Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: 5GXGZIrSYTySg+cseUYruGfzAy3yT3wg1G4dFIHIqP4=
Subject key identifier: C8:AC:AF:37:D3:FE:AA:E8:F5:4E:91:E5:73:6B:8F:18:9B:39:4F:0C
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 0196DDB073186D3E8466D1EB98FC6A5BE979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 0FC6
Signing time: Sat 17 May 2025 10:00:50 +0000
Manifest this update: Sat 17 May 2025 10:00:50 +0000
Manifest next update: Sun 18 May 2025 10:00:50 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: 2AbJl5vdXyxclbMsjUxGUXXdQKqMUCy/4Xd/16x6BHg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 May 2025 10:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:dd:b0:73:18:6d:3e:84:66:d1:eb:98:fc:6a:5b:e9:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: May 17 10:00:50 2025 GMT
Not After : May 18 10:00:50 2025 GMT
Subject: CN=c8acaf37d3feaae8f54e91e5736b8f189b394f0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:d2:b0:83:67:0f:d7:c1:b0:f6:57:49:ed:5d:
35:dd:99:4c:d6:cf:65:8b:5a:f5:51:3e:8c:ad:a0:
f8:ee:94:fb:da:7a:20:3f:80:fa:ac:31:bc:32:34:
00:84:b3:6c:6b:19:2f:84:97:4b:e2:16:e3:07:f4:
2b:d3:cc:57:94:aa:5d:b9:cf:7c:c8:5d:43:7e:08:
cc:3d:26:d0:dc:82:62:28:07:6a:42:61:cc:9e:8c:
c7:db:8e:14:97:0e:96:65:8a:e8:6e:a3:eb:00:89:
19:e9:b1:08:12:bd:de:3b:38:b1:ff:e7:e9:2d:1c:
89:db:db:1b:cb:9d:d9:f5:b5:6f:1f:13:4e:4d:a6:
68:a8:ff:0a:5c:cb:8a:06:03:3b:7a:d9:09:16:0c:
56:3c:db:77:d7:98:0a:56:2b:62:86:6e:35:b4:f3:
5a:ae:66:dc:b3:88:39:d6:09:e7:eb:31:d6:88:03:
b4:35:f8:ca:3a:33:f6:7a:c0:f2:01:7e:17:2d:b9:
46:1c:54:e2:3d:c7:d1:76:e0:aa:91:6f:81:81:f5:
ef:74:44:79:da:fd:ef:34:96:c1:53:e9:42:da:42:
66:04:5f:5e:5e:4b:60:e3:fb:6f:81:1a:25:d0:39:
fa:51:a6:13:be:ae:25:65:db:23:65:f6:8e:e1:59:
d5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AC:AF:37:D3:FE:AA:E8:F5:4E:91:E5:73:6B:8F:18:9B:39:4F:0C
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:c9:30:b7:57:5e:b2:9f:71:fd:8a:fd:fd:21:a5:e8:03:c9:
4b:19:ca:4f:13:53:90:ea:71:53:44:fc:1f:ba:e6:c3:af:13:
df:25:23:b1:68:f2:63:02:1f:48:7b:bb:04:09:65:6b:88:e8:
aa:6e:b9:0d:f6:4e:4d:76:58:c9:16:8f:82:83:30:6a:f2:65:
7d:e4:f6:82:d5:f6:66:d9:c3:30:76:2a:1d:09:73:67:b8:c8:
cb:fc:bf:a3:ba:b0:75:04:a4:3f:e8:91:55:1a:7c:ab:a2:78:
02:66:0e:c6:dd:31:18:e6:bd:f9:0a:f8:32:41:74:45:fa:55:
84:b4:c2:88:f5:9a:12:a3:46:ed:b4:84:46:00:7a:d2:4c:5c:
ea:83:a3:20:a6:95:40:57:e4:3f:88:d4:b7:f9:c6:6d:55:76:
4f:d1:29:69:4c:0e:77:68:bc:49:42:e9:83:22:4f:05:6c:87:
64:67:2d:97:d7:bf:40:06:fa:ce:50:0f:41:6e:a4:40:4f:5a:
42:37:d6:02:4e:5e:67:7f:20:06:b5:0d:1d:53:9f:f3:eb:72:
ae:4b:00:f5:d7:fb:9a:83:65:4d:da:80:56:55:1a:f1:47:02:
35:01:65:42:bf:5e:14:77:50:72:3f:90:0c:94:77:0e:52:0b:
1b:46:3e:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 17 16:47:36 2025 by rpki-client