Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: rN9FNQxMjyaHDZzfHY8ulERAZn471LQ5K6pasuAXMAI=
Subject key identifier: 28:34:9B:1A:D4:41:83:98:0D:F2:41:E8:A3:18:59:F8:4C:8F:B5:A4
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 01976E8708401A652CEDCAFC2594D4D3334D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 1011
Signing time: Sat 14 Jun 2025 13:00:32 +0000
Manifest this update: Sat 14 Jun 2025 13:00:32 +0000
Manifest next update: Sun 15 Jun 2025 13:00:32 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: UsjIOtZoaKNLmibxkZAYZBcPgIdBMxX0qRdsNqJeUSo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:08:40:1a:65:2c:ed:ca:fc:25:94:d4:d3:33:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Jun 14 13:00:32 2025 GMT
Not After : Jun 15 13:00:32 2025 GMT
Subject: CN=28349b1ad44183980df241e8a31859f84c8fb5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0e:ff:74:01:14:50:57:54:d1:c1:4a:81:e5:
d5:3b:b7:40:78:49:81:c8:e9:a9:d9:b9:1c:cf:64:
77:70:2a:bc:d7:57:b1:cc:f3:77:9a:d9:4e:3f:c6:
2f:6c:6b:d8:71:61:37:03:89:be:9a:f7:5b:30:23:
88:6f:dc:49:3a:70:0b:64:c9:19:c9:4a:51:cc:bc:
03:7a:74:5e:a4:ac:88:fc:20:24:5c:6b:4c:65:75:
9a:c5:3f:a9:74:b0:e7:c8:98:03:ca:d9:e6:0b:4d:
15:d6:e4:e3:69:c1:94:9e:08:03:d6:f6:a2:bb:56:
28:fe:b9:74:39:fe:91:b2:50:f5:80:73:78:99:05:
80:80:c1:b8:21:b9:18:f1:2d:f7:35:30:c0:89:a3:
34:54:78:22:ad:21:87:51:97:0f:85:63:eb:0d:50:
e2:99:ac:56:dd:47:4c:e4:58:be:eb:54:28:78:02:
55:6a:26:00:31:5a:84:49:03:2f:bb:e9:6c:22:fd:
54:26:5a:bb:2a:da:ea:c1:7c:7c:19:33:e2:ef:8e:
dc:6b:8b:85:6d:3d:f8:85:98:4b:15:87:db:40:ca:
fe:eb:fc:e2:f4:73:fd:7f:7d:98:9a:62:e8:08:ed:
09:c2:89:33:a0:ec:f9:22:08:c4:d9:05:38:2b:2f:
40:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:34:9B:1A:D4:41:83:98:0D:F2:41:E8:A3:18:59:F8:4C:8F:B5:A4
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:55:68:73:f7:2e:8d:a9:4b:35:fc:ef:de:63:0e:d6:97:2a:
93:05:25:53:6b:d3:3b:0a:ea:d4:94:ee:cf:8f:82:e8:98:0f:
23:3b:00:d7:b4:9d:92:ae:1e:27:15:7d:89:75:7d:3d:4a:0f:
6b:7e:cc:b6:b0:52:3d:cb:4a:74:18:4c:7c:ee:27:a9:20:de:
24:fa:24:51:b9:84:12:1a:d4:74:b8:57:c8:3b:ab:c7:94:7b:
fe:df:ab:aa:03:3f:a4:3a:86:11:b5:2b:eb:4b:37:8e:de:46:
fc:d7:aa:5e:ec:45:49:e1:64:ad:5b:7e:a4:f1:89:88:97:62:
4d:40:e5:9e:d3:16:ca:a9:67:b0:9c:ed:bd:b9:96:a2:7c:04:
e6:b9:ae:6c:41:ec:45:2c:4b:b4:34:e2:bd:40:35:4e:59:3a:
aa:7d:97:5d:a9:e7:34:0a:0e:18:5a:fb:3a:ce:44:4b:71:11:
4c:9e:05:cf:b5:f1:5d:a1:1b:b6:af:dc:09:81:c2:2a:ff:1b:
d9:44:4e:7b:3c:13:ca:64:f4:5f:d3:0b:41:d9:76:3b:f9:a8:
10:f8:d2:bc:81:6f:d2:b2:b1:da:26:10:e9:49:65:ac:76:61:
f5:bf:33:a7:c2:be:bb:8e:b6:3f:66:4d:17:25:09:8f:f8:13:
a3:f7:36:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:23:54 2025 by rpki-client