Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
File: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft (raw, json)
Hash identifier: shrN642FZJajzR92zgoRyJT1hT45z3vGB7U7MQxbrA0=
Subject key identifier: 6D:E3:59:3C:65:E1:2B:66:48:B8:F3:4F:D6:65:BA:DA:49:DC:FC:D1
Authority key identifier: F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
Certificate issuer: /CN=f25551c7047b3bf9031808c21b8379b9b860c426
Certificate serial: 0197BA7D0D0E1A552E593AA2249FECBFD99A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
Manifest number: C8
Signing time: Sun 29 Jun 2025 07:00:46 +0000
Manifest this update: Sun 29 Jun 2025 07:00:46 +0000
Manifest next update: Mon 30 Jun 2025 07:00:46 +0000
Files and hashes: 1: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl (hash: nY91KeXa9oPKiNAOcc23jbv9lhaZX/2kK8CBR4mgbUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7d:0d:0e:1a:55:2e:59:3a:a2:24:9f:ec:bf:d9:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25551c7047b3bf9031808c21b8379b9b860c426
Validity
Not Before: Jun 29 07:00:46 2025 GMT
Not After : Jun 30 07:00:46 2025 GMT
Subject: CN=6de3593c65e12b6648b8f34fd665bada49dcfcd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:47:16:58:84:e8:b9:19:8c:cf:02:81:99:e0:
f1:a4:5f:f9:b3:6e:1c:65:9a:d3:43:56:79:a2:33:
e0:c5:20:9f:a2:5c:17:0e:12:89:be:68:ff:ea:7b:
40:9b:9f:a7:14:34:47:59:98:f7:43:20:4d:de:d4:
07:70:14:07:6c:c2:92:dc:63:ee:f0:53:46:e4:03:
67:45:e0:25:c9:6e:d8:28:d5:8a:b6:06:5e:cf:b2:
74:46:7a:cb:5b:ae:2d:a0:b4:64:f9:b8:ee:c0:67:
fa:6a:10:81:f9:c6:95:29:3e:51:a9:31:f5:d6:67:
58:11:63:5b:bb:92:85:8e:56:eb:85:75:59:b0:7a:
1a:42:67:e8:91:4c:25:f5:95:d2:a7:4d:86:d2:7b:
33:20:11:3e:47:3d:60:8c:13:e0:a0:d5:c1:b8:d4:
be:47:22:7c:0b:b0:a0:57:79:fe:21:d9:33:17:01:
08:72:e6:47:55:8d:ee:01:2c:33:c0:78:cc:b5:e6:
d3:ae:5c:08:c5:f7:0c:a1:db:49:0e:ab:98:b0:dd:
61:c5:79:d6:5f:1c:de:47:3c:4c:ee:dc:1f:87:c3:
25:6a:fd:1d:9b:e3:1e:e0:91:ab:3f:c2:6c:d4:23:
69:32:90:93:87:2d:bb:f6:d9:e5:bd:c3:56:35:04:
d4:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:E3:59:3C:65:E1:2B:66:48:B8:F3:4F:D6:65:BA:DA:49:DC:FC:D1
X509v3 Authority Key Identifier:
keyid:F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:47:c0:9c:8f:83:b9:72:79:58:5d:28:af:af:59:77:a9:40:
8b:cd:01:70:7a:7d:2c:a3:3f:1b:fb:25:03:68:af:b1:f8:74:
3e:bd:28:99:34:e4:53:c8:ab:7a:d0:ee:2b:a0:2b:2b:30:54:
1f:06:ce:cb:47:74:0f:a5:0e:2e:84:c6:80:da:49:e1:de:30:
a2:5a:74:ad:5f:bf:91:e1:92:86:71:6c:d6:bc:c6:08:73:f4:
18:3d:3c:d9:b3:12:d5:55:dc:51:0d:41:97:ad:e2:ec:5d:33:
e4:60:4b:a4:a6:be:0f:c8:0b:16:5a:4e:89:9d:be:13:f1:7b:
22:2c:5c:18:75:48:cb:fd:3c:56:c5:dc:b0:d3:6b:30:e4:f5:
ae:8e:cc:f6:04:59:76:be:6e:52:aa:5f:3b:11:04:2c:cb:02:
39:c2:0f:a3:5b:3a:56:ca:d2:06:14:ee:f6:41:e8:ae:7f:6f:
b7:fb:c7:17:c5:4f:e4:f9:70:04:dd:69:f3:c6:f8:23:bb:f2:
50:68:96:7e:d5:f3:bd:63:fa:14:76:e4:7c:a5:1d:83:4f:22:
80:94:78:91:60:75:dc:b2:b3:35:f6:ab:23:e6:93:dd:c6:a9:
70:81:2a:bc:4a:01:68:11:b7:09:4e:dc:5a:2d:af:aa:fa:a7:
4c:3d:3a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 10:31:28 2025 by rpki-client