Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: BNGlOFGkRztXkhM4DZCyB0lqL8DF0Ti2XwAbD+YA02Y=
Subject key identifier: 62:44:9C:4A:6D:A2:9B:6F:1E:89:5A:CD:38:B4:6B:00:57:7A:DC:87
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 019759494A6F141138D690FE12599B8FA337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 1006
Signing time: Tue 10 Jun 2025 10:01:04 +0000
Manifest this update: Tue 10 Jun 2025 10:01:04 +0000
Manifest next update: Wed 11 Jun 2025 10:01:04 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: nssOAzEakVxBvtc6SgZrGRv0ryZzq5qwNVliCLzDKnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:49:4a:6f:14:11:38:d6:90:fe:12:59:9b:8f:a3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Jun 10 10:01:04 2025 GMT
Not After : Jun 11 10:01:04 2025 GMT
Subject: CN=62449c4a6da29b6f1e895acd38b46b00577adc87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:0d:4b:6a:00:a0:66:17:be:e4:99:9f:a9:
2f:9b:f3:bf:c5:9a:ac:93:fc:5e:c1:55:1d:4a:0c:
8e:f1:f1:07:2d:4a:9a:ea:0a:c9:db:60:e0:04:e0:
a2:38:ba:a6:5e:07:56:46:d1:22:56:01:79:ad:6c:
b2:c8:77:71:1a:2f:90:0c:65:c6:78:74:d9:1e:98:
2e:a7:5d:a6:35:79:26:d5:20:00:4e:77:1e:0e:e2:
b8:7c:cd:41:ac:da:0c:fc:f3:22:d9:55:56:6f:c4:
d8:e3:59:f1:b2:01:13:07:6f:ce:1c:07:de:d7:95:
e4:a8:b4:8b:79:32:58:85:43:1d:13:01:8a:16:ee:
bf:6e:a3:fa:f4:35:87:be:f6:ef:56:46:f8:f6:20:
8d:37:ad:31:2c:65:b2:11:ab:3e:ac:cf:3b:3c:dd:
9c:66:91:de:62:0f:33:bf:57:e8:0b:cb:ca:9d:ee:
f1:4f:b6:0c:d9:87:38:a3:56:77:a3:18:f9:d3:4a:
ec:c3:e4:32:0a:62:84:a9:26:76:43:e8:8b:e6:0c:
44:9f:82:45:84:2c:b5:ab:9d:97:06:ff:1f:d4:cd:
77:b3:d8:c0:ef:6d:e1:6a:ba:4a:77:c2:f2:02:69:
c6:71:aa:66:76:93:34:55:73:71:92:5b:16:57:a5:
84:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:44:9C:4A:6D:A2:9B:6F:1E:89:5A:CD:38:B4:6B:00:57:7A:DC:87
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:a7:f8:b6:c5:44:8e:45:3e:0a:2c:b6:60:ed:10:d4:6d:1b:
99:50:4e:e6:dd:6f:bf:88:0e:64:b0:8c:e6:0c:a5:dd:f6:a0:
8c:3a:6b:ae:56:66:4e:51:f2:c0:27:22:89:95:8e:3a:9d:3a:
27:32:10:9c:28:b2:f3:a9:2c:41:a0:33:1b:1a:c7:ab:b2:6e:
57:e9:f1:50:73:06:83:7e:2e:80:fb:8b:32:e3:f0:98:2f:e6:
69:6e:59:48:a0:6d:c3:42:39:c3:2d:d8:f1:e3:52:35:18:d1:
a7:d3:de:18:1f:a4:2d:00:0b:dc:75:f7:06:6d:57:c1:02:21:
ea:07:8c:ab:5d:2d:6c:78:4c:31:be:5d:ca:75:e5:74:d2:be:
69:12:c3:3f:05:fc:11:f9:98:76:4d:29:eb:d9:28:b0:cf:bb:
5a:b6:c2:3a:13:4a:6c:9e:95:1e:37:ae:1d:4c:3f:af:72:bf:
ed:75:b7:8b:1e:35:d9:50:dc:fe:01:42:70:a0:85:8b:52:14:
0d:0a:d7:7c:cd:09:6c:45:bf:1f:ed:66:1c:21:bf:da:b9:0b:
e4:c8:fe:f5:23:51:ac:1c:52:c6:c4:bd:23:6e:33:f5:97:f4:
b5:2a:d3:ba:e5:c8:56:67:39:70:c5:02:04:e1:32:8b:b5:1f:
7b:c5:c8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:38:46 2025 by rpki-client