Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
File: 8E3LHKHUaLwERw8dtKRuz1uCeEg.mft (raw, json)
Hash identifier: tUYZaptR/CC18NrZ13ugfc5MuMLq/WCr1H82jmiv6sE=
Subject key identifier: AE:05:8D:4A:7D:29:9F:1E:4F:31:E0:1C:B6:97:E2:C3:B1:B7:AC:80
Authority key identifier: F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
Certificate issuer: /CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Certificate serial: 019853B2472B2D3A20012175AF8D0BC9B23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
Manifest number: 0285
Signing time: Tue 29 Jul 2025 01:00:49 +0000
Manifest this update: Tue 29 Jul 2025 01:00:49 +0000
Manifest next update: Wed 30 Jul 2025 01:00:49 +0000
Files and hashes: 1: 8E3LHKHUaLwERw8dtKRuz1uCeEg.crl (hash: W0Kj34cMNW+s6HVc0rulCwThVKQjXbGK4lTgZe9oqpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:b2:47:2b:2d:3a:20:01:21:75:af:8d:0b:c9:b2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Validity
Not Before: Jul 29 01:00:49 2025 GMT
Not After : Jul 30 01:00:49 2025 GMT
Subject: CN=ae058d4a7d299f1e4f31e01cb697e2c3b1b7ac80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:82:78:14:d6:cb:a5:bb:4e:e1:7f:c9:24:32:
c7:e1:2a:f4:a0:85:69:3b:97:5a:76:8a:49:ce:0f:
aa:de:f3:51:fa:6e:e9:e6:f3:77:a4:62:e5:00:24:
70:a8:d0:75:a9:a1:05:a7:70:70:6c:5c:c5:bf:e1:
48:28:fc:51:5b:23:fd:e1:3f:4c:51:5c:6f:59:02:
f7:32:40:d7:22:36:dd:60:89:90:8c:d8:cc:ec:5c:
10:16:0d:0c:50:a0:d5:8e:4d:86:07:7c:bf:3e:79:
15:00:0d:a7:84:b5:3e:06:aa:f7:57:f1:3c:b2:92:
42:de:54:39:02:be:97:73:59:35:76:fe:53:cd:06:
be:7d:24:ee:55:e7:02:8e:f0:86:e4:34:76:97:39:
8d:6b:d3:5c:94:1f:59:33:bf:10:05:ef:74:db:80:
2f:69:c9:1e:8c:c1:4e:30:dc:56:68:d6:be:19:f7:
72:2d:4d:93:de:e8:84:02:31:8a:f1:31:a2:0d:88:
41:92:9e:56:05:2d:36:d7:e7:1f:20:ff:11:c2:d4:
c7:70:57:90:e1:3c:41:8f:b7:22:b7:7f:a6:04:33:
5a:c1:7d:86:80:66:08:3b:0a:fd:cd:65:59:54:77:
a6:11:ff:6d:0f:33:0f:14:c8:b1:00:bf:7e:89:30:
e0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:05:8D:4A:7D:29:9F:1E:4F:31:E0:1C:B6:97:E2:C3:B1:B7:AC:80
X509v3 Authority Key Identifier:
keyid:F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:3e:93:ee:f5:12:1f:15:f3:01:19:88:2a:51:a2:94:fb:8e:
81:17:05:7c:ff:ad:e3:f2:54:35:62:fc:e1:b4:46:e8:ee:1b:
59:88:98:3c:c0:55:2c:49:98:79:07:b5:0b:dd:4c:4e:91:00:
5d:aa:41:02:a5:8e:cd:9d:c2:13:63:6b:77:11:42:41:2c:cf:
e6:2d:93:f5:91:5a:3d:55:00:63:c0:bd:31:4b:46:b3:65:16:
40:76:6a:9d:fd:70:68:43:85:c7:69:05:85:fa:1d:f6:c1:9a:
d1:8c:e5:ce:79:46:7a:7b:3d:db:fa:e5:b6:31:40:82:c9:60:
19:70:3d:41:a9:e7:36:70:cb:eb:c5:7d:3a:0d:09:7c:85:1f:
88:6d:d7:0a:07:04:40:ad:6f:b5:66:46:52:46:ef:7e:dd:b3:
8a:c5:d5:0b:13:f1:2d:11:c5:21:ea:5f:4d:73:dc:68:a0:88:
ee:a5:8a:80:1d:ec:c4:28:f3:51:9b:48:6b:13:58:bf:7e:2f:
c1:68:90:c7:fe:7c:ad:eb:1c:e2:a9:41:f1:cc:cd:fb:32:45:
b1:f8:49:c3:d8:7d:80:8d:15:7b:0e:ee:9b:36:6a:16:7e:35:
f6:00:3c:25:a4:98:5b:fe:b3:60:82:c3:32:2a:4e:82:d4:27:
81:84:fa:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 07:26:53 2025 by rpki-client