Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
File: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft (raw, json)
Hash identifier: hksakmY3R5fHpgEp24/D77nH440Sta59mPvdgjguDxM=
Subject key identifier: 71:86:75:2E:15:F3:93:96:6E:32:6F:D4:96:6F:5C:AE:53:7C:3A:BE
Authority key identifier: F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
Certificate issuer: /CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Certificate serial: 0197B6A1A11BE31515112D60FB8DBFC798C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
Manifest number: 0649
Signing time: Sat 28 Jun 2025 13:02:15 +0000
Manifest this update: Sat 28 Jun 2025 13:02:15 +0000
Manifest next update: Sun 29 Jun 2025 13:02:15 +0000
Files and hashes: 1: 8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl (hash: aSnXofP2MEBgRkmuHGtHgVa4s+Rw3CEcKQQGalk2PDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a1:1b:e3:15:15:11:2d:60:fb:8d:bf:c7:98:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c064460ea6d5cfd3f88dc1cf4ed07502bbb699
Validity
Not Before: Jun 28 13:02:15 2025 GMT
Not After : Jun 29 13:02:15 2025 GMT
Subject: CN=7186752e15f393966e326fd4966f5cae537c3abe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6b:13:50:05:66:59:11:0b:b3:1d:5c:5b:66:
29:9a:12:e6:10:a4:87:57:a8:7b:c0:09:01:21:8b:
4b:33:76:38:e7:d9:fe:4d:45:5a:62:18:68:1b:28:
57:7f:b6:60:a5:7c:29:c8:1a:2a:28:55:7b:8f:8e:
5c:1f:3c:87:07:d8:30:a2:dd:41:d1:fa:5f:f6:28:
77:3d:26:22:86:88:75:d8:17:43:c7:9c:77:b4:af:
32:90:ad:10:e8:d6:d2:1e:9d:66:0d:d7:0f:83:67:
bf:c9:81:0d:da:1a:4b:64:99:66:59:61:57:d0:8d:
b7:0a:cd:be:dc:f8:95:79:13:43:3e:47:a8:f3:21:
6b:be:7d:32:f8:a7:5e:a5:9d:e6:b4:7c:5b:0a:1c:
68:92:97:69:84:ad:97:26:19:34:d0:94:87:bf:af:
9e:01:f5:73:83:5d:fe:1d:82:6d:b4:2a:73:22:74:
ee:23:55:7f:1b:74:c5:dc:c5:2b:59:af:f8:87:21:
0a:e1:38:25:15:e6:a0:f1:2f:61:82:eb:75:e3:32:
74:b0:98:70:fa:08:90:cf:13:d9:f1:9d:1a:00:6f:
3e:07:77:84:94:57:77:31:43:e0:b8:71:65:48:2b:
28:32:d4:a3:8a:e2:9e:31:7b:be:78:8b:11:3e:3f:
b8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:86:75:2E:15:F3:93:96:6E:32:6F:D4:96:6F:5C:AE:53:7C:3A:BE
X509v3 Authority Key Identifier:
keyid:F1:C0:64:46:0E:A6:D5:CF:D3:F8:8D:C1:CF:4E:D0:75:02:BB:B6:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cBkRg6m1c_T-I3Bz07QdQK7tpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/f4506e-fb88-48a9-8285-c9acfe3f3121/1/8cBkRg6m1c_T-I3Bz07QdQK7tpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:06:fc:32:54:2e:4a:0e:12:f1:26:2f:b8:e3:73:2d:1c:7b:
a5:00:9f:2a:c5:c9:e4:6f:83:1a:80:05:c7:9e:02:41:fa:51:
42:27:e0:b5:35:67:17:f0:56:aa:74:f9:ea:55:2e:23:dd:40:
10:be:16:9f:40:6b:76:c8:b4:c8:d0:60:37:c2:15:62:10:af:
42:f5:6c:5d:82:54:f7:0d:28:5b:2d:dd:75:ff:39:8c:16:76:
45:33:3d:b5:a4:7f:6a:0b:52:db:3e:cd:31:81:37:78:00:1d:
52:dc:fd:c6:bc:8a:a8:cc:93:7a:5d:84:7a:46:d8:ed:98:6c:
c1:86:87:34:3a:10:2c:eb:fa:0c:b9:49:c6:63:ec:49:0f:03:
69:31:36:3d:07:85:c0:d8:13:4f:18:5c:30:08:55:49:58:c4:
97:1e:77:73:c9:16:91:49:76:36:dc:87:02:7b:90:41:64:ca:
b9:b7:10:71:6b:e6:9d:7d:a5:ca:94:8b:27:65:e5:21:96:ab:
8a:9f:a5:e2:ed:de:91:fc:cb:2a:d6:f4:a9:5c:07:89:e3:24:
03:ef:25:2d:13:63:cd:7f:05:77:1f:3d:9c:ba:ac:0f:df:67:
aa:61:e1:fa:03:44:74:7e:f4:48:a0:c4:ca:20:c8:ee:1a:b9:
cd:c9:f1:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:22 2025 by rpki-client