Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
File: 8iyKma2nf70-JAFPXiTxr2lQXCM.mft (raw, json)
Hash identifier: J3J+3xpCExVq1QYKrEbisSVqcNUpjXWwjZBshkvuxXo=
Subject key identifier: 98:BA:2F:36:0D:F1:3E:70:1B:0D:E5:E0:6E:EB:73:D5:9F:B2:2C:01
Authority key identifier: F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
Certificate issuer: /CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Certificate serial: 0197B6A16E3C0261E0F55E63965AC91273B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:02 +0000
Manifest this update: Sat 28 Jun 2025 13:02:02 +0000
Manifest next update: Sun 29 Jun 2025 13:02:02 +0000
Files and hashes: 1: 8iyKma2nf70-JAFPXiTxr2lQXCM.crl (hash: WVxWyHbZxZzagMz/fT+Ggh2kLjNBrk01uVI0hR5jRcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6e:3c:02:61:e0:f5:5e:63:96:5a:c9:12:73:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Validity
Not Before: Jun 28 13:02:02 2025 GMT
Not After : Jun 29 13:02:02 2025 GMT
Subject: CN=98ba2f360df13e701b0de5e06eeb73d59fb22c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:ef:ea:71:04:78:51:6d:4f:48:b5:f0:5f:1e:
2b:90:e3:28:01:04:67:8a:df:4e:38:07:94:fa:a5:
c5:ce:67:2b:ac:40:e5:15:ce:04:8b:9c:ee:19:41:
7f:9d:69:37:47:a0:4f:38:07:31:4d:18:32:74:a3:
38:8b:5a:2f:87:92:fe:0b:e8:d2:b6:24:de:00:f1:
ce:3a:81:dc:14:25:a5:d5:2e:f3:33:c6:f0:32:fd:
31:6e:ea:89:c7:97:91:82:97:82:7d:3c:f5:13:48:
3b:b4:14:1d:62:51:86:74:bb:f8:b7:ca:be:c0:eb:
47:de:74:0d:2f:74:29:80:6d:54:c6:3c:82:b2:b9:
34:7d:a5:ac:4e:9b:48:90:6e:31:3a:30:48:ce:4a:
b0:0f:aa:3a:e7:b8:77:77:5e:8d:9e:d6:94:38:4c:
20:64:d4:84:69:26:77:8b:b5:6c:cd:d3:a2:b9:7e:
4b:ab:fd:c7:35:09:f0:e5:58:7a:f3:2d:e2:54:b9:
6d:42:30:26:cc:5e:8d:5a:0b:c4:19:01:d7:f0:81:
d8:6b:68:50:8c:cd:8d:52:f2:c1:fa:cb:93:9d:e6:
d8:36:b8:3b:ae:bf:29:b9:02:14:6e:d2:b9:d1:a3:
d0:c1:76:35:e3:f1:b4:9e:9f:d2:b5:8c:f3:26:88:
35:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:BA:2F:36:0D:F1:3E:70:1B:0D:E5:E0:6E:EB:73:D5:9F:B2:2C:01
X509v3 Authority Key Identifier:
keyid:F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:74:0b:d2:f0:59:ae:e7:dc:7c:83:98:02:a9:d3:cd:b5:92:
e5:c0:eb:a8:03:7d:58:6d:d7:bd:a6:51:bd:1e:46:d9:f4:4d:
65:84:71:71:ac:95:0f:18:8a:c2:3d:fb:91:8c:9f:2b:5a:ed:
9b:48:39:12:ae:64:66:43:94:83:58:5f:75:64:5a:35:09:38:
49:ae:9a:ca:af:9d:d8:f6:6b:63:81:0b:9c:35:18:98:f3:2b:
9b:29:3f:0c:70:b3:6d:f6:78:cf:9a:2b:66:88:f8:ed:f8:60:
9a:12:40:b8:bb:b1:5a:55:33:6a:f4:7d:7f:7f:05:54:73:85:
bc:22:1c:fd:d9:09:3b:bc:83:c7:cc:3c:8f:50:36:ad:44:08:
09:60:eb:06:1d:31:37:2c:31:fc:ec:c5:57:86:83:82:a6:6b:
84:0b:1b:e4:b9:1f:84:a9:8b:c3:d8:79:ca:3d:cb:de:9c:cd:
29:ce:07:1b:ba:b2:26:5b:04:49:23:0c:7a:c6:ae:23:ed:be:
4e:ee:ad:e4:35:74:60:88:15:31:7d:79:04:a0:d3:f4:e3:30:
70:c4:0c:6f:b4:19:48:0b:75:ad:92:6a:ab:2d:e4:fb:74:da:
4a:0a:6d:9b:6b:ed:bb:f4:77:77:ea:f0:60:e1:d7:ed:ce:4c:
32:44:f9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:47 2025 by rpki-client