Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: oUeWenkLPBPo2EQU+c+c4NBqFccs2JKaBGmDEofQ1gw=
Subject key identifier: AD:02:18:A1:E2:86:6B:E0:FA:FB:85:E6:84:40:B5:AC:A7:D8:27:E7
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 0197B70EAA8C941D1F0E27EC3AC9CE1EAD9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 040C
Signing time: Sat 28 Jun 2025 15:01:21 +0000
Manifest this update: Sat 28 Jun 2025 15:01:21 +0000
Manifest next update: Sun 29 Jun 2025 15:01:21 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: 9i9/ZzOQmZ+lKP9+A/LCzdcuk+KcbyGo+/fNnNpasJ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:aa:8c:94:1d:1f:0e:27:ec:3a:c9:ce:1e:ad:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Jun 28 15:01:21 2025 GMT
Not After : Jun 29 15:01:21 2025 GMT
Subject: CN=ad0218a1e2866be0fafb85e68440b5aca7d827e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:02:2f:2d:24:eb:b7:7f:55:f0:4e:a7:8b:77:
0e:eb:cc:c7:08:d5:06:f9:9f:3c:a1:04:64:db:f6:
7f:be:f4:f2:ff:ce:1f:15:32:64:20:d6:f8:c1:de:
a3:22:5d:84:23:22:ca:24:f9:4d:56:1f:a4:a9:28:
0b:83:d1:7a:3e:74:37:a1:8d:bc:09:22:12:70:78:
58:49:38:45:e5:85:48:4b:2f:0c:50:60:55:a4:e9:
f3:93:f7:96:9b:d9:21:2b:a7:14:cd:d9:0c:ab:3d:
8a:a2:86:aa:d8:d5:b0:e4:1b:0c:b5:35:3c:d6:be:
83:d1:bd:d1:dc:87:b3:e0:d6:9e:f6:26:89:c4:91:
5d:59:36:55:11:0f:bc:7c:da:19:86:e6:f9:c5:18:
e5:59:2d:28:be:e2:b8:78:8e:a4:a7:39:e7:b4:a1:
57:51:c0:9e:8c:24:10:f4:62:37:a1:b2:94:92:a9:
53:c1:5e:08:69:73:dd:ba:bf:0a:d0:0a:a1:51:c6:
93:b0:b9:24:3f:0d:6f:8f:c4:8f:26:e7:16:50:d4:
f4:be:1a:70:f9:51:ff:fb:45:f6:e7:74:2b:29:f8:
b9:fb:b6:00:88:5f:fb:d9:8f:19:44:16:0a:8b:64:
ce:2d:12:80:52:ff:9a:3a:6f:57:1f:22:c9:53:88:
07:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:02:18:A1:E2:86:6B:E0:FA:FB:85:E6:84:40:B5:AC:A7:D8:27:E7
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:68:83:90:ad:4b:ab:5f:56:d0:3d:30:0b:e9:06:45:8f:01:
f0:d1:ea:b7:2f:9e:1f:e6:28:79:74:4f:15:e4:a4:8d:a8:7b:
34:cc:e3:8c:d4:73:86:75:3e:c0:b6:77:99:d2:be:77:58:ee:
84:c7:89:f3:c0:0d:1e:33:b2:f1:79:88:6f:61:a5:b1:26:d3:
f6:a5:9e:95:2d:ea:c2:07:58:83:da:15:10:78:36:a6:f7:48:
8d:cf:1d:7d:6e:df:73:c7:2d:12:dc:2d:27:33:0d:fb:4b:4c:
c3:00:4a:49:09:63:9f:f5:62:b4:d6:cf:72:a7:c9:12:df:d0:
fa:26:3c:25:63:7a:6d:17:cf:69:51:6e:4c:19:60:b2:c9:b9:
d7:69:28:cb:2f:26:92:72:18:f8:71:a0:fa:bc:1a:9e:3f:b2:
94:6a:42:df:26:ef:49:57:23:ca:b1:eb:58:b6:0c:90:cf:ae:
64:e5:fe:00:70:35:f9:9b:6a:25:20:9c:ce:c0:fc:fb:b7:34:
21:c5:b6:23:59:03:11:28:45:5d:93:2d:4c:89:e8:99:f3:b4:
68:e8:8c:91:99:d7:1e:fc:b2:78:e3:89:e1:fd:65:8f:1d:f7:
e3:40:45:b5:21:33:de:48:97:e9:27:fa:55:6b:09:d7:8d:68:
74:d8:0c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:00:42 2025 by rpki-client