Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
File: 8gRTIEA3KhoBrACJS58IvT_hreM.mft (raw, json)
Hash identifier: 1R7cpIQAaslx59gmuVTf+3pFtMSZTuQS+NzQwbV3zP8=
Subject key identifier: 70:48:10:5F:52:7D:6F:F8:71:C4:2E:07:DF:DD:7D:D3:F8:FC:3A:85
Authority key identifier: F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
Certificate issuer: /CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Certificate serial: 0197B7EAB4378014E424DB011A2AF813295C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
Manifest number: 52
Signing time: Sat 28 Jun 2025 19:01:41 +0000
Manifest this update: Sat 28 Jun 2025 19:01:41 +0000
Manifest next update: Sun 29 Jun 2025 19:01:41 +0000
Files and hashes: 1: 8gRTIEA3KhoBrACJS58IvT_hreM.crl (hash: wBQssTerH0uPB3XZXOvg4PfE6m64XmdqwdehNhogFR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:b4:37:80:14:e4:24:db:01:1a:2a:f8:13:29:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Validity
Not Before: Jun 28 19:01:41 2025 GMT
Not After : Jun 29 19:01:41 2025 GMT
Subject: CN=7048105f527d6ff871c42e07dfdd7dd3f8fc3a85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e4:0c:0f:7e:45:65:70:a1:b0:0e:80:ed:30:
02:bc:43:16:4e:e8:4f:c5:09:06:b3:16:5b:5d:c4:
03:e5:db:65:61:dd:32:ae:9f:6f:dc:fd:6d:61:61:
f0:a5:85:05:6a:ec:7b:be:e8:12:31:73:38:85:03:
63:18:4f:41:2b:73:b3:6f:a8:e7:d5:84:fb:be:de:
03:2e:5e:82:34:c3:84:55:7b:15:3f:eb:de:58:1d:
85:e0:8b:10:95:f7:c7:c0:cd:2c:f9:1d:02:c9:bd:
f9:12:b3:12:70:5b:d5:10:3d:2f:79:e2:30:a2:bf:
6c:1c:7b:71:4a:3f:e6:96:84:f9:5f:33:5c:bd:c7:
e8:ab:2a:97:cb:c2:f6:80:86:7e:5f:84:07:33:10:
10:c6:66:94:5e:15:99:15:36:37:13:d5:aa:a4:90:
f8:33:96:e0:37:4b:c8:5d:77:34:ed:56:64:75:9d:
db:70:35:e8:ae:7b:31:45:3b:ac:2f:ee:f4:cc:bd:
2a:38:05:df:ac:36:5c:9d:5f:20:ac:01:c2:53:9c:
e6:dd:9a:b2:5d:0e:87:89:cc:c7:ea:96:9e:ae:7b:
a0:a1:32:19:51:51:b8:a0:f9:cb:86:4b:95:2d:48:
d0:45:25:d5:e6:9e:07:53:da:18:57:ea:ee:87:56:
55:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:48:10:5F:52:7D:6F:F8:71:C4:2E:07:DF:DD:7D:D3:F8:FC:3A:85
X509v3 Authority Key Identifier:
keyid:F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:fd:88:82:cb:26:16:d0:5c:94:79:22:8c:3f:2e:9f:7a:66:
3f:fb:96:b0:13:e9:09:64:92:c2:ae:b6:08:26:5d:c0:86:da:
dc:ac:f0:ab:42:7a:55:1a:3d:8d:9a:c1:9b:f0:8a:e4:71:c6:
30:e5:f1:ba:5c:01:31:1b:fe:3f:85:b0:1d:32:74:de:79:5b:
20:dd:b4:f9:11:20:15:a8:94:cc:9c:33:b8:a8:25:1a:bf:ed:
9c:8f:b1:6d:de:4c:d6:a3:bb:ca:23:09:2a:a4:77:9a:d6:f0:
f7:99:59:e2:19:25:bb:de:33:05:1c:84:80:fa:56:fe:68:db:
af:d1:24:ba:c1:38:da:cc:4f:54:3e:c1:e6:28:85:2d:92:5d:
48:c8:88:89:30:ab:ef:06:16:b7:9f:47:43:ad:08:5c:45:c1:
17:5d:f0:e4:b8:8c:b5:a2:05:81:e1:ec:d9:9d:c6:50:35:fe:
10:af:8a:8d:cc:58:b9:a3:a5:1b:26:91:27:9f:21:39:87:0f:
e7:e3:9c:95:cf:18:e5:b7:77:ea:28:cd:4e:18:e0:83:74:5d:
e3:64:73:7e:6c:c8:bc:b2:4e:6e:45:e6:e9:aa:cd:a5:86:c5:
70:af:95:3c:f4:0c:f9:bc:d1:e8:e1:b2:95:aa:55:9a:55:3f:
f3:e1:d0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:39 2025 by rpki-client