Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
File: 8gRTIEA3KhoBrACJS58IvT_hreM.mft (raw, json)
Hash identifier: vXy3ZjxC2CXSDX/lO0cUx0j/PIlWMGPCXl9vumm3qeI=
Subject key identifier: 7F:9D:A2:36:95:CF:6E:E1:3B:38:4C:47:81:57:00:57:9B:63:F0:52
Authority key identifier: F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
Certificate issuer: /CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Certificate serial: 0198D5BBC2E38AAF180411DFB4BB0E0CB42B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
Manifest number: E6
Signing time: Sat 23 Aug 2025 07:01:48 +0000
Manifest this update: Sat 23 Aug 2025 07:01:48 +0000
Manifest next update: Sun 24 Aug 2025 07:01:48 +0000
Files and hashes: 1: 8gRTIEA3KhoBrACJS58IvT_hreM.crl (hash: yFrNahwQDk8K4ZElA3wATvikXMh+6K/61Qvt/SSihGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:bb:c2:e3:8a:af:18:04:11:df:b4:bb:0e:0c:b4:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Validity
Not Before: Aug 23 07:01:48 2025 GMT
Not After : Aug 24 07:01:48 2025 GMT
Subject: CN=7f9da23695cf6ee13b384c47815700579b63f052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5f:79:a3:23:f9:62:d3:3c:1e:e9:fd:33:fb:
10:66:e2:8a:94:1b:70:60:dd:51:c5:65:ce:3f:7c:
01:d3:78:78:68:fe:ca:e9:07:80:d5:a5:27:b4:3c:
cf:24:44:83:f0:d5:30:33:56:72:9a:5f:e1:65:39:
e4:fb:c2:12:98:3d:3f:aa:33:69:f0:a9:15:f4:2b:
bb:63:2e:15:b8:41:f0:b2:7c:53:13:2e:39:42:f3:
8b:53:ce:70:31:4d:a3:51:24:75:6e:d0:3e:27:0d:
f8:d3:fe:1a:54:5f:0b:ea:57:54:4b:82:36:8c:58:
9c:10:fa:74:a5:e9:7f:1b:da:49:24:fd:df:09:64:
49:f4:28:85:46:cd:5a:81:16:4f:83:67:a2:fb:48:
a3:b6:42:a2:2c:d2:27:e5:62:59:1b:84:00:9a:e3:
d2:1a:92:3d:ff:61:18:fa:97:a3:dd:da:06:8d:12:
12:e8:bd:fc:51:9f:7a:63:66:aa:d1:5f:c7:2a:67:
61:db:a6:93:52:fe:82:78:2f:75:d5:81:1f:93:6b:
89:d8:62:bb:77:ba:86:18:cb:c5:01:74:77:a4:92:
81:f9:6d:18:ab:0a:d2:90:b6:f1:a6:ee:89:68:02:
08:c6:f1:2b:74:f1:2e:91:37:e3:bf:c0:76:40:dd:
a6:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:9D:A2:36:95:CF:6E:E1:3B:38:4C:47:81:57:00:57:9B:63:F0:52
X509v3 Authority Key Identifier:
keyid:F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:15:8e:a2:55:32:2a:f2:5c:32:5e:60:f5:6e:e3:e8:d2:99:
2b:8e:07:0b:79:d5:83:33:71:a9:b4:eb:61:e3:67:d7:4e:21:
74:06:82:8d:ae:4b:ca:47:4a:5b:d5:f6:7c:37:c1:e5:90:38:
ad:fa:b7:63:d8:f2:d9:e7:46:db:e9:e8:6a:1c:d4:1c:ba:33:
a7:d1:f5:f4:c3:07:9b:b4:ca:d5:42:b4:b7:a3:2e:2c:aa:9b:
8f:47:b1:36:dd:5e:ea:e7:eb:d0:13:b3:71:08:d0:86:e5:b2:
c6:ec:e3:5e:5c:98:e7:3a:c9:0d:6c:ab:f7:22:58:b0:b0:eb:
ba:1f:b1:00:19:64:bb:fb:06:dd:60:6e:77:b7:61:55:4d:0d:
dc:18:fb:76:2e:74:a4:35:c3:5e:d0:31:00:6d:78:5e:42:b8:
72:67:5d:2f:a3:e1:2b:f4:e2:3e:ef:d5:d2:25:11:82:08:5c:
21:62:5c:7c:97:24:48:d3:63:a6:b1:c8:b4:06:e6:6b:59:d9:
e4:20:c9:35:4c:8b:09:44:25:6a:3c:17:63:88:67:0e:fb:c2:
42:a8:a9:f6:c0:af:cd:ef:ca:1c:ae:cd:52:1d:e7:ae:b4:79:
b4:2b:d0:60:aa:00:44:c5:f5:6c:e2:14:9d:31:83:0e:be:59:
74:ec:bc:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 13:44:13 2025 by rpki-client