Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
File: 12TH8_eLh21rBDwWzdvd6x55W5w.mft (raw, json)
Hash identifier: 2jG8NxFlrIUeCSpsPVq5pR2ZV5utmvhgN30aTZ+Z5qg=
Subject key identifier: C6:43:0A:C8:3A:6F:9E:96:03:A7:97:17:6E:D8:39:93:B3:1F:CF:C2
Authority key identifier: D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
Certificate issuer: /CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Certificate serial: 01984A09CF575B1090E681D4B72EA8092420
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
Manifest number: 0601
Signing time: Sun 27 Jul 2025 04:00:13 +0000
Manifest this update: Sun 27 Jul 2025 04:00:13 +0000
Manifest next update: Mon 28 Jul 2025 04:00:13 +0000
Files and hashes: 1: 12TH8_eLh21rBDwWzdvd6x55W5w.crl (hash: ORKRpOHjFfnRBskHOJ8vohiUX+e76xnRRFP+I8cixP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:cf:57:5b:10:90:e6:81:d4:b7:2e:a8:09:24:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d764c7f3f78b876d6b043c16cddbddeb1e795b9c
Validity
Not Before: Jul 27 04:00:13 2025 GMT
Not After : Jul 28 04:00:13 2025 GMT
Subject: CN=c6430ac83a6f9e9603a797176ed83993b31fcfc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:68:ae:f9:ce:42:b9:37:10:c3:e4:e7:01:72:
fd:55:4b:14:04:cf:69:cb:b6:e6:6a:25:d6:d5:15:
ed:e7:7e:09:95:7a:16:7e:f9:36:a0:8e:8e:03:6e:
c5:7f:0c:b2:3c:06:78:5f:19:17:ea:92:d1:a1:f2:
06:8d:d7:ae:17:71:bf:35:7a:ca:55:37:c8:4b:f1:
5c:7f:22:a3:32:a4:d9:79:c3:9a:d3:ef:68:23:8a:
77:6a:a4:99:0c:c7:ac:ee:48:87:0c:94:2b:51:4e:
09:54:09:4a:dd:c8:13:19:02:b7:85:52:3c:b4:44:
8f:40:eb:52:9d:72:13:e9:d0:35:d0:0d:10:a3:2f:
15:98:96:cb:1b:02:ff:f1:2a:d1:92:14:08:06:d5:
10:6c:8f:bf:2a:0a:22:cc:fd:41:24:4c:e0:9d:31:
32:cd:7a:cf:d5:8a:2a:b4:c0:09:b2:f6:3c:a6:05:
ff:0b:ba:16:b6:ec:97:6a:50:b4:81:69:1e:c5:66:
8b:81:eb:10:00:fe:37:86:b9:33:b5:d1:12:33:0f:
0d:2d:9b:55:21:08:8e:c9:b0:ba:21:da:f2:d4:08:
a5:c3:1f:d8:06:32:21:c5:2e:ac:f1:cf:43:b5:7f:
56:83:bb:c9:3d:14:33:97:08:a4:cc:d3:5e:0b:83:
a3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:43:0A:C8:3A:6F:9E:96:03:A7:97:17:6E:D8:39:93:B3:1F:CF:C2
X509v3 Authority Key Identifier:
keyid:D7:64:C7:F3:F7:8B:87:6D:6B:04:3C:16:CD:DB:DD:EB:1E:79:5B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12TH8_eLh21rBDwWzdvd6x55W5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/826de6-5039-4037-8802-5e2cbf942405/1/12TH8_eLh21rBDwWzdvd6x55W5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:8b:22:69:71:79:2a:44:c9:93:2e:b4:36:f4:d0:e7:3e:94:
81:03:4b:8b:87:8b:82:a4:d9:e1:d7:32:29:3b:c5:2e:34:b2:
79:0d:8d:48:12:25:da:72:03:ed:17:e7:c3:f4:b3:71:f5:65:
bc:c9:e8:96:fe:43:88:ff:66:59:1f:95:3d:28:a8:75:0a:78:
ac:2f:f5:12:cf:75:d4:71:46:a1:e2:b4:b4:96:57:1b:af:db:
41:74:6d:be:12:fb:05:12:2b:ff:4c:8a:e7:50:4c:8b:5c:52:
c2:95:76:46:d1:5c:02:7c:8a:44:c6:28:4b:3a:6f:68:e7:b9:
ac:03:ae:14:f0:da:29:84:24:5d:3c:66:c9:5a:63:17:0f:d1:
b5:a6:cd:35:da:39:9d:2a:f3:4e:f4:6d:b7:1f:ac:60:e7:cb:
8f:6d:9a:66:c6:0e:6f:e4:01:ed:98:27:43:a7:ff:70:e9:47:
e4:e8:b6:57:01:ed:dc:81:31:43:5b:7e:3d:60:9b:d5:66:f5:
e4:88:d5:c5:55:18:df:64:e1:14:14:e2:9c:a2:d5:4a:cd:1a:
55:e5:c0:0c:f3:47:21:be:4a:e9:d3:99:7b:80:d7:36:52:2d:
46:ad:fe:e6:a9:43:d4:96:93:5c:9e:77:ea:ba:73:0b:66:1c:
1f:9c:11:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 12:25:02 2025 by rpki-client