Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: BsgglGCJlvUq2F645fD3/6jSFXxbzMiiRDVA0GcoEwc=
Subject key identifier: 5D:41:6B:27:1B:42:78:3A:12:9F:44:D4:C0:38:1A:BA:2A:A5:F3:60
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 0197B6A1D5EA40AF84C5F4123BE0A7B09C8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 12EB
Signing time: Sat 28 Jun 2025 13:02:28 +0000
Manifest this update: Sat 28 Jun 2025 13:02:28 +0000
Manifest next update: Sun 29 Jun 2025 13:02:28 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: yYzWmzfdMIIzioGSACIUqBx2oCf1prx68eONcNCeQ8c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:d5:ea:40:af:84:c5:f4:12:3b:e0:a7:b0:9c:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Jun 28 13:02:28 2025 GMT
Not After : Jun 29 13:02:28 2025 GMT
Subject: CN=5d416b271b42783a129f44d4c0381aba2aa5f360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:24:ea:a8:99:58:96:1d:8a:ca:fb:a3:e3:
00:0b:ea:e9:ee:39:91:49:44:37:e7:f4:aa:89:99:
d1:b0:49:33:cb:6d:84:f8:5c:46:09:2f:48:44:1d:
af:a9:b0:91:67:50:42:f1:04:f3:ba:89:46:e0:27:
f7:fc:2a:92:ef:b2:78:98:0d:d0:87:e4:35:da:b1:
19:fe:ed:18:4f:cd:a3:84:af:60:06:62:e7:ab:60:
44:51:96:dd:83:85:56:13:f2:3a:bf:42:81:ad:6f:
40:9e:ce:22:f5:e8:f5:c3:db:34:27:2e:54:bb:04:
36:58:35:6c:ea:cb:f4:45:a5:92:c0:c7:95:10:c8:
f6:26:ca:55:59:42:56:e8:74:f4:ed:17:a5:2f:99:
77:fc:dc:03:88:99:01:0e:01:5e:8a:00:19:d6:1f:
21:e3:12:d1:6e:f9:f7:60:4c:52:73:70:1f:20:3b:
cb:11:43:b1:87:74:7b:d5:82:58:7c:c4:66:39:e9:
c2:70:14:03:5b:20:26:f1:ff:9b:c3:57:17:19:e2:
13:14:20:a9:5f:ed:cb:2e:a3:02:d7:04:63:0b:b7:
33:e3:6d:e3:eb:b3:48:95:97:35:a1:27:88:b9:67:
da:69:f0:3b:48:f2:03:65:80:64:f8:5b:71:c4:72:
87:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:41:6B:27:1B:42:78:3A:12:9F:44:D4:C0:38:1A:BA:2A:A5:F3:60
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:32:e6:07:df:cd:88:5b:e4:24:24:04:01:c7:3c:c3:46:e1:
62:57:f6:ce:07:91:47:8f:3c:0e:ce:46:80:2e:d1:ba:25:f0:
32:68:5b:36:f2:35:78:fe:51:12:25:63:c9:b1:1f:9e:ab:9e:
fe:e1:71:ce:76:a6:53:db:59:8a:30:48:e0:96:aa:8e:a8:a9:
4a:b6:9b:f9:e6:62:83:c9:41:16:c5:19:d3:57:c7:69:19:84:
a8:2a:44:fb:21:2e:b2:1a:0b:bf:50:18:73:41:11:12:f3:0b:
ec:96:ec:d5:d0:3a:36:44:4f:8b:cd:8d:ca:7d:6e:9b:c4:f2:
52:37:5d:00:31:66:75:45:1c:6e:66:24:4a:8d:ec:6e:9e:7e:
70:18:5c:f5:5a:99:63:24:27:74:19:b3:aa:67:36:e5:d6:be:
81:24:75:b5:23:f9:ca:03:82:7d:24:79:63:36:0d:6e:22:af:
4d:ed:06:d6:4d:b9:30:be:26:7a:77:ec:d5:1e:81:9b:04:a3:
93:be:de:51:ec:7b:2a:41:c6:c6:07:de:97:76:4b:00:28:e5:
8a:34:60:7b:b8:19:ed:a3:c7:75:40:da:3f:df:23:cf:81:4c:
53:95:fb:15:87:65:9d:42:dc:74:09:7a:af:80:6a:9f:01:a1:
23:65:12:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:13 2025 by rpki-client