Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: ybkF3nFlB19KLp/bi+YKQLWwshsxjm/wfLamVPehV68=
Subject key identifier: 0D:B6:AB:AA:8E:BF:33:18:F1:0B:04:CE:4F:0E:BD:21:7B:B1:10:83
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 0197470B9DCCA116118EF0AC2F8829ADF9B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 03D2
Signing time: Fri 06 Jun 2025 21:00:32 +0000
Manifest this update: Fri 06 Jun 2025 21:00:32 +0000
Manifest next update: Sat 07 Jun 2025 21:00:32 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: y8wJUwoD9WwZjO4+ewgKLjPpY7JmODVUE+zHJUq0L0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:9d:cc:a1:16:11:8e:f0:ac:2f:88:29:ad:f9:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Jun 6 21:00:32 2025 GMT
Not After : Jun 7 21:00:32 2025 GMT
Subject: CN=0db6abaa8ebf3318f10b04ce4f0ebd217bb11083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:3e:78:97:13:a7:ff:ec:b4:ac:01:55:10:a6:
26:6a:fd:44:12:59:9b:39:b2:f8:a1:87:06:bc:a6:
9d:2d:6c:73:c3:be:7c:6e:ec:c5:04:ef:42:77:4b:
b0:40:a2:31:83:b5:f7:ef:89:dd:0e:f0:8d:26:99:
e1:42:bc:29:43:ef:78:c6:f0:34:5d:a8:36:60:49:
21:3d:0e:1b:17:e3:a6:d6:6d:04:51:71:58:b0:f5:
e5:b2:0e:93:49:92:7f:8e:4e:ed:81:c5:6f:49:f3:
fb:49:b7:26:5b:d0:d3:1d:b5:81:cc:66:49:8a:fb:
9f:d6:3e:cc:5a:ff:67:85:01:30:5f:73:f9:91:c9:
92:a8:b6:21:94:e1:05:a1:31:da:43:e4:5d:09:b9:
62:7f:d0:72:6e:ac:03:e9:c4:49:00:c9:d4:7c:74:
0e:d2:5b:f3:70:6c:c0:ae:2b:52:61:78:bc:13:02:
69:9e:e3:88:6e:d6:7c:7d:98:f8:ec:4b:c8:73:ce:
67:3e:cc:97:6d:49:71:0f:46:33:70:46:5c:f4:93:
1f:83:b0:c1:44:c3:31:06:e7:72:83:bf:1e:6c:2e:
43:66:a6:6e:fb:55:9e:5c:85:69:3c:01:d7:26:47:
c2:c5:73:89:a5:9f:b2:94:e4:ef:4b:5c:7e:1e:64:
d4:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B6:AB:AA:8E:BF:33:18:F1:0B:04:CE:4F:0E:BD:21:7B:B1:10:83
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:7c:95:2c:7e:43:6b:3a:e8:ec:8f:3e:69:be:45:59:9a:a4:
1b:4d:59:e2:88:c9:b6:42:b1:cc:98:00:39:62:65:60:43:2a:
f3:64:eb:28:78:d1:01:4f:35:b7:34:cf:0e:d8:1b:8a:60:24:
12:09:30:2f:fa:56:e1:90:9f:ce:83:b1:5f:cd:47:d2:d7:92:
a7:88:ca:0c:bb:43:d9:47:78:41:01:c2:ff:c3:75:89:af:3d:
00:15:d0:9d:76:24:ee:a0:4f:12:97:ff:5c:b3:8c:64:f6:cd:
00:37:6f:90:7e:28:b7:77:7f:14:20:60:5d:9a:38:88:7f:c4:
50:51:61:99:bc:67:4a:3c:e0:06:7e:2a:55:f6:a0:ca:79:69:
d6:1c:0d:e5:d8:ff:df:a8:78:04:44:aa:e4:e4:66:d4:87:17:
32:12:33:36:8b:10:72:17:68:cf:9d:c3:4f:b0:53:4a:a7:5b:
f7:96:d3:37:f3:d4:8e:dc:c0:b7:2a:1a:f8:ad:dd:e3:98:ad:
97:4e:7a:3e:d8:b4:3e:83:a6:34:81:23:09:51:f4:02:8d:1f:
5e:60:e6:ce:d6:0b:0e:aa:0e:46:cd:de:cd:6c:45:e5:1b:27:
ac:21:eb:f3:f7:10:c2:68:40:2a:93:4c:c7:58:96:5c:f9:87:
e7:e6:d4:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:44 2025 by rpki-client