Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: 4yClaanlIm1hCWrL6G+wmILcwyZXvcSQp/kIEKdUQI8=
Subject key identifier: FC:C8:0D:6D:BB:20:6B:EB:32:13:74:F2:41:44:64:AD:21:E2:2C:C0
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 019745C229F51D7A5E87D6259AE73F4B9242
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 0629
Signing time: Fri 06 Jun 2025 15:00:42 +0000
Manifest this update: Fri 06 Jun 2025 15:00:42 +0000
Manifest next update: Sat 07 Jun 2025 15:00:42 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: pdIlgGje0yvaXCofWsjPPT2wJtraiUQuo0WU3ZPW0xY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:c2:29:f5:1d:7a:5e:87:d6:25:9a:e7:3f:4b:92:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Jun 6 15:00:42 2025 GMT
Not After : Jun 7 15:00:42 2025 GMT
Subject: CN=fcc80d6dbb206beb321374f2414464ad21e22cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:14:03:50:58:1c:ca:67:7c:cf:a3:13:0c:6c:
4c:62:99:34:b3:3f:a8:48:07:97:ca:74:05:d0:21:
c2:a2:16:56:44:d0:26:2d:8e:9a:fb:45:7e:9a:10:
1c:d5:05:3a:c2:84:a6:02:6f:ab:3c:6a:0d:a1:a2:
0f:dc:54:08:ee:62:2a:64:16:5d:94:30:3a:02:fa:
f2:f6:93:02:96:ac:b8:7f:1d:c0:f0:9b:a1:58:34:
17:08:fd:73:57:7f:dc:6f:c4:79:37:99:f9:25:1d:
de:c9:72:21:58:ef:30:6f:d9:b5:6e:81:cd:0b:4c:
91:a8:50:b5:c3:a6:0d:66:45:e9:7e:02:48:63:81:
1e:55:c7:a4:cb:c8:43:91:0b:67:cc:ad:28:ef:77:
8d:60:9f:9d:9d:c5:ff:7d:7e:cd:c4:d0:3f:b3:83:
71:da:44:52:25:be:27:83:a0:b0:19:65:11:62:94:
43:c0:5f:ff:30:bd:9b:21:c0:b9:3b:93:50:47:34:
4b:f1:c9:67:00:ae:f8:c5:4b:cd:7c:60:32:e5:da:
eb:cc:b8:46:67:93:20:52:4d:75:b0:b3:c9:49:3b:
1d:17:67:1e:94:49:7e:dd:75:1b:73:e8:8b:f8:df:
a3:32:f9:25:02:2d:41:c4:0b:5d:d7:4c:db:e6:fa:
48:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:C8:0D:6D:BB:20:6B:EB:32:13:74:F2:41:44:64:AD:21:E2:2C:C0
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:07:2f:74:58:17:4a:50:74:24:0b:0c:73:3e:08:ae:0c:60:
6f:a9:07:29:69:d4:33:82:d9:8f:d1:c4:0b:f3:c2:d1:41:59:
7f:e7:38:3a:9d:bf:80:b9:6f:3a:06:6c:a1:0f:a4:83:98:cf:
9b:b5:e2:90:53:c6:b1:c3:f5:52:8c:12:66:72:3c:6b:d9:77:
62:ab:51:13:1b:55:0b:e4:1f:8c:9e:e5:c2:4f:81:6c:2d:34:
4f:c0:f1:63:d1:b0:10:cb:96:95:65:72:11:b5:91:d4:2a:25:
bd:f3:a3:7e:47:93:5a:31:c1:1e:bb:81:41:e0:66:bc:78:67:
95:53:21:aa:ae:a2:d2:69:de:61:2d:72:1c:05:2c:99:60:24:
22:ea:ec:5a:bd:d0:08:60:1f:36:68:e3:69:d1:31:0f:79:5c:
88:12:41:0c:87:02:7f:7d:86:93:eb:b4:72:7e:cd:f2:97:b6:
b1:a8:7f:01:83:6d:91:01:17:a4:60:72:f1:b7:6d:ed:d2:10:
3a:18:2b:b9:49:fb:c5:2c:dc:38:ac:cd:c6:3a:28:8a:79:65:
74:50:ea:84:22:e5:91:d6:93:85:01:c7:1b:bf:6a:de:34:dd:
ea:8e:f3:96:73:1c:46:06:b4:63:5b:6d:15:31:2d:fa:67:e0:
14:3d:5a:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:00:32 2025 by rpki-client