Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
File: 8aDGf_hZ9VWviSGTiIfGCFJppAI.mft (raw, json)
Hash identifier: cq8KzTfvePy5UecQ86d7J29bz+ODS+YbjdFblDFbycQ=
Subject key identifier: A8:A3:FB:55:86:D4:2C:2A:CC:6D:BE:D0:15:46:BB:EA:F1:DA:4A:CD
Authority key identifier: F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
Certificate issuer: /CN=f1a0c67ff859f555af8921938887c6085269a402
Certificate serial: 0197488C2F798F59940238CDE7F923CE74D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
Manifest number: 12B6
Signing time: Sat 07 Jun 2025 04:00:36 +0000
Manifest this update: Sat 07 Jun 2025 04:00:36 +0000
Manifest next update: Sun 08 Jun 2025 04:00:36 +0000
Files and hashes: 1: 8aDGf_hZ9VWviSGTiIfGCFJppAI.crl (hash: GzRMBMs90jnrS4PU45DYtX/IbzxZq7EPKOBUinQf2Rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:2f:79:8f:59:94:02:38:cd:e7:f9:23:ce:74:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1a0c67ff859f555af8921938887c6085269a402
Validity
Not Before: Jun 7 04:00:36 2025 GMT
Not After : Jun 8 04:00:36 2025 GMT
Subject: CN=a8a3fb5586d42c2acc6dbed01546bbeaf1da4acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:c9:a7:34:4c:76:40:84:cb:49:dc:a2:2a:0a:
2e:3d:08:77:9b:b8:8f:9e:44:4e:09:cc:06:a7:6a:
45:7e:e3:c2:67:0c:fe:9d:38:c5:2e:e5:94:0c:30:
95:78:81:ea:75:a4:87:99:6f:e5:05:17:96:64:37:
45:b4:79:9f:98:5e:44:3d:37:0a:75:ee:3b:db:91:
45:fb:74:7f:f1:19:9c:3d:75:81:bf:21:18:05:c3:
37:b5:dd:d4:ef:14:14:7e:ba:9d:56:77:1d:48:eb:
71:f2:b8:f0:ba:58:4f:d4:a4:e6:7f:eb:45:10:9e:
f7:c7:3b:6c:1d:a3:2a:0c:0a:03:1c:1a:53:da:71:
04:b5:8f:0a:1a:4e:4f:4e:33:c8:05:f4:c6:60:e8:
08:f7:b4:e1:f6:66:69:4b:5c:77:8b:d6:26:9b:0e:
81:15:fb:11:e3:40:96:d0:a2:04:1c:00:09:dd:3f:
c0:1e:4a:2b:69:21:26:d7:cb:5d:72:88:2b:34:0b:
25:c2:87:2f:c5:d7:99:64:49:ca:96:77:12:a3:be:
e4:61:17:09:c6:e1:e4:da:f2:5d:0d:cd:3d:ab:12:
3a:d0:21:c3:02:8b:5d:c2:94:a4:84:8c:c0:fa:5d:
11:4f:a3:1e:01:87:79:bc:fe:4b:59:58:94:7c:bd:
b2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A3:FB:55:86:D4:2C:2A:CC:6D:BE:D0:15:46:BB:EA:F1:DA:4A:CD
X509v3 Authority Key Identifier:
keyid:F1:A0:C6:7F:F8:59:F5:55:AF:89:21:93:88:87:C6:08:52:69:A4:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aDGf_hZ9VWviSGTiIfGCFJppAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/2df8ed-1a73-4ed2-818a-b41999e5cf54/1/8aDGf_hZ9VWviSGTiIfGCFJppAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:f7:4c:bc:60:66:17:ab:e3:f3:74:40:26:27:5e:98:c8:eb:
7e:77:3a:64:31:06:40:a0:f0:69:af:a1:63:75:6a:6d:0e:34:
c3:d4:c6:a6:eb:28:db:fa:22:c3:78:f3:b8:db:15:97:34:dc:
14:e5:8d:9c:48:e2:9c:ac:43:ed:bc:28:f0:68:f9:77:ea:41:
69:56:4a:39:f1:52:0d:7f:09:91:f7:bf:c3:17:3f:95:4e:5c:
64:6a:99:c0:56:bf:dc:96:d8:65:07:fd:34:2a:68:8e:17:79:
2d:a8:86:50:53:ea:ba:3b:8a:02:d9:94:f0:3d:38:28:28:1d:
74:00:66:0b:24:0b:53:fa:4a:ae:87:41:60:d8:81:cb:d2:af:
f0:c2:47:ef:8b:95:71:91:33:3b:26:a4:70:27:4c:c9:7c:7c:
19:28:ec:f1:93:01:b1:e9:b3:5a:c2:e8:41:69:96:42:65:ac:
fd:66:5a:e5:6d:50:de:46:9c:b3:1c:9b:d3:b5:2c:a4:f7:72:
2c:11:e2:a6:d3:45:12:1f:27:c8:7d:37:e7:94:6f:ba:1c:61:
92:51:43:2f:fd:e6:a9:98:22:58:54:be:c0:0b:f4:fd:bb:c9:
85:52:ad:6f:89:45:d3:73:cc:9a:0f:79:47:7c:e9:ee:2f:70:
8e:12:fd:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:12:50 2025 by rpki-client