Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
File: 8D9771R9ACUziqa2rueqHb4Urio.mft (raw, json)
Hash identifier: 6slZXoK+QPxiBGv/nVQk82fP1HVWdO7ZdQwjQJobgrE=
Subject key identifier: B0:9F:8E:B4:56:F5:FE:BC:F4:DA:34:1B:1C:7B:23:6B:0C:A3:98:04
Authority key identifier: F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
Certificate issuer: /CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Certificate serial: 0197B6A1E9358D3A2DCAF8F627C3FCB037A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:33 +0000
Manifest this update: Sat 28 Jun 2025 13:02:33 +0000
Manifest next update: Sun 29 Jun 2025 13:02:33 +0000
Files and hashes: 1: 8D9771R9ACUziqa2rueqHb4Urio.crl (hash: 4d+z1Rqcis3Mj/vRe7AdJHyWJAyQAyn/hr1ypc0nxzk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:e9:35:8d:3a:2d:ca:f8:f6:27:c3:fc:b0:37:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f7bef547d0025338aa6b6aee7aa1dbe14ae2a
Validity
Not Before: Jun 28 13:02:33 2025 GMT
Not After : Jun 29 13:02:33 2025 GMT
Subject: CN=b09f8eb456f5febcf4da341b1c7b236b0ca39804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:5d:a9:1c:41:a9:dc:9c:ad:ed:7e:fd:76:7b:
64:1e:90:fa:20:70:fe:3c:0e:8a:cd:b2:04:c1:e8:
d4:31:5c:8d:d5:66:5f:1b:d9:cb:05:ea:f3:7e:8c:
ef:4c:24:8c:c2:fc:e9:98:7f:51:d5:ee:05:93:16:
e2:cb:0b:74:e3:45:46:4f:58:bd:6a:5a:f5:10:1c:
be:2d:77:cb:13:71:a3:28:34:34:e6:a3:1d:51:f0:
05:bf:92:9a:dd:ef:3f:2a:b5:fd:61:51:ea:7c:36:
1a:e9:40:e7:71:e2:b3:8f:91:b3:ad:1e:e1:da:5f:
ef:f1:90:56:61:e0:f6:ad:f7:d4:5e:8e:0e:01:ae:
53:11:d3:88:f6:75:f9:94:58:e2:3a:5e:f4:7d:11:
a9:50:6e:43:55:31:e6:36:65:54:e3:7b:b0:2f:d1:
34:1f:f1:f9:e3:d5:ea:e6:8b:59:46:56:2a:4f:5e:
4d:77:5c:9a:ab:76:a7:65:5a:ed:62:bb:5c:3c:24:
69:02:e0:97:7c:c7:d3:13:8f:0f:de:a3:6c:8f:2f:
1b:38:3c:65:43:55:04:9d:67:16:6f:36:ca:19:2c:
b9:e0:98:b7:eb:58:bd:48:b8:0a:61:33:70:c5:ac:
3d:17:d7:40:da:87:0c:13:d1:fd:9c:57:38:22:5f:
02:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9F:8E:B4:56:F5:FE:BC:F4:DA:34:1B:1C:7B:23:6B:0C:A3:98:04
X509v3 Authority Key Identifier:
keyid:F0:3F:7B:EF:54:7D:00:25:33:8A:A6:B6:AE:E7:AA:1D:BE:14:AE:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D9771R9ACUziqa2rueqHb4Urio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/881a48-8af3-47ac-8ea8-d5c274fef964/1/8D9771R9ACUziqa2rueqHb4Urio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:03:a0:b0:15:f7:2c:8a:a7:1d:9e:34:96:e3:c1:ab:c9:08:
b8:8b:14:e9:ab:77:6f:2e:1f:05:14:03:90:d0:de:ee:a2:48:
69:cf:19:a0:82:8a:d8:85:88:b4:5f:0a:7e:bf:06:23:9c:41:
0b:66:0a:0b:bc:43:97:ef:14:f5:f8:29:75:33:b7:63:de:a2:
26:20:87:9d:d9:b1:7d:6e:e6:4a:db:e1:51:32:a0:93:42:86:
9c:13:a6:6f:41:47:c8:b5:29:4a:84:cb:65:21:33:a0:83:82:
51:74:de:db:92:48:bf:a0:0f:8a:80:ec:a8:7e:d4:12:9f:e1:
00:99:52:8e:00:da:58:31:62:80:2e:bc:53:87:ed:1b:fa:0d:
e0:50:9b:71:6b:34:5d:0e:36:80:80:c7:02:9e:2d:ff:3e:27:
4e:c6:79:2b:2a:19:9b:e1:31:74:04:1c:80:f4:53:be:90:6c:
9a:cc:e5:c0:b4:ea:9e:f6:c0:50:9f:fc:5b:a5:b1:3b:e1:d8:
9a:09:c8:d5:5c:7a:24:0f:43:b8:26:79:d1:2a:a9:cd:d5:99:
71:82:7f:4f:40:18:54:8c:3b:d1:63:c0:74:f7:8c:e3:3b:f0:
b5:8d:4c:79:b0:76:c0:b6:3f:2c:f2:12:d7:9d:0a:fa:8e:a3:
78:d5:e8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:19 2025 by rpki-client