Manifest
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
File: F69066348CBBD67E19E5C1CFED53765401498B26.mft (raw, json)
Hash identifier: NRVIuJlQMGGk2eLqN1G3M2usdoQ78HiR9y6MMGEXWSo=
Subject key identifier: C1:38:33:98:15:CB:2F:AF:53:CF:F6:19:C6:85:14:B3:50:89:91:1F
Authority key identifier: F6:90:66:34:8C:BB:D6:7E:19:E5:C1:CF:ED:53:76:54:01:49:8B:26
Certificate issuer: /CN=f69066348cbbd67e19e5c1cfed53765401498b26
Certificate serial: 199DE26EE6C9F27F168CFFD9D168D524CA84DFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9pBmNIy71n4Z5cHP7VN2VAFJiyY.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
Manifest number: 18
Signing time: Fri 06 Jun 2025 16:16:47 +0000
Manifest this update: Fri 06 Jun 2025 16:11:47 +0000
Manifest next update: Sat 07 Jun 2025 16:40:47 +0000
Files and hashes: 1: F69066348CBBD67E19E5C1CFED53765401498B26.crl (hash: hC209gfKn6d9QvtT9050yoT/l+IV8Dn4Sh41SxT5qz0=)
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.crl
rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
rsync://rpki.ripe.net/repository/DEFAULT/9pBmNIy71n4Z5cHP7VN2VAFJiyY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 16:40:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:9d:e2:6e:e6:c9:f2:7f:16:8c:ff:d9:d1:68:d5:24:ca:84:df:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f69066348cbbd67e19e5c1cfed53765401498b26
Validity
Not Before: Jun 6 16:11:47 2025 GMT
Not After : Jun 7 16:40:47 2025 GMT
Subject: CN=C138339815CB2FAF53CFF619C68514B35089911F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9f:53:1c:14:1b:fb:b0:00:fd:0d:29:9d:b7:
d7:ba:89:35:2a:2f:88:7e:0f:c9:35:5a:b6:4f:11:
a9:cc:aa:f5:b8:70:c9:fb:ea:d9:c6:24:98:40:d3:
2d:10:51:7a:36:92:eb:08:52:7c:44:92:ca:4c:4f:
27:f2:96:fd:26:17:e2:12:d0:bc:04:d6:6e:6e:87:
8e:75:2b:2d:9e:fa:f7:58:a3:03:39:a5:c2:ff:db:
6c:29:0f:47:31:8f:fd:19:d4:ba:4b:43:b1:09:8a:
81:cd:b6:b5:d6:3c:a0:31:ef:69:66:e6:96:2d:f6:
1e:b8:36:a5:f1:6f:80:9d:e4:3c:c9:76:d3:29:b4:
e7:5f:62:0d:09:81:b2:d8:ef:f7:4a:ef:be:59:6b:
ee:83:f6:97:67:20:db:bf:07:81:26:0f:96:47:b5:
ab:c2:b0:68:05:1d:68:b8:b9:45:48:d3:de:9f:82:
b9:d7:97:5e:75:7e:e1:1f:ad:d9:bd:50:8c:3b:4b:
a0:3f:ce:9f:fc:8b:7c:10:d6:29:a9:37:2c:ce:e5:
2e:04:7b:9b:1f:bd:83:db:d4:b7:0f:eb:88:c6:d5:
81:29:fb:e0:88:8f:a6:c0:17:68:dc:e2:94:84:7e:
a2:78:73:76:31:2a:b0:9e:c3:d7:f6:ba:08:80:78:
8b:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:38:33:98:15:CB:2F:AF:53:CF:F6:19:C6:85:14:B3:50:89:91:1F
X509v3 Authority Key Identifier:
keyid:F6:90:66:34:8C:BB:D6:7E:19:E5:C1:CF:ED:53:76:54:01:49:8B:26
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9pBmNIy71n4Z5cHP7VN2VAFJiyY.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/cf81e235-8158-407e-bcff-f096348357a2/0/F69066348CBBD67E19E5C1CFED53765401498B26.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f7:6f:f1:cf:33:4c:a1:04:e9:64:0e:5c:6b:92:df:ff:04:
07:fa:98:6d:41:10:a8:94:de:6e:54:31:02:87:bb:c9:ba:0e:
0c:0b:7f:e5:3c:bf:4e:c3:fd:48:2a:d5:9e:cf:21:2b:bf:04:
e3:99:7f:7d:90:86:38:c8:d9:a5:5e:38:90:f4:70:8b:a0:f1:
71:39:ca:cd:74:79:ab:f5:e5:66:87:bf:80:c6:34:97:30:19:
23:c1:3f:6c:f6:0c:ce:9f:2e:e3:ae:51:65:52:ce:df:ad:b4:
41:64:71:b9:23:94:ba:2e:f0:06:f9:99:52:c4:1b:05:06:6c:
af:12:d3:10:d3:bc:e4:cd:a5:85:86:dd:d9:33:c1:fd:a8:12:
ab:c0:66:36:37:0e:f4:12:b4:2a:93:35:03:29:81:73:5f:70:
27:a5:f9:6b:ab:4a:bf:b6:c7:98:ad:98:59:f7:05:48:42:2a:
44:a0:d7:e4:d0:54:90:e5:53:57:b0:08:7c:dc:1c:6b:ae:de:
ec:c3:65:4e:cd:f9:a5:6f:4c:1a:96:bf:09:33:d2:a8:21:8c:
ab:77:44:b6:2a:4c:1a:ce:65:62:e0:3e:42:2e:ec:84:59:ba:
93:5f:12:65:3c:d0:54:04:3f:5c:12:22:0e:97:f3:ab:06:7a:
59:ff:ac:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:17:24 2025 by rpki-client