Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: yq7r/k3fO+ci0s9Y1mJNxsUQtzQx1ItkZn6saCck3Yk=
Subject key identifier: 8D:2D:0A:7A:0F:56:E5:98:2D:E5:CE:36:ED:B0:64:66:6F:44:81:AE
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 01976AAA41FF0038C3C89F183CEC3535EB20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 100F
Signing time: Fri 13 Jun 2025 19:00:32 +0000
Manifest this update: Fri 13 Jun 2025 19:00:32 +0000
Manifest next update: Sat 14 Jun 2025 19:00:32 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: NtjFTcvQGgG/JHFLdDFn7jCN1OY8O3udDCncBtp0fj4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:aa:41:ff:00:38:c3:c8:9f:18:3c:ec:35:35:eb:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Jun 13 19:00:32 2025 GMT
Not After : Jun 14 19:00:32 2025 GMT
Subject: CN=8d2d0a7a0f56e5982de5ce36edb064666f4481ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:24:e3:2d:b5:20:d3:f8:32:50:6d:73:14:
13:35:ad:19:1a:79:13:a0:67:69:94:80:40:43:04:
24:91:b5:81:b6:47:bb:49:1d:ad:3f:a8:9d:07:c5:
8a:a9:bb:80:e9:10:0c:ab:df:7a:ec:43:00:81:6c:
51:07:79:42:b7:bf:20:56:89:f1:5c:12:3b:a5:48:
05:99:cb:d2:5f:2f:c1:5a:1c:45:45:5a:21:1b:7f:
4c:81:42:c5:b9:e7:9c:ff:4f:63:4c:d5:47:bd:f9:
9a:4d:c0:a4:ae:07:53:cf:bd:70:5f:85:ae:00:61:
0f:f2:03:9c:25:34:cb:da:24:ae:ec:40:e4:33:c5:
09:d8:02:e1:18:6d:4d:7a:40:61:ca:c0:50:ed:02:
80:1d:10:97:f0:7e:61:0d:4a:fb:a2:d2:73:df:f3:
4d:e3:db:51:5a:39:e8:c0:2c:b6:13:26:f7:99:99:
95:e3:42:e0:58:54:86:50:89:f9:ec:1e:86:df:c4:
ea:f6:35:75:e6:13:47:ad:de:3a:af:b0:a8:79:69:
d6:19:c1:c9:96:4c:58:0d:2b:5a:e4:41:41:6d:67:
4a:c5:33:26:6a:a0:b3:e9:6a:a5:d0:d1:5b:e9:3e:
0b:f3:a8:55:a1:91:cc:d5:5d:ad:af:4e:2e:c9:8d:
8f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2D:0A:7A:0F:56:E5:98:2D:E5:CE:36:ED:B0:64:66:6F:44:81:AE
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:70:40:3c:7d:eb:dc:a3:46:25:30:87:23:4c:c2:d2:f0:ca:
0c:c3:63:af:3b:57:14:27:b0:c0:42:62:4b:47:05:91:c1:1a:
6b:95:bb:5e:47:eb:0a:bf:24:f2:4f:e4:2c:e5:3c:1e:e4:e9:
eb:76:b7:c0:69:49:de:70:92:6f:f3:47:51:dd:42:37:2b:f3:
59:b4:55:6d:f9:b4:e7:42:e9:9f:f9:99:57:14:c2:c3:9b:33:
ff:90:5f:81:62:26:fe:45:28:93:83:95:4f:fb:2b:b0:20:b3:
3d:e2:ce:23:b4:4b:36:40:a4:4e:49:bd:de:31:7e:6d:b8:d0:
bc:e1:43:6c:9b:b4:0c:b0:c9:cb:83:66:50:a9:83:a9:09:1c:
03:ab:ef:83:4a:b0:95:fc:81:40:f4:03:26:1d:fb:51:fc:d5:
89:7b:54:26:89:1f:13:9d:8c:11:1a:95:a3:8c:5a:1b:f3:0f:
94:86:61:08:38:dc:01:f5:1f:f2:36:b7:fd:98:f0:3d:d6:b5:
d8:f9:04:58:39:69:75:3a:24:7e:7e:86:9f:b0:b1:c4:7b:a8:
e9:5a:7a:6b:4b:d6:0b:be:69:27:c7:73:3e:f6:a0:21:c0:34:
7b:09:91:52:db:f9:af:28:0d:d0:a1:c9:70:fb:5a:49:a5:7b:
74:03:0f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 23:31:49 2025 by rpki-client