Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
File: 8KSyRplUYkr0JKVO8WdhwhWLJIM.mft (raw, json)
Hash identifier: C5JgY3bSIdINnrw/5I5LN2cl3h1Ly/hn8EBn6dNZs3c=
Subject key identifier: 83:50:92:76:D5:C3:8E:BF:B0:D7:CF:58:F3:10:F8:44:15:97:D3:91
Authority key identifier: F0:A4:B2:46:99:54:62:4A:F4:24:A5:4E:F1:67:61:C2:15:8B:24:83
Certificate issuer: /CN=f0a4b2469954624af424a54ef16761c2158b2483
Certificate serial: 0197B77C46BC37A1C5766A3AB71DA98B0524
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KSyRplUYkr0JKVO8WdhwhWLJIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
Manifest number: 1512
Signing time: Sat 28 Jun 2025 17:01:04 +0000
Manifest this update: Sat 28 Jun 2025 17:01:04 +0000
Manifest next update: Sun 29 Jun 2025 17:01:04 +0000
Files and hashes: 1: 8KSyRplUYkr0JKVO8WdhwhWLJIM.crl (hash: 36+BvkWs5EFu0n8kU7XIa4UWP5NmWb64Fua2Y6oAaYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KSyRplUYkr0JKVO8WdhwhWLJIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:46:bc:37:a1:c5:76:6a:3a:b7:1d:a9:8b:05:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0a4b2469954624af424a54ef16761c2158b2483
Validity
Not Before: Jun 28 17:01:04 2025 GMT
Not After : Jun 29 17:01:04 2025 GMT
Subject: CN=83509276d5c38ebfb0d7cf58f310f8441597d391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:fb:16:a1:d3:4c:f5:67:03:ec:57:8e:38:fd:
02:40:f4:bf:5a:ac:35:d9:82:46:1e:c8:ba:d1:0a:
d7:77:1a:bd:4f:34:3c:0a:bf:cc:8b:32:36:17:26:
c3:82:68:db:54:b7:3c:b3:ab:53:46:f6:2d:ad:9a:
9f:15:87:e9:f9:de:7e:52:cd:c0:a5:02:b8:96:11:
35:2a:00:c6:0d:dc:13:95:b0:bf:43:56:f6:79:14:
d6:5e:51:e6:a2:9a:ca:af:fa:1e:62:3d:a2:46:b5:
ea:f0:75:7c:98:b4:3c:a7:9e:02:87:73:17:00:7b:
e5:46:9b:40:65:c9:1d:ec:4d:e4:84:13:42:ac:72:
cd:8b:85:30:b6:00:a7:ed:f1:08:cb:e9:83:4f:f3:
3d:79:24:62:41:70:13:3c:43:cf:84:7e:d3:5b:df:
7f:77:f6:b3:1d:49:7d:ba:fd:8a:8e:20:93:c0:ff:
92:1d:8e:7f:57:49:88:5a:f8:2e:03:f3:99:64:a4:
9c:0f:e1:50:e4:f0:15:ff:f2:61:e6:49:72:51:70:
25:aa:52:5a:48:a6:d5:9d:62:7a:aa:84:d6:2f:f5:
bd:d9:af:f9:ba:79:12:8c:0b:6c:78:82:78:f2:9f:
4e:32:e6:5f:12:2c:7c:13:9d:f3:34:7b:3a:04:f4:
8a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:50:92:76:D5:C3:8E:BF:B0:D7:CF:58:F3:10:F8:44:15:97:D3:91
X509v3 Authority Key Identifier:
keyid:F0:A4:B2:46:99:54:62:4A:F4:24:A5:4E:F1:67:61:C2:15:8B:24:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KSyRplUYkr0JKVO8WdhwhWLJIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/52c916-fd6f-41c0-8f3a-58559a94c426/1/8KSyRplUYkr0JKVO8WdhwhWLJIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:7e:3a:da:d0:2c:68:ff:17:2a:8f:90:35:fc:73:af:14:d4:
2c:7a:1e:42:65:48:82:5a:86:4a:2a:53:2b:ab:67:34:21:e4:
45:64:97:92:7e:b1:d4:1d:d3:b6:87:58:ec:97:89:2a:9c:26:
3b:cc:b9:15:d8:c9:a0:79:32:8e:3e:8b:be:f5:ee:f8:64:20:
54:ae:cb:3f:67:24:7a:a6:e5:fe:5b:5f:09:60:36:45:cb:29:
fc:07:ed:ae:9f:50:7b:4b:55:98:67:c8:44:74:12:20:fc:85:
74:47:e2:7f:a9:8f:f9:69:a7:5f:7c:11:a3:47:de:05:c6:90:
26:75:63:6e:8c:d7:5f:d4:f1:80:62:8e:88:f1:0c:85:06:f1:
f2:d0:3a:70:05:dc:22:eb:fe:c3:43:1f:28:c4:41:67:c7:c5:
dd:be:72:79:a7:7f:fd:47:a6:f5:81:2a:38:91:e3:1a:8a:84:
40:6f:b0:a8:df:8c:89:17:3c:23:c0:41:7f:3f:a0:87:1b:9a:
de:96:4e:1e:04:f1:fe:57:4e:f4:be:91:f5:d5:95:4d:eb:d7:
15:20:99:3c:9f:fb:3e:36:c2:f8:e8:98:71:b8:1e:0a:1a:cb:
e0:5e:ec:7e:0c:1d:dd:3c:25:d7:72:29:2e:30:61:41:94:db:
77:3a:1d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:27:47 2025 by rpki-client