Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
File: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft (raw, json)
Hash identifier: MuislFCKpIHjvIO49e+5YHRiE1k5IG4l8okbPHA0qYs=
Subject key identifier: 17:7A:28:6B:4D:27:57:B1:E3:43:69:2E:E4:57:25:47:6C:8B:EE:0A
Authority key identifier: F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
Certificate issuer: /CN=f25551c7047b3bf9031808c21b8379b9b860c426
Certificate serial: 019845882926D81C59A837A11E3C4E38E668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
Manifest number: 0110
Signing time: Sat 26 Jul 2025 07:00:07 +0000
Manifest this update: Sat 26 Jul 2025 07:00:07 +0000
Manifest next update: Sun 27 Jul 2025 07:00:07 +0000
Files and hashes: 1: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl (hash: 5YPm3j81BzIl84kaDntWL8j+mRKszWFO0ucacHfHzjo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:88:29:26:d8:1c:59:a8:37:a1:1e:3c:4e:38:e6:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25551c7047b3bf9031808c21b8379b9b860c426
Validity
Not Before: Jul 26 07:00:07 2025 GMT
Not After : Jul 27 07:00:07 2025 GMT
Subject: CN=177a286b4d2757b1e343692ee45725476c8bee0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:84:32:ae:bf:b0:4e:a1:79:8e:88:14:91:13:
bf:03:15:a6:62:d7:2f:b8:7c:cd:38:65:d6:b8:6a:
a9:31:b2:e4:34:e8:94:b2:2f:db:94:94:3b:8e:e9:
8c:e1:d1:54:35:4c:b8:68:8f:a3:f6:15:b2:33:ee:
dd:1d:d2:2e:65:a8:a7:21:01:ba:3f:0b:5d:2e:68:
f1:cd:d6:11:e3:c3:20:51:53:0f:69:fc:d0:27:62:
9a:cf:ad:01:7d:d0:b1:1e:72:7d:33:77:98:0a:ef:
2b:29:ba:e5:0e:5e:62:7f:89:61:fd:1b:01:be:cb:
e5:d8:0a:f5:b7:19:ef:2b:6f:70:43:a7:8d:b9:9a:
ff:16:90:da:a4:a3:4a:39:2c:1b:93:74:22:8f:07:
b4:5a:d1:16:a3:29:c2:5d:bd:5b:d0:ea:da:98:63:
0b:16:0b:d4:b1:e8:bc:9b:72:8a:be:45:0d:71:7e:
b1:cd:2c:1e:8f:b5:6b:94:0c:64:40:6c:00:cb:cf:
c0:25:d2:f9:62:ca:38:ca:6b:c3:3d:96:2f:54:05:
20:5b:f4:90:61:9b:77:8b:8a:24:09:b8:08:a4:d4:
c4:64:c6:4c:e4:89:39:65:40:77:69:de:83:a3:1a:
dc:f9:d3:cf:6c:45:36:ce:ac:56:5e:f3:7d:a4:72:
0e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7A:28:6B:4D:27:57:B1:E3:43:69:2E:E4:57:25:47:6C:8B:EE:0A
X509v3 Authority Key Identifier:
keyid:F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:7b:26:00:5b:a2:df:90:52:1f:50:cf:e2:36:13:74:07:fd:
40:99:37:24:bf:68:15:1a:f6:e5:7c:fc:0f:96:26:01:80:57:
c5:25:e2:0c:ec:56:55:84:04:de:0c:b9:85:5f:39:47:9f:71:
e6:4e:a8:3f:8e:2d:6c:85:37:5c:f3:da:24:20:f7:f4:70:b2:
be:8c:1b:56:06:7d:5e:63:67:16:79:50:b6:7f:f9:39:21:a9:
67:11:f3:b7:31:c3:e0:41:5f:94:8a:b0:48:2d:2a:ca:1f:3f:
aa:06:c9:7e:ae:49:23:76:73:21:9d:4f:85:78:74:51:40:b6:
0d:8c:a9:6d:44:04:51:1a:58:4c:34:45:ba:ca:7a:16:d4:15:
bd:08:6e:ed:33:8f:84:20:0e:9e:8a:65:ba:75:df:69:54:26:
55:ea:4f:3f:39:fc:50:d0:30:be:16:a3:81:09:15:4b:e9:a3:
d5:7a:44:3e:ab:7d:4c:48:01:8a:da:7a:80:0a:68:10:bb:0b:
3a:e0:e4:e0:57:98:fd:9d:f6:4f:11:f7:19:f2:87:2a:7f:c5:
0d:68:bb:b6:85:bd:9b:e4:95:1b:08:19:59:3c:7f:a1:67:91:
cf:fe:84:e8:d4:8d:88:8a:bc:be:e6:06:76:c4:39:e7:b1:bc:
09:87:26:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:46:00 2025 by rpki-client