Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
File: r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft (raw, json)
Hash identifier: 65n9PaaSgLs+F2OdJWda0s594zFPHgkX9+zZSL6LDa4=
Subject key identifier: E3:82:39:C5:30:3E:60:B5:C5:56:9F:AF:21:52:20:2A:39:7C:BE:47
Authority key identifier: AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
Certificate issuer: /CN=afff13a67f225c3c2a606658c23965b8191d4008
Certificate serial: 0197B6A0CE64B01599FCECA6AC2A96F59A44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
Manifest number: 0BDA
Signing time: Sat 28 Jun 2025 13:01:21 +0000
Manifest this update: Sat 28 Jun 2025 13:01:21 +0000
Manifest next update: Sun 29 Jun 2025 13:01:21 +0000
Files and hashes: 1: r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl (hash: g20RQgsgicezmYQpXnlTZFDQitF53KcwYePNPR+dumM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ce:64:b0:15:99:fc:ec:a6:ac:2a:96:f5:9a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afff13a67f225c3c2a606658c23965b8191d4008
Validity
Not Before: Jun 28 13:01:21 2025 GMT
Not After : Jun 29 13:01:21 2025 GMT
Subject: CN=e38239c5303e60b5c5569faf2152202a397cbe47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8b:d9:c5:ac:89:b8:b7:9a:1e:e7:50:39:32:
34:a8:33:af:f4:3b:eb:c8:03:bb:fc:8d:11:ff:68:
02:26:52:cc:a5:b6:54:7b:79:d0:a6:f6:5a:ea:89:
ed:bc:b2:29:bb:29:4a:08:58:78:b1:3f:ad:c4:71:
50:f3:01:b7:07:f9:38:b5:35:3e:27:ee:19:b2:f7:
a6:f4:8e:34:40:af:76:99:d4:92:c3:0d:8d:21:77:
f5:95:b8:4e:93:44:0a:9d:6a:43:da:5f:b5:73:15:
16:8c:1b:e2:b3:e9:a2:1e:64:00:2e:5c:02:57:47:
7a:08:c6:16:2e:b8:4e:84:db:a4:c2:48:49:37:f3:
99:63:3d:6a:b0:1f:c5:eb:7f:17:5b:94:2f:cc:1f:
77:75:cc:a6:d8:e5:05:72:f1:b8:43:bb:5f:19:83:
5b:4e:b0:32:0c:8a:c9:5e:54:fd:ee:a5:7d:f5:74:
8e:68:ac:a1:ab:4f:07:b2:fb:d4:25:fe:90:6e:65:
6f:41:1a:46:c9:cd:9d:af:4a:0e:8c:e3:54:ee:19:
56:51:ce:86:89:0d:dc:96:71:7a:69:76:bc:c9:3b:
86:2c:98:78:a2:fa:1a:2d:fb:9c:ef:df:1e:d5:0b:
90:5d:05:a5:9e:36:1b:cd:2f:05:88:c0:9a:88:cb:
95:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:82:39:C5:30:3E:60:B5:C5:56:9F:AF:21:52:20:2A:39:7C:BE:47
X509v3 Authority Key Identifier:
keyid:AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:41:fe:69:53:77:6e:72:be:d6:31:60:62:fc:01:bc:cb:9f:
05:ec:3d:96:87:32:38:77:40:3e:60:7f:ed:23:ba:e8:6a:4c:
0f:8c:8e:70:4b:2d:12:52:03:92:da:b0:e0:eb:9d:88:46:be:
13:5b:a5:07:08:f0:5d:84:99:af:4b:cc:02:43:c3:c1:b4:02:
9b:6e:a7:0b:2d:b5:c2:da:e1:08:57:46:11:98:5f:df:ef:a9:
c7:ec:47:5d:3f:9b:de:d7:d2:73:40:22:83:cd:54:c2:a9:f5:
20:05:b2:45:6e:97:b7:48:10:49:2c:5e:59:50:f0:14:5d:27:
a7:ff:dc:59:9b:2a:42:5c:81:5a:b0:c0:9b:fc:d9:fe:8c:0f:
ac:30:ce:ef:c5:c6:e3:8c:e7:c5:62:38:40:b6:38:46:eb:fd:
81:67:c5:cb:38:10:ac:6a:6e:54:82:e0:a4:03:1c:bf:c1:74:
a9:20:0e:f1:19:d9:3a:b0:6b:37:48:bf:46:53:98:54:93:f2:
8f:1a:ee:c9:c2:a8:cc:40:56:e5:8a:13:1e:49:8f:8b:26:18:
94:0c:00:48:4c:4c:f9:4f:33:5c:ea:5b:98:a4:5e:c3:da:5d:
61:a7:44:c8:36:09:96:b0:1f:42:af:c2:cd:4b:54:ad:eb:4e:
65:82:9a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:27 2025 by rpki-client