Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
File: 8iyKma2nf70-JAFPXiTxr2lQXCM.mft (raw, json)
Hash identifier: oRIUSUeg21WENpS03MOr8N+xmbEt5Rz5fq8huZTBJ4M=
Subject key identifier: 15:F2:52:A5:C2:C9:5A:FD:A7:CC:35:36:FF:F8:73:81:E8:EC:FD:0A
Authority key identifier: F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
Certificate issuer: /CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Certificate serial: 01984B538EF0912BCB39EE70460BEDE32682
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
Manifest number: 1602
Signing time: Sun 27 Jul 2025 10:00:23 +0000
Manifest this update: Sun 27 Jul 2025 10:00:23 +0000
Manifest next update: Mon 28 Jul 2025 10:00:23 +0000
Files and hashes: 1: 8iyKma2nf70-JAFPXiTxr2lQXCM.crl (hash: sWI+5dzkDwf8N+AUhtfgSlYwLbEzbEXQPkrNxLOSnK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4b:53:8e:f0:91:2b:cb:39:ee:70:46:0b:ed:e3:26:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Validity
Not Before: Jul 27 10:00:23 2025 GMT
Not After : Jul 28 10:00:23 2025 GMT
Subject: CN=15f252a5c2c95afda7cc3536fff87381e8ecfd0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f5:b8:d8:67:5a:e9:14:a2:0c:e2:2e:6c:83:
cf:93:e6:66:04:4d:46:b2:19:8d:20:ae:bd:50:0b:
f7:ea:e4:bf:5d:2f:e6:5c:11:b0:e3:5e:71:0f:f4:
4f:50:b0:a8:0c:a0:3a:ad:a6:d3:2a:18:73:5f:99:
9b:80:47:0a:64:36:cc:88:df:fa:d3:1c:db:b7:a2:
db:2b:c5:ba:06:01:7f:73:eb:43:69:0e:1f:b8:b9:
43:9d:54:6a:06:17:04:70:e9:d1:d7:21:d3:56:44:
38:ad:9a:f0:85:a8:9f:49:40:98:a6:a3:7e:90:0c:
c5:ae:55:d6:85:28:88:eb:18:32:a5:58:a4:81:11:
bd:11:1c:bd:5a:09:2d:be:05:6f:0a:9a:48:e6:16:
f6:eb:a1:e1:22:f0:6a:54:83:c2:fa:37:cb:32:12:
7e:02:8c:d9:8f:81:3d:d6:c7:87:8a:ad:eb:3f:4c:
f9:5e:c9:1c:7a:4c:3c:f5:f9:be:29:0f:f8:eb:38:
27:7a:ce:40:2a:81:d0:93:03:59:4e:96:ce:4a:67:
2e:bb:03:21:0b:0f:52:68:b5:c9:41:8d:bf:b7:14:
ed:09:1e:7d:5e:a1:30:0d:e0:2e:d0:f9:55:8c:e0:
d8:55:38:18:e9:99:5b:23:ae:1c:83:7f:f1:31:8e:
f7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F2:52:A5:C2:C9:5A:FD:A7:CC:35:36:FF:F8:73:81:E8:EC:FD:0A
X509v3 Authority Key Identifier:
keyid:F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:0d:e0:17:5b:cb:d9:10:6e:49:72:dd:99:ba:b4:05:5a:60:
96:7d:08:b3:b7:44:eb:1c:5d:a9:da:f3:9c:ec:9e:39:2d:9b:
5d:c3:55:3d:18:19:2e:8d:80:ea:26:34:fb:b0:99:e6:cb:9e:
67:57:54:88:cd:20:79:f1:23:84:44:60:f6:54:ad:ac:2b:53:
e4:37:7a:4d:83:01:55:35:58:d7:a0:37:2d:16:4c:0e:54:03:
88:a8:78:84:78:b3:d2:91:29:d5:0c:ed:39:d8:b9:de:4e:e4:
1f:d6:fb:2f:ba:db:17:0b:4e:69:b6:6b:d8:a7:ff:ef:76:66:
de:d8:96:20:0b:ff:38:01:12:85:d9:dd:40:5c:05:2a:d2:38:
a9:f2:98:06:29:af:ec:4b:26:25:2b:50:0e:a8:27:e0:e1:30:
f6:ee:2b:66:57:c5:50:b2:2a:ae:a1:0b:16:d9:7c:35:d5:1c:
f2:1f:4a:f2:b2:c2:38:06:00:42:3e:4d:e9:f8:b2:86:97:7d:
46:17:31:0e:51:e5:57:dd:fe:68:1a:3b:6f:d7:0e:3d:96:84:
1c:e9:ec:84:6c:c6:29:e0:7b:8c:3c:e8:53:64:42:fa:fe:df:
cc:3b:33:b9:00:98:d7:d4:ed:5e:69:1b:71:3a:f8:75:1c:5c:
00:53:ff:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 11:59:34 2025 by rpki-client