Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
File: 8mAhR5HPhJn8k68B96Q_XL6QKpg.mft (raw, json)
Hash identifier: Ca3TS0tIr9yfLustenlcNJcbjvykF0cwzokMeDXVbJ0=
Subject key identifier: 6F:EA:48:F4:75:CE:16:1C:E4:28:CD:5F:7B:AE:EA:88:92:85:5C:70
Authority key identifier: F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
Certificate issuer: /CN=f260214791cf8499fc93af01f7a43f5cbe902a98
Certificate serial: 0198D65FE74752B5B4730DBF913B707E2DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
Manifest number: 0F2F
Signing time: Sat 23 Aug 2025 10:01:05 +0000
Manifest this update: Sat 23 Aug 2025 10:01:05 +0000
Manifest next update: Sun 24 Aug 2025 10:01:05 +0000
Files and hashes: 1: 8mAhR5HPhJn8k68B96Q_XL6QKpg.crl (hash: 4cGbbBfSWIB6DS6FWjG+sFU+tQ6EAkvoTWUeLOVRjBM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 10:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:e7:47:52:b5:b4:73:0d:bf:91:3b:70:7e:2d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f260214791cf8499fc93af01f7a43f5cbe902a98
Validity
Not Before: Aug 23 10:01:05 2025 GMT
Not After : Aug 24 10:01:05 2025 GMT
Subject: CN=6fea48f475ce161ce428cd5f7baeea8892855c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0b:5b:4b:49:a2:e0:85:4a:0c:36:c5:9c:6b:
a2:ff:bf:8c:ff:f2:49:3d:4d:4a:f0:47:c5:fe:b0:
06:c7:e1:ab:06:0e:0d:85:82:30:2c:80:74:a4:b4:
bb:2f:cf:c5:94:12:2d:48:4f:32:40:eb:3c:14:9e:
79:fc:bf:10:df:7e:41:25:38:91:c6:76:b7:9b:00:
2a:3c:f8:ae:dc:a6:7d:d3:8a:43:19:63:d9:50:92:
7b:45:80:5d:fc:da:b7:ac:12:e4:95:fb:83:a5:99:
68:36:d0:47:90:55:ad:9c:e8:1b:50:fe:b7:7f:17:
7b:ea:c7:d1:70:bb:87:9d:4d:8d:d7:21:a8:8d:4e:
12:48:43:d0:36:15:25:e3:b5:d2:8d:a1:a2:1b:72:
7c:ab:b3:40:bd:b6:16:ec:1f:ca:47:c5:9b:33:42:
ce:d2:d4:60:b2:e5:cb:61:6c:bf:9b:8f:d5:93:4e:
50:e3:02:56:d6:26:ba:84:29:91:8f:65:54:90:ff:
c2:50:ce:e3:df:33:b4:33:41:ef:38:c4:b4:08:78:
d2:71:02:ff:cd:86:2d:36:c6:4e:34:bf:7e:b9:ca:
ec:03:b8:d1:fb:25:75:20:6a:37:d2:8a:a3:a5:a0:
cd:82:8b:70:34:fd:4f:63:01:1d:d4:cc:01:50:45:
34:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:EA:48:F4:75:CE:16:1C:E4:28:CD:5F:7B:AE:EA:88:92:85:5C:70
X509v3 Authority Key Identifier:
keyid:F2:60:21:47:91:CF:84:99:FC:93:AF:01:F7:A4:3F:5C:BE:90:2A:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mAhR5HPhJn8k68B96Q_XL6QKpg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/575915-ff7f-4364-a3e6-731e8b11d55d/1/8mAhR5HPhJn8k68B96Q_XL6QKpg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:64:5a:64:21:6f:58:41:ef:e1:41:2d:05:8f:6e:5d:49:41:
93:2a:22:e9:c3:6b:05:fe:45:8c:f3:9f:bf:0b:99:f0:df:d7:
f9:86:14:7b:5f:57:ca:d5:2f:b0:c2:bb:37:66:d5:17:8d:a9:
79:12:90:07:07:f2:a9:25:c3:8b:e0:fe:3b:cc:82:8c:77:79:
41:5c:36:a4:6e:7a:3c:13:06:10:3d:f6:5b:a2:fc:d1:3b:f5:
e8:5c:b6:45:32:f1:60:cd:92:a4:39:69:5c:27:f2:f0:58:aa:
d2:65:74:61:ed:61:89:57:d4:f8:bd:c5:51:14:f7:0c:07:62:
30:50:4e:09:8b:5a:f6:a2:9d:9b:56:65:2c:53:fb:1c:85:92:
13:a2:4f:ae:2b:19:4a:04:ad:f2:9c:91:a1:ee:df:b0:d0:a6:
2a:fb:87:ae:2e:cc:64:27:07:68:9a:50:4b:49:8d:89:50:04:
56:cf:b1:e1:1d:c8:d9:0c:56:a2:12:93:da:d4:e4:a8:32:bd:
8b:d8:7e:ec:bc:ba:98:77:3f:31:85:a5:26:a8:06:d6:5b:45:
15:e8:82:cc:42:40:ed:2b:5c:a9:88:c4:5a:1d:5d:41:c4:e6:
96:8e:82:91:0c:a1:3e:2f:25:64:a7:21:97:e2:39:43:8b:c7:
c2:9e:a1:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 17:51:03 2025 by rpki-client