Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: U904K6blUAolUOeQQUW92me01UbqxRLC5M2CP6nYtt4=
Subject key identifier: C4:46:D5:B1:08:68:3F:77:C9:05:77:B6:0C:BD:5C:E8:BD:0B:43:29
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 01975B370DB71935EE7801FFFF356E883E39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 1007
Signing time: Tue 10 Jun 2025 19:00:24 +0000
Manifest this update: Tue 10 Jun 2025 19:00:24 +0000
Manifest next update: Wed 11 Jun 2025 19:00:24 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: u0BMeYkDAOZ2XU20CBOj0nDYN0dTAkumGEWu6dvWQcQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 19:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:37:0d:b7:19:35:ee:78:01:ff:ff:35:6e:88:3e:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Jun 10 19:00:24 2025 GMT
Not After : Jun 11 19:00:24 2025 GMT
Subject: CN=c446d5b108683f77c90577b60cbd5ce8bd0b4329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b8:58:ee:09:9c:4d:3d:3f:6c:8e:16:75:16:
f9:8b:34:57:ef:cc:37:b8:cf:87:08:38:36:50:fd:
ee:ab:8c:e8:fd:53:94:7d:f4:92:5e:40:35:e9:8a:
ed:10:12:9e:09:a8:1e:9c:c3:aa:88:bc:72:ac:14:
3f:83:92:60:07:85:a7:e6:ab:e5:05:00:31:d2:9e:
bf:db:ae:5d:a6:50:8a:e5:f3:61:da:55:d5:32:77:
06:20:30:96:2b:e7:85:2a:a0:54:86:e1:b6:22:c0:
60:77:44:a6:01:35:75:c2:be:2f:ce:e9:87:ae:73:
fd:5c:60:fc:d6:12:2c:7d:e9:b9:ff:08:73:fb:34:
19:8d:a8:dd:6a:fe:97:a0:e7:76:63:1b:b1:e2:44:
89:e8:c0:f1:6e:4c:68:c6:33:17:d7:92:59:e5:33:
21:80:57:91:65:72:23:7d:51:b3:46:2f:0f:01:50:
03:d4:cd:b5:f6:e4:27:34:6e:f3:a6:0e:6a:60:64:
08:ce:34:46:c6:04:25:0b:5d:1e:38:c3:7e:f7:a9:
ef:97:5f:ff:58:01:2b:05:ca:99:30:c9:1c:33:ef:
53:4f:da:c5:98:7e:63:b3:82:6c:61:4a:e8:9c:8e:
15:28:3e:9b:33:ff:8d:df:5e:f8:7e:e1:84:86:5a:
ec:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:46:D5:B1:08:68:3F:77:C9:05:77:B6:0C:BD:5C:E8:BD:0B:43:29
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:8f:f8:bd:68:c2:93:b5:47:7c:c7:b2:10:63:8d:5b:89:3a:
12:c3:ae:df:69:79:28:10:75:5a:63:cb:c7:8d:4d:3d:1b:fa:
a5:f0:17:cc:99:ff:f7:90:8e:b2:66:34:19:91:79:25:c1:41:
82:7d:e2:f9:30:13:67:ba:30:81:19:7d:95:96:7a:77:7b:34:
f4:4d:26:c2:09:d3:8b:51:5c:3a:46:b4:7a:10:58:dd:85:95:
91:d5:1d:8f:85:7d:00:45:31:57:d1:2b:20:1a:42:c5:1d:9a:
fb:4e:7f:af:b1:97:99:4d:2d:6c:56:ca:d3:b0:dc:d1:0d:2d:
7a:7a:16:ec:50:ba:2a:b5:32:dd:fa:d2:75:a3:ea:fa:fc:12:
17:06:7d:0f:c7:f8:b3:23:23:c0:11:5f:a4:47:3d:81:de:0d:
d6:68:09:72:3f:2c:df:8b:c4:89:47:3f:65:b2:d0:64:7f:ab:
44:9c:68:e4:2e:67:44:6d:62:8e:09:dc:74:fa:78:5d:d4:8d:
16:15:03:5d:30:83:0b:60:92:d4:f8:21:98:2c:be:55:4e:62:
f9:36:c9:03:92:f6:81:3e:2c:46:b3:d9:00:01:3d:82:a7:28:
20:84:78:13:f3:2c:21:24:85:5a:01:3c:bd:2f:d8:b6:69:28:
3f:bc:67:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 03:32:09 2025 by rpki-client