Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: DI+fGWdmUqlustMVuy+FHtQivQfbW+CvAKDfEcUOOTo=
Subject key identifier: EF:9F:9F:45:84:9E:30:56:E6:2B:E7:C8:24:46:2E:04:9C:34:FD:6C
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 019764DF48064C6365EC5A1829A5CB2976C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 100C
Signing time: Thu 12 Jun 2025 16:00:43 +0000
Manifest this update: Thu 12 Jun 2025 16:00:43 +0000
Manifest next update: Fri 13 Jun 2025 16:00:43 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: Lsif9QJZO2bP3CHFXiVT3uztUMu6D7D/lhi4njfg+4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 16:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:df:48:06:4c:63:65:ec:5a:18:29:a5:cb:29:76:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Jun 12 16:00:43 2025 GMT
Not After : Jun 13 16:00:43 2025 GMT
Subject: CN=ef9f9f45849e3056e62be7c824462e049c34fd6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:dd:5c:f1:a4:ee:c7:58:85:3a:86:c5:60:
2d:14:cf:4c:d3:48:3d:f4:4f:50:bc:96:6f:b6:64:
cc:3f:76:70:f3:17:f6:1e:c2:7c:52:d5:d0:05:4c:
b0:76:5c:14:9e:5b:dc:fd:77:ff:a4:78:fc:fb:87:
bb:c3:77:52:9e:1c:c4:0d:86:a4:42:4e:ab:a6:35:
12:3b:f3:bc:97:42:6f:bd:28:93:59:f9:99:48:74:
d9:9d:2e:b7:a5:af:86:a1:f8:7a:6a:b7:56:63:9e:
1f:42:20:5e:2e:b0:5c:21:3d:5d:53:6d:c5:55:58:
07:a4:38:e7:03:8b:a7:ed:76:69:84:a4:14:8a:ab:
5f:4f:f8:7b:07:35:a7:28:45:55:88:72:9b:51:16:
40:86:18:5b:49:d2:0d:11:9c:f1:92:48:77:89:42:
98:c1:b5:26:1f:48:62:5e:65:3a:3d:ac:75:a1:b1:
f9:5b:6a:a0:ea:16:74:2c:a1:78:2c:4e:2f:89:e8:
59:c9:b1:49:f9:79:ac:1c:bb:a7:a2:e2:3e:8c:9b:
cc:c3:5d:ee:83:12:ac:8b:d9:2f:32:74:33:82:9a:
bd:d5:22:20:ba:f0:9b:aa:33:dd:43:dc:c5:9e:60:
d1:eb:c4:d3:ad:87:c4:6f:a3:57:d8:5c:43:76:d7:
63:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9F:9F:45:84:9E:30:56:E6:2B:E7:C8:24:46:2E:04:9C:34:FD:6C
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:c4:c0:02:a4:26:b4:a2:a2:d7:de:8e:ca:ac:39:52:dc:ff:
50:23:8e:bd:a5:3f:b1:e5:1f:8d:50:c4:97:76:ab:90:41:47:
4d:b9:09:56:6b:29:23:96:b2:13:80:60:11:f6:00:80:51:29:
af:dc:57:29:14:db:f8:9e:f7:58:a9:84:9f:1b:20:5e:91:d9:
91:0a:2f:d0:4e:a5:a0:e4:c3:01:f2:f8:eb:46:e3:95:bc:ce:
fa:03:79:03:49:0b:aa:6c:76:24:fb:61:23:8d:40:d1:d5:5b:
02:df:0a:47:31:5e:e4:1d:b3:55:d6:d6:be:78:9b:68:4e:bf:
52:6d:7e:75:34:e1:5e:cc:24:39:14:dd:9b:12:54:f6:1e:73:
8a:19:4c:cf:41:11:62:0e:e0:69:ce:e1:71:dc:2e:77:ae:c2:
6c:e7:25:92:87:2b:fa:e5:cc:45:e8:6f:f5:48:0c:ec:16:51:
00:90:43:d8:53:3c:11:56:3f:22:6b:8c:2b:e8:4d:19:93:cf:
7b:02:ec:c4:1b:2d:37:9a:dc:6f:0c:1a:45:d4:9e:2c:2b:5c:
9a:1b:0b:00:71:7c:9d:f3:5b:93:d8:11:37:66:e7:b8:cf:00:
98:3e:e2:d4:9e:cc:c9:46:86:3b:00:df:0d:fe:43:c5:11:14:
28:0c:0f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 01:45:55 2025 by rpki-client