Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: +QuIHjikKmQDpnvf0z9Se2OftAHK8+mDgz4L1Xb187k=
Subject key identifier: DF:30:4C:74:86:8A:2D:88:1E:D8:17:DE:35:FC:F2:5B:C9:B9:D7:5D
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 0197B8903B059347645218D75E0FECB6683B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 12F0
Signing time: Sat 28 Jun 2025 22:02:29 +0000
Manifest this update: Sat 28 Jun 2025 22:02:29 +0000
Manifest next update: Sun 29 Jun 2025 22:02:29 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: VVOF8VPmS7YM5saBGRSaMWY8GCacv63tvbKY5xAbA/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:3b:05:93:47:64:52:18:d7:5e:0f:ec:b6:68:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Jun 28 22:02:29 2025 GMT
Not After : Jun 29 22:02:29 2025 GMT
Subject: CN=df304c74868a2d881ed817de35fcf25bc9b9d75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:80:ec:ff:b5:c2:f0:af:90:21:37:ae:8a:c1:
1f:11:b1:38:5e:ad:72:dc:2e:41:8b:3a:5f:67:bb:
b4:1b:27:90:7a:65:79:5e:5f:83:ba:46:bd:33:e3:
72:89:9f:39:f8:97:ba:ea:9e:1c:0d:91:6c:e6:59:
7f:e3:10:0e:22:59:68:e7:3f:d9:9a:bf:9c:98:dd:
8c:14:27:4b:18:1e:0c:13:ac:7e:00:34:de:20:22:
99:6f:3f:ff:a5:ad:5a:fd:53:bb:2d:df:25:b0:9a:
37:f6:42:98:8e:b5:2f:79:13:8e:ca:de:59:bd:3e:
ec:28:5d:2b:17:59:60:2e:da:50:a9:41:f0:54:35:
93:92:8f:4c:20:a2:b3:bc:fa:9d:80:9f:5f:60:6d:
f1:33:ae:d4:01:96:c5:9d:77:7d:f1:7d:9c:ed:a4:
15:e5:79:dc:cd:35:3f:13:75:0c:9b:61:14:9a:b4:
30:45:e6:55:8a:f2:86:aa:da:5b:7b:51:9c:4e:5a:
e5:a2:8b:51:89:16:57:ed:55:07:b5:ca:ce:0d:ae:
39:e5:90:d5:21:7a:c5:a0:17:b6:36:53:c3:5a:99:
13:ef:6c:ca:25:4e:a0:0b:16:62:82:14:03:7b:85:
a7:25:93:7a:09:d0:5a:0a:ea:a6:00:18:c2:47:d5:
32:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:30:4C:74:86:8A:2D:88:1E:D8:17:DE:35:FC:F2:5B:C9:B9:D7:5D
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:85:b6:c7:b5:0b:88:dc:3e:cc:93:02:cd:97:7c:27:d3:56:
42:4e:dd:51:7d:7a:e2:b6:5b:87:e3:66:95:04:0a:be:2e:fa:
4f:f5:7e:4e:18:f6:46:ad:ce:4b:41:22:7d:23:63:46:ce:f0:
4d:c3:15:04:d8:7e:f8:78:a2:8c:2d:76:87:e5:5a:4e:74:b9:
29:16:78:c6:75:63:ed:8c:f9:7a:2f:02:de:24:7a:f1:b2:d0:
12:ad:12:8f:45:11:09:4f:cb:53:82:d7:17:8d:4f:52:78:91:
df:97:6a:e8:26:6c:94:e6:14:21:ee:cd:73:e5:25:d8:5e:fb:
1b:89:3e:63:95:96:d3:d6:ef:f6:5b:da:63:1f:6c:68:9f:01:
7a:63:9d:92:c9:f8:fa:df:6f:39:ee:eb:89:4f:22:cd:c7:a3:
86:38:f5:d8:01:d1:c1:3a:d4:27:e5:6a:e2:90:b4:4d:a2:06:
dc:4d:0d:10:60:22:6a:44:13:e2:1e:35:33:dd:48:9c:56:06:
48:27:4b:ab:3a:46:6d:d4:d9:ea:92:a6:ae:d5:c4:31:34:0c:
fe:5b:1f:cb:24:27:1f:84:be:c7:ed:71:5e:34:07:19:17:41:
af:cf:e0:4c:03:58:86:89:aa:ef:85:04:fe:d4:e4:46:5b:a2:
28:45:3b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:41:09 2025 by rpki-client