Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
File: h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft (raw, json)
Hash identifier: zQvTPv07riAIZ5WKJDDVVitFCnboBhOg+Uyi5RK+A78=
Subject key identifier: F5:A2:90:52:73:B9:C0:59:99:5B:1A:03:23:7C:8A:96:EB:34:86:1C
Authority key identifier: 87:C0:A7:B4:3D:42:92:49:17:A5:90:59:8B:44:32:5E:4C:C9:2E:E4
Certificate issuer: /CN=87c0a7b43d42924917a590598b44325e4cc92ee4
Certificate serial: 019848525EB50478B8F2F791FD1BEE4C2A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8CntD1CkkkXpZBZi0QyXkzJLuQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
Manifest number: 09D4
Signing time: Sat 26 Jul 2025 20:00:14 +0000
Manifest this update: Sat 26 Jul 2025 20:00:14 +0000
Manifest next update: Sun 27 Jul 2025 20:00:14 +0000
Files and hashes: 1: h8CntD1CkkkXpZBZi0QyXkzJLuQ.crl (hash: zhh8rHFr5g8/oPqLdzjgPfOzTsktZrso3XLnu08o2uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8CntD1CkkkXpZBZi0QyXkzJLuQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:48:52:5e:b5:04:78:b8:f2:f7:91:fd:1b:ee:4c:2a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c0a7b43d42924917a590598b44325e4cc92ee4
Validity
Not Before: Jul 26 20:00:14 2025 GMT
Not After : Jul 27 20:00:14 2025 GMT
Subject: CN=f5a2905273b9c059995b1a03237c8a96eb34861c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:70:f3:19:4b:cb:ae:27:bc:9c:cc:cf:8e:2b:
ad:88:42:6f:b5:65:3d:90:0f:5d:48:3a:3c:08:65:
e1:0d:ef:a5:40:da:a4:f9:01:31:d3:27:20:1e:ba:
3a:99:6c:41:25:b3:03:86:1d:22:9d:e8:c9:66:51:
dc:52:da:96:ca:aa:e9:ec:ae:ff:c7:e0:18:67:68:
b9:9b:c1:5a:7f:49:f8:75:ce:04:4d:6a:09:05:48:
97:02:d3:be:c3:3d:74:ad:4c:e7:35:e6:66:b3:73:
9c:75:1b:91:2e:a4:a8:4e:c6:77:a3:c1:f9:47:96:
cd:80:7c:75:ae:af:4c:4f:b2:3c:7b:8d:06:4c:a5:
d5:f7:c6:48:42:1d:4a:2b:47:a6:5a:59:c0:0b:03:
5e:e7:85:b2:82:74:db:01:a4:15:1e:11:85:d3:c8:
f5:19:21:a4:30:45:4b:4f:5d:cb:a2:71:1f:bd:b3:
67:7a:37:2b:1c:4c:67:36:2a:b5:10:b7:60:0a:43:
92:6c:bd:b5:ff:35:14:51:4d:03:cb:a9:67:04:44:
91:17:18:4b:c2:ae:52:b8:ac:20:fc:cf:59:07:e4:
15:e2:cc:4d:ad:40:91:1b:02:08:5b:bb:b1:d6:2c:
35:72:54:1e:48:fd:3b:0b:01:b9:25:d3:ed:98:ae:
fa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:A2:90:52:73:B9:C0:59:99:5B:1A:03:23:7C:8A:96:EB:34:86:1C
X509v3 Authority Key Identifier:
keyid:87:C0:A7:B4:3D:42:92:49:17:A5:90:59:8B:44:32:5E:4C:C9:2E:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8CntD1CkkkXpZBZi0QyXkzJLuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/a0083c-d0a8-4d8a-94b4-735625e0d297/1/h8CntD1CkkkXpZBZi0QyXkzJLuQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:5d:bf:21:91:0c:66:a7:e0:6f:d0:bc:59:c0:dd:c6:68:17:
d4:b0:75:51:71:92:ad:ae:18:95:f6:7f:f8:00:9b:3a:6e:9e:
a3:ea:8a:33:32:e4:5e:35:b9:8e:6a:4e:e3:b7:fe:b5:c4:e0:
23:1f:d1:c8:dc:82:0a:0e:2f:dd:7b:ce:6e:db:0f:77:db:9f:
ab:2a:a0:bb:ff:f2:e8:90:c4:fe:41:4a:3c:f9:3d:0d:cb:72:
1f:d9:61:e0:fb:77:f0:61:0d:1c:b3:d6:1a:be:31:4b:8a:02:
75:9f:6b:d8:3b:7b:92:f9:14:02:08:cf:ec:b7:01:88:d8:60:
bf:b7:ef:6e:9d:d2:a4:81:0f:5b:8f:b5:ed:3e:d0:b8:63:82:
c5:fe:22:8c:a4:3f:b5:79:1f:28:50:12:f2:18:7d:a4:28:19:
98:8a:0b:e2:a4:20:e6:e9:37:c9:10:c0:6c:56:ee:78:84:0d:
29:cc:13:72:f2:ad:8f:c5:93:45:29:1a:fe:4d:63:9b:d3:46:
70:82:b6:d9:11:f3:75:d9:1e:a6:ef:a0:cb:22:fe:5b:f3:75:
29:c8:85:54:48:4f:57:7b:65:e8:a0:de:41:29:ac:85:cd:63:
9b:2b:2d:86:56:d6:1c:b5:fc:c2:90:0e:d9:91:c8:0c:e2:1a:
57:81:b7:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 01:34:31 2025 by rpki-client