Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
File: 8mAhR5HPhJn8k68B96Q_XL6QKpg.mft (raw, json)
Hash identifier: CSAeONOhSTZJQol2+csZyQhBsOJD8WDFwp8KoQqEa64=
Subject key identifier: FD:E9:4D:D5:02:5C:52:1A:63:DD:4D:BF:E9:80:BB:ED:84:03:BB:81
Authority key identifier: F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
Certificate issuer: /CN=f260214791cf8499fc93af01f7a43f5cbe902a98
Certificate serial: 0197B6A1C6A6B583A5942846BAA03FA658C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
Manifest number: 0E9A
Signing time: Sat 28 Jun 2025 13:02:24 +0000
Manifest this update: Sat 28 Jun 2025 13:02:24 +0000
Manifest next update: Sun 29 Jun 2025 13:02:24 +0000
Files and hashes: 1: 8mAhR5HPhJn8k68B96Q_XL6QKpg.crl (hash: CKbSgAvAHYqLpMRV5QMuRqPCnPkptyCwO2PuO3Fk/i4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c6:a6:b5:83:a5:94:28:46:ba:a0:3f:a6:58:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260214791cf8499fc93af01f7a43f5cbe902a98
Validity
Not Before: Jun 28 13:02:24 2025 GMT
Not After : Jun 29 13:02:24 2025 GMT
Subject: CN=fde94dd5025c521a63dd4dbfe980bbed8403bb81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:35:04:d9:2b:24:2b:87:e9:05:d6:f3:03:
d5:b5:5d:bd:b5:6a:c0:b3:16:05:23:9c:4f:a5:d7:
04:36:3b:7d:a3:cc:69:2a:b1:c0:40:9d:e8:cf:fb:
c5:06:54:19:1c:d1:17:5e:39:6a:66:a4:60:21:6e:
f6:86:8a:da:a8:4f:63:44:dc:d0:83:85:9c:c7:21:
a5:ff:1e:77:6d:7e:19:7a:3d:99:ea:f4:4e:dd:48:
41:60:05:58:a6:b6:f1:c5:2b:46:26:7e:62:c8:e1:
d1:7f:7d:b2:a0:ff:f7:e4:4b:ad:4e:dd:0b:75:1a:
54:ed:32:a5:c4:59:e9:3e:cc:77:2d:58:de:74:50:
0e:03:45:e2:59:ea:e1:62:5c:6d:fb:15:2b:71:7b:
8c:c0:be:fe:6d:73:35:42:0c:47:26:51:92:e9:1f:
0a:f7:d9:26:d6:09:21:df:1d:3a:f2:f9:a3:5c:55:
70:18:90:b8:eb:28:e7:f5:d8:cc:1a:0e:6a:49:4b:
95:10:ec:d7:d2:08:b9:c1:1e:ea:e2:7f:2a:08:87:
0f:0b:31:4f:bc:12:f2:8d:9d:3f:eb:b0:43:b5:12:
dd:79:49:62:56:d2:0a:49:5d:d4:12:da:4c:eb:51:
6c:59:74:4f:79:59:a0:94:9a:d6:01:23:bd:6c:0a:
d6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:E9:4D:D5:02:5C:52:1A:63:DD:4D:BF:E9:80:BB:ED:84:03:BB:81
X509v3 Authority Key Identifier:
keyid:F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:79:71:e8:51:ec:17:44:af:c0:ce:fc:b6:8a:7b:e5:be:a0:
98:f3:43:19:9c:90:52:a1:f4:55:5d:be:3f:5e:38:5c:f0:21:
b4:9b:2e:44:5b:8c:51:66:1f:a2:0f:17:9e:ed:9a:d5:eb:9f:
c0:b6:c9:23:05:8b:d2:fc:4b:da:c3:63:3e:bf:7e:89:dc:cd:
8a:c6:f4:c6:30:64:1a:05:aa:5b:b8:9b:08:a2:91:09:4b:14:
ab:55:74:62:6f:a6:e2:53:40:bb:88:d1:fb:fc:05:fa:b0:1f:
20:0f:d8:17:11:c9:2c:eb:a0:66:ac:5c:31:ef:ce:9f:2a:b8:
82:0d:b4:92:37:22:dd:b6:03:d2:ce:2b:5b:2d:54:91:7d:dc:
7b:54:18:af:5a:f5:a0:4c:b2:a2:5a:d3:06:8a:b6:11:a2:49:
ab:11:c3:48:4e:cf:de:4b:00:88:69:08:18:98:e2:e5:be:3e:
78:69:7b:37:46:9a:c1:21:ad:a1:8b:11:f8:e1:8c:d8:9b:f5:
81:4b:69:95:fa:0d:82:19:40:f8:9f:32:87:62:72:6e:71:7f:
e2:24:50:00:a6:ac:36:55:9f:61:5b:3c:14:a5:a5:d9:da:cd:
18:dc:2a:a5:bc:ca:e3:69:79:a6:18:7b:2c:bb:73:8e:ca:c0:
26:a0:e0:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:59:08 2025 by rpki-client