
bb:a6:9d:36:c1:0e:0a:d3:c4:64:73:20:b1:ab:00:
f8:40:57:c2:9a:76:23:13:c5:8b:65:0a:c2:42:2d:
a8:a2:4a:cb:68:87:e8:32:0b:d2:35:bf:03:3d:a6:
64:04:2d:95:f4:c4:d2:1f:b4:74:c8:11:cb:f8:3e:
67:2c:01:1a:a9:d8:37:08:a8:08:9f:54:62:af:41:
56:e2:94:b4:ea:9a:f5:06:fd:10:ce:66:d0:b2:8e:
08:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:38:33:3C:1B:87:AD:3B:22:86:D7:B0:9C:34:B1:66:E2:6D:14:59
X509v3 Authority Key Identifier:
keyid:8C:50:02:F6:39:E8:19:58:D0:F9:B3:58:5A:ED:76:70:7D:26:25:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jFAC9jnoGVjQ-bNYWu12cH0mJd4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3a6128-bf03-4ca5-a766-6f06191444ac/1/jFAC9jnoGVjQ-bNYWu12cH0mJd4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:e3:65:b1:85:66:f4:3e:e8:2a:75:d0:06:cf:3b:72:99:4a:
0e:b4:1c:23:90:eb:e4:80:70:f9:a3:05:0d:61:58:09:fe:b2:
10:ea:04:dc:83:3a:d9:a7:7a:29:fb:c0:03:d5:46:39:9e:77:
a3:6f:70:90:95:ad:f5:a6:24:48:63:7a:b5:06:ff:91:24:24:
53:62:2c:01:95:86:f7:ed:a6:59:bd:73:5f:76:32:93:fc:7a:
74:35:30:1a:8d:1e:1f:e8:6c:a1:ba:dd:d0:41:43:b2:bc:24:
4b:55:c7:14:1d:8a:b6:70:78:56:9f:11:b5:ec:7c:3d:db:c2:
42:6d:e2:9b:9d:1f:8f:06:37:c7:17:16:7a:b5:2c:35:ab:b4:
b6:1f:81:05:f1:c5:7b:0e:2d:0e:a6:0a:20:65:82:97:eb:68:
17:d6:39:b8:88:77:81:14:12:38:68:10:2f:e1:29:36:34:6d:
06:ce:e2:63:06:82:ef:df:a1:9a:b2:1f:63:6e:5e:27:6a:b1:
da:b6:cd:63:d8:84:03:3c:51:8b:9b:5f:b5:c9:f4:4f:9c:04:
4c:13:5f:b8:5b:a9:2f:84:f2:d4:67:a4:f3:4e:f2:f1:95:94:
a4:da:dd:f0:50:24:55:f8:8e:bb:cc:44:a1:b5:af:37:22:b2:
71:30:71:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:18:56 2025 by rpki-client