Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
File: 8qsLWFucOWKI0g6c9mWuHeOfeDM.mft (raw, json)
Hash identifier: pJzJJaVj6LJP1rS3DZhOyjXJLUnLbbzgd7DvWSJ351w=
Subject key identifier: 39:58:09:73:1C:FA:49:1C:F2:05:25:9C:DD:7C:64:77:8D:69:65:0F
Authority key identifier: F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
Certificate issuer: /CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Certificate serial: 0197B745B2C15B884F290D2817B9890C3CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 16:01:27 +0000
Manifest this update: Sat 28 Jun 2025 16:01:27 +0000
Manifest next update: Sun 29 Jun 2025 16:01:27 +0000
Files and hashes: 1: 8qsLWFucOWKI0g6c9mWuHeOfeDM.crl (hash: RmzlXzoiQ3ggESh+cp5U0tilnyM+nbS7ZWj5SrFK0Q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:b2:c1:5b:88:4f:29:0d:28:17:b9:89:0c:3c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2ab0b585b9c396288d20e9cf665ae1de39f7833
Validity
Not Before: Jun 28 16:01:27 2025 GMT
Not After : Jun 29 16:01:27 2025 GMT
Subject: CN=395809731cfa491cf205259cdd7c64778d69650f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f9:8b:cf:64:18:1f:32:83:82:06:6f:6e:99:
96:8b:e3:2a:68:e1:8a:b7:5b:f1:12:ab:e6:9d:38:
49:49:ac:0d:e0:d2:a3:ad:dc:8e:d7:f8:d1:3b:a9:
76:1b:05:8c:b4:9c:97:7c:ac:4b:86:59:a9:ec:4c:
0a:a0:f2:0b:c6:24:78:15:11:03:15:1c:6e:13:de:
df:a1:27:df:52:58:8e:f3:43:8a:c4:f3:18:71:5c:
e5:9c:bd:04:8f:e0:e3:6a:b4:b0:7c:9c:90:c4:d8:
29:a1:2c:7e:26:77:68:d6:23:5e:c6:23:ca:54:8a:
83:45:4f:2b:3e:b4:bd:29:68:5f:1f:80:69:72:e2:
09:be:12:36:8a:74:53:a9:14:21:20:b4:56:51:02:
d5:84:64:2a:ff:57:b6:73:ac:31:4f:0b:b8:e7:00:
f4:c0:7c:4c:3b:a0:a0:b3:0d:fa:11:b5:fb:6f:ea:
90:ed:cf:7b:d0:8e:a8:38:00:7a:2e:24:c2:70:1d:
4b:80:3c:1e:62:eb:dd:df:33:e6:81:32:7c:f2:d4:
07:a1:1b:b5:45:ec:e0:00:78:8d:08:a9:fa:d1:7f:
b0:12:53:02:f4:04:ce:4d:21:40:1a:f4:a4:b0:f8:
c8:0c:bc:57:c4:ab:e1:62:4e:d2:c1:52:e1:ff:8c:
6c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:58:09:73:1C:FA:49:1C:F2:05:25:9C:DD:7C:64:77:8D:69:65:0F
X509v3 Authority Key Identifier:
keyid:F2:AB:0B:58:5B:9C:39:62:88:D2:0E:9C:F6:65:AE:1D:E3:9F:78:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qsLWFucOWKI0g6c9mWuHeOfeDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/bbfa19-debc-4c77-8d63-908b250cba79/1/8qsLWFucOWKI0g6c9mWuHeOfeDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:17:8b:de:8a:23:8c:e9:39:fb:db:74:73:17:34:24:eb:32:
86:0f:7b:66:60:0a:5a:c1:49:e7:a3:a8:36:e7:fc:d6:2e:14:
75:06:71:fe:eb:00:5a:63:c9:76:2c:3f:56:63:e5:0d:9c:5d:
60:95:7f:00:ba:6d:4e:2d:7d:a1:b1:cb:0b:83:98:db:f8:d2:
9f:c5:68:73:fa:f3:97:c9:23:3c:ae:fd:d7:ed:a8:62:d2:9d:
44:34:3e:14:99:c9:2c:09:0d:01:da:36:77:f2:11:ef:77:8f:
2e:86:68:9b:a3:7d:77:42:f8:33:be:8c:e6:f4:68:26:80:80:
cd:ee:c4:6c:01:1b:c0:d6:3b:27:6c:bb:4b:2b:65:48:54:8a:
94:02:ea:68:52:87:db:b5:bb:74:57:dd:fd:33:00:a1:29:22:
f9:76:ef:61:88:fb:1b:5d:68:f3:f9:c0:2a:bf:eb:7e:16:80:
89:59:07:f9:8f:bf:24:ac:5d:45:0d:91:1f:bf:32:6b:9a:6d:
b4:23:8d:38:18:f8:17:12:92:db:9d:f1:d6:27:0c:f4:e1:ab:
65:a9:73:99:17:95:d5:b2:ac:46:cb:7f:a6:6b:b1:0b:68:1b:
43:dd:2e:67:4c:6f:89:37:02:04:5b:65:01:6f:1c:17:a6:cb:
b4:64:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:29:07 2025 by rpki-client