Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
File: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft (raw, json)
Hash identifier: m/esD/mBdGADm8YXjUtPojYe3Y2JKUQ0S59MlfzXAyY=
Subject key identifier: D9:06:55:20:27:31:D7:94:D7:43:66:D7:49:FA:A4:6F:8D:1A:90:71
Authority key identifier: F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
Certificate issuer: /CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Certificate serial: 0197B8907B62131DCB033F63BB6B473FE1C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 22:02:45 +0000
Manifest this update: Sat 28 Jun 2025 22:02:45 +0000
Manifest next update: Sun 29 Jun 2025 22:02:45 +0000
Files and hashes: 1: 8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl (hash: mowRL4jM86mT8ZCn5/iNS+151CFhMxqwOpax5fiCvls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:7b:62:13:1d:cb:03:3f:63:bb:6b:47:3f:e1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27808519f2b08045c7fb41a61fda4e09e51891b
Validity
Not Before: Jun 28 22:02:45 2025 GMT
Not After : Jun 29 22:02:45 2025 GMT
Subject: CN=d90655202731d794d74366d749faa46f8d1a9071
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:dc:9f:47:39:af:ed:72:b1:fb:e8:0f:49:8a:
21:ef:6f:fa:5c:6b:46:0b:c6:af:31:85:74:f8:37:
32:1d:9c:20:b0:35:d4:91:cf:71:3f:47:0c:aa:ae:
e1:be:32:62:79:99:63:cf:2a:e0:b7:c3:c4:35:ab:
04:a9:3f:68:3e:df:75:3d:f5:79:da:e2:38:0f:f6:
af:a6:40:3b:69:fa:0e:5e:57:c8:f1:4b:6d:55:8a:
d8:cf:9e:d3:ea:73:da:e8:b6:2e:84:fd:25:ee:3b:
0a:41:30:5e:18:53:14:af:de:0b:f0:3f:a0:5d:e6:
dd:74:3d:32:5a:3d:97:5d:90:d6:b7:a7:a4:2a:13:
3a:2f:4c:f5:2a:a6:00:7b:c2:9b:e2:a2:04:5b:b1:
87:32:e3:05:b3:ca:3e:ec:82:7c:69:44:69:07:f1:
3c:0d:98:2d:d7:d0:7e:01:d9:5a:b0:6d:15:7a:bf:
84:40:ec:53:04:3f:4b:9d:1f:8a:b7:d3:2b:55:35:
7d:bf:f4:3e:1a:77:4b:7b:7c:7b:1e:1b:d3:21:79:
d6:40:04:a9:2f:c0:dd:f2:2d:80:34:38:3d:42:2e:
7c:c9:c2:4c:73:e0:86:b6:23:eb:35:f4:d9:1e:50:
73:01:0c:0d:83:20:9d:da:7e:89:4a:8c:28:6f:fb:
9e:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:06:55:20:27:31:D7:94:D7:43:66:D7:49:FA:A4:6F:8D:1A:90:71
X509v3 Authority Key Identifier:
keyid:F2:78:08:51:9F:2B:08:04:5C:7F:B4:1A:61:FD:A4:E0:9E:51:89:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ngIUZ8rCARcf7QaYf2k4J5RiRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/57baaf-e2ef-47ea-abb7-5855c1d14c9b/1/8ngIUZ8rCARcf7QaYf2k4J5RiRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:44:dd:a0:d5:72:d7:40:12:3d:34:3a:76:9d:0e:2d:93:49:
65:c5:c8:36:96:18:86:8e:1b:6a:83:5b:11:c0:84:cc:49:e7:
a3:fe:68:c1:25:fd:91:15:2a:82:fa:3c:d8:df:3f:77:91:fd:
65:81:eb:db:ae:94:84:8e:13:97:68:8c:6a:22:1e:4c:b5:7d:
aa:85:63:8c:68:e0:c7:ab:72:13:72:06:c2:91:74:56:22:70:
35:f5:c3:89:f0:96:37:df:0a:1b:54:93:2a:81:04:12:65:1c:
fc:ce:b1:d4:7e:eb:70:a9:00:35:df:ed:ad:71:8f:62:95:d9:
37:ab:b0:c3:21:1c:3f:c4:80:a0:13:82:91:53:81:e8:96:ea:
ae:8e:51:a5:21:65:dc:af:14:cf:3f:ca:d7:cf:ca:76:f8:49:
67:50:ff:45:20:27:33:44:fa:ba:27:d7:81:40:ba:5d:cd:c4:
e2:bb:c2:3d:94:c7:04:4a:32:6e:dd:38:4d:2d:75:4d:9a:53:
2d:c4:8f:dd:4b:fd:9f:62:7a:ee:92:7d:b3:22:ec:76:5e:98:
7a:3c:f9:59:16:11:77:cc:be:14:35:91:9b:55:b4:5f:c8:6b:
b8:9c:7d:fa:f3:d8:37:78:7c:7c:05:b4:7c:88:12:94:5e:44:
76:69:8a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:08 2025 by rpki-client