Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: mUbAK2ligAoO0Y75iYS4BTzmiMhv9SUVi4st8h5yr+k=
Subject key identifier: 5E:11:C9:AD:DA:33:1C:F5:AE:83:FD:D9:A6:31:2E:1D:C2:75:E3:34
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 019768BBBAA13F6BB7FC679327868E414832
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 100E
Signing time: Fri 13 Jun 2025 10:00:22 +0000
Manifest this update: Fri 13 Jun 2025 10:00:22 +0000
Manifest next update: Sat 14 Jun 2025 10:00:22 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: rCh4syP5hJy8SrVwBBo8VZL5mEmqVbQLAWbi2CbnsKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bb:ba:a1:3f:6b:b7:fc:67:93:27:86:8e:41:48:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Jun 13 10:00:22 2025 GMT
Not After : Jun 14 10:00:22 2025 GMT
Subject: CN=5e11c9adda331cf5ae83fdd9a6312e1dc275e334
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:02:bf:fe:d7:b8:ac:3b:c5:cf:46:58:b4:f8:
ef:b7:ab:9e:72:9f:4e:77:00:c4:59:d6:a2:6f:b4:
61:91:f1:ea:8f:c3:4f:a0:bf:ff:6a:57:3f:e5:ec:
ee:05:34:d7:0d:bc:2b:68:a1:86:a2:13:6d:02:97:
ae:c9:2e:4a:0a:64:64:76:08:25:0a:73:85:45:ee:
78:ed:bc:59:b1:9a:a0:8e:69:f2:f4:94:53:79:c2:
a4:05:e5:9b:49:b5:6e:8d:19:35:83:12:b7:7f:11:
0f:66:b2:ff:a1:61:cc:ec:cf:b2:5c:ad:6e:d9:52:
c7:86:73:e9:1d:a5:a0:52:66:c0:ed:00:39:14:df:
c1:51:33:a3:aa:8a:ee:99:8e:80:83:73:3f:f5:5e:
6f:59:d5:b0:c5:dc:be:cb:ba:f5:71:73:a9:06:c9:
dc:2a:18:4f:bf:49:aa:6f:66:2c:74:33:e2:81:71:
18:e6:22:20:b2:eb:78:f7:69:0b:97:b7:f4:df:36:
3c:27:29:31:83:d0:b0:6a:be:9a:db:3e:e8:db:df:
20:12:b2:d0:d5:b9:9f:ea:87:c3:7e:25:c4:d0:55:
43:4a:e4:47:20:fa:7c:d1:28:3c:50:ef:08:39:5d:
da:2b:0a:f5:a7:0c:b3:bb:50:6d:2a:c6:bd:43:98:
7b:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:11:C9:AD:DA:33:1C:F5:AE:83:FD:D9:A6:31:2E:1D:C2:75:E3:34
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:7b:e5:73:8e:1c:ac:e4:bc:fb:2b:5c:a8:6d:3d:99:56:c9:
88:30:69:e7:58:47:8c:df:bf:c6:31:d0:83:45:7f:40:67:3a:
0f:8b:76:e9:e8:6c:0f:0b:dc:cf:fc:25:2c:6e:ee:48:ab:d7:
dc:4c:5f:48:96:99:77:a7:04:75:c7:79:0c:64:f4:fd:e7:39:
62:50:cf:b5:76:1a:d3:6f:f8:7c:2e:01:13:a2:9c:1d:40:d1:
80:69:a4:73:e8:6d:64:eb:3e:a0:0c:b9:1f:5c:8e:73:4f:45:
e7:40:10:50:0c:98:46:eb:47:89:d9:6c:90:7c:72:78:a7:d9:
59:72:03:e8:34:e2:8b:c4:07:be:37:81:03:c1:66:93:a1:6d:
6d:e5:b7:82:1b:c5:4d:0c:66:42:4c:47:36:93:e9:81:95:d4:
8f:07:d7:20:c4:7a:84:f3:b2:de:ae:cb:d3:8b:a5:34:56:d7:
b9:7f:0f:68:95:88:9e:37:a6:c5:5d:d2:93:92:56:f4:6b:60:
81:c2:41:51:06:87:f9:0e:52:92:5f:3c:58:fc:75:c7:a0:b6:
70:9f:fb:74:03:ab:12:45:36:4e:6a:4e:33:16:3d:08:be:73:
13:48:25:f8:a8:a2:86:e6:95:ce:20:9e:ac:4b:d4:f2:66:9e:
e4:06:8f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 13:12:10 2025 by rpki-client