Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
File: 8V__itxu51EnLAqR0F3K_36NLWk.mft (raw, json)
Hash identifier: Hagkad2ZqXYohtyNCpJbv37wrzygIqm7x5Q96YWovLY=
Subject key identifier: 18:B1:69:FA:42:1B:FE:22:CB:64:5A:EC:DC:5B:2E:E5:AC:C3:FD:76
Authority key identifier: F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
Certificate issuer: /CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Certificate serial: 0197B6A251FE0E3BF17CD7601C53C23B9C83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:03:00 +0000
Manifest this update: Sat 28 Jun 2025 13:03:00 +0000
Manifest next update: Sun 29 Jun 2025 13:03:00 +0000
Files and hashes: 1: 8V__itxu51EnLAqR0F3K_36NLWk.crl (hash: xblTCSm6Z0a+RkFO8NaSDwEIOhI+ma45pF+Z1gPjFow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:51:fe:0e:3b:f1:7c:d7:60:1c:53:c2:3b:9c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15fff8adc6ee751272c0a91d05dcaff7e8d2d69
Validity
Not Before: Jun 28 13:03:00 2025 GMT
Not After : Jun 29 13:03:00 2025 GMT
Subject: CN=18b169fa421bfe22cb645aecdc5b2ee5acc3fd76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:61:d5:c3:35:68:46:4f:af:98:68:72:0d:8c:
93:a0:0d:4c:85:c4:ed:8b:df:1f:6c:50:d9:a7:59:
9b:15:7c:9d:4d:2e:55:f3:46:78:53:6c:c4:ef:5d:
93:95:e4:95:35:5f:e3:f2:a1:8b:1d:d8:f3:c5:f1:
3b:5c:1e:be:05:f7:30:89:78:07:bd:6d:41:ad:2d:
fe:d5:54:92:00:b0:54:ed:2b:66:7a:0e:89:e6:e6:
fd:db:85:f7:12:95:66:3a:a7:26:20:07:0c:78:f4:
eb:0e:0e:7d:52:72:0b:67:49:8b:a1:7f:d4:47:93:
a3:61:5a:60:f4:83:b8:96:e5:6b:5e:19:a4:27:b4:
c4:a9:75:8c:4d:b5:bb:87:59:f6:fe:f7:77:3a:80:
42:a1:28:6d:a2:1e:28:73:01:6c:0b:bc:33:66:bd:
8d:d0:09:56:8c:5b:b2:f6:16:db:e8:46:76:b5:76:
38:31:e1:42:87:99:52:6b:9e:07:86:fe:4f:e3:7a:
26:64:63:f1:dc:0c:35:03:03:e2:db:e1:fd:8e:9a:
52:68:27:20:df:b3:cb:40:c1:d6:92:38:f1:89:c6:
8b:af:cf:e9:1d:19:29:71:03:20:c2:2c:b2:d8:13:
aa:03:c0:40:d8:c5:72:79:a3:97:22:84:1e:97:e9:
80:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:B1:69:FA:42:1B:FE:22:CB:64:5A:EC:DC:5B:2E:E5:AC:C3:FD:76
X509v3 Authority Key Identifier:
keyid:F1:5F:FF:8A:DC:6E:E7:51:27:2C:0A:91:D0:5D:CA:FF:7E:8D:2D:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8V__itxu51EnLAqR0F3K_36NLWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/0ac9d0-fe5a-4002-92ed-c3f4b985714c/1/8V__itxu51EnLAqR0F3K_36NLWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:4c:c5:22:9d:c5:c9:7e:5c:92:df:bd:d2:31:34:29:e2:91:
53:79:f0:f4:16:b4:0d:13:b3:23:f4:f0:1f:ec:73:32:d2:07:
83:dd:6b:21:41:e5:26:5b:a6:fe:91:0c:8e:b9:a5:05:1e:e4:
ee:f7:5e:09:de:e2:c5:ac:4b:0b:21:67:b9:c5:05:90:23:bf:
be:12:5a:e1:91:ac:ae:6b:64:18:ca:55:59:56:a9:ee:ca:1c:
ba:ed:aa:4b:55:7f:f8:77:ff:3f:b2:f4:d6:22:f0:3a:17:95:
1a:fc:f6:04:d0:a9:77:bd:93:6e:52:55:c6:e6:1d:0f:a0:bb:
9b:88:a1:f6:d3:b9:6c:2b:2d:c5:e2:f1:c1:e0:d3:4b:e8:f3:
95:b5:06:43:ff:50:05:a2:a7:cd:7a:62:61:6c:e0:4e:d8:7a:
4c:45:4d:4f:e6:99:d5:ce:63:0d:9c:00:86:b6:61:e0:4f:b9:
62:15:b7:a0:e2:44:c6:cf:40:18:78:f7:81:e4:55:be:43:52:
dc:67:f2:e7:bb:d9:b8:2f:62:f0:aa:0c:9b:13:c5:06:4d:78:
dd:52:04:49:15:6f:bd:b2:0c:f0:da:38:c8:75:37:5c:2d:38:
2e:19:af:d5:6c:59:7f:80:79:49:75:52:f2:7a:d2:04:67:bf:
06:d8:b2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:52 2025 by rpki-client