Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
File: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft (raw, json)
Hash identifier: fNMhGnEk96F4Aj5RBiabzTrHLrLEQ3iw+qF6B7aDY2U=
Subject key identifier: 48:4C:57:8E:0A:B2:7B:D4:66:BE:A3:78:48:59:7B:79:83:E7:91:79
Authority key identifier: F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
Certificate issuer: /CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Certificate serial: 01984B54A26B2F8E35EECCE0E378577247BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
Manifest number: 1600
Signing time: Sun 27 Jul 2025 10:01:34 +0000
Manifest this update: Sun 27 Jul 2025 10:01:34 +0000
Manifest next update: Mon 28 Jul 2025 10:01:34 +0000
Files and hashes: 1: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl (hash: vkkLuU1/Shfc10UMvKqNgdaBc9nt/tEeUiUHQsI8Phg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:54:a2:6b:2f:8e:35:ee:cc:e0:e3:78:57:72:47:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Validity
Not Before: Jul 27 10:01:34 2025 GMT
Not After : Jul 28 10:01:34 2025 GMT
Subject: CN=484c578e0ab27bd466bea37848597b7983e79179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:f1:78:9b:0c:2a:72:e8:9a:eb:05:e8:ed:34:
07:1e:3f:94:53:ba:5e:eb:e4:01:94:a6:7a:df:e3:
f4:f8:ed:38:65:b6:f7:e8:ca:e2:0d:8d:de:43:db:
5e:9f:4b:f3:8f:be:a7:00:2f:de:98:ff:9c:10:0f:
37:69:94:fa:5f:5e:9d:1f:fd:66:55:05:ce:5d:81:
3a:d4:f6:a2:3a:fa:f5:a3:2b:86:56:49:5d:0e:f3:
35:0a:69:5f:39:ac:f5:26:d8:de:5f:27:bb:e8:8e:
0f:54:58:d9:85:2d:59:4d:ad:27:08:54:87:d3:bd:
d5:7d:34:61:7c:68:71:2c:f0:5a:e8:8e:fc:d1:cc:
da:af:e3:b2:e4:f7:fc:ae:20:94:b9:89:f6:43:a7:
e3:e4:79:04:28:ac:ba:14:7d:ac:3e:b8:de:9e:4f:
bb:b6:f0:44:af:37:81:cb:15:19:34:f2:5d:05:0c:
59:c7:25:d9:e5:92:b8:8b:e8:34:58:66:07:ee:de:
0b:b2:d6:b8:cd:ef:a1:0d:2b:92:aa:ba:27:9e:78:
53:40:ca:ba:c7:75:20:5a:d4:92:a5:58:fe:d3:21:
d7:10:e2:3c:de:4a:0c:15:b6:61:9e:e2:b0:7f:bd:
e4:97:33:db:9d:37:08:d4:03:1b:f1:14:aa:71:12:
cd:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4C:57:8E:0A:B2:7B:D4:66:BE:A3:78:48:59:7B:79:83:E7:91:79
X509v3 Authority Key Identifier:
keyid:F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:22:56:c3:8d:0a:6f:0f:6b:bf:c2:2b:c6:d9:f5:1a:ea:fb:
40:ab:75:9d:fe:e4:51:ec:f8:eb:86:7d:33:1d:47:64:f3:dd:
39:e1:31:0f:63:a2:34:47:fa:fd:a0:5e:85:f9:4c:e8:04:99:
2a:07:30:5a:ef:57:3a:bd:b7:23:eb:fe:9f:4e:e7:60:e3:c3:
56:1c:0c:56:02:37:b9:4a:5d:c1:4f:02:3e:f8:96:83:0e:eb:
65:4a:17:14:04:45:32:9f:90:d5:22:cc:f1:63:b1:1a:e6:4a:
41:70:13:a6:03:6a:74:42:b5:13:2f:11:ce:c2:ee:9a:a8:3c:
e9:d4:13:03:6e:51:93:f2:67:99:a4:d4:7a:f6:54:d7:4f:c7:
f3:f9:77:50:95:6c:0c:7d:45:09:1f:0b:23:92:7a:67:d1:29:
cb:c4:5a:2f:81:0d:7d:29:32:3d:ca:dd:a0:cb:2f:ba:e9:c0:
79:1b:f1:3c:ca:37:27:b2:7a:26:97:e2:30:0b:50:e4:82:ae:
cb:85:63:24:0e:c9:bf:6c:ed:9f:54:1c:00:23:0f:00:20:5b:
b1:be:2b:1e:40:bb:79:d7:ac:ae:40:17:0b:e2:21:85:e7:ca:
43:dc:6b:cb:75:1d:25:91:ee:5f:86:9e:eb:9c:59:a7:99:fe:
1c:18:d8:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:57:04 2025 by rpki-client