Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: qjlACIh+YhvQUtZsCKqe3JsEJycHe6JdC1G030jydU4=
Subject key identifier: 48:EA:BA:FF:32:AD:37:CF:CA:F6:76:0D:BA:F8:4C:30:8F:59:21:35
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 01974E5829EE49F7BFDE4F15155B0350AE0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 12B5
Signing time: Sun 08 Jun 2025 07:01:29 +0000
Manifest this update: Sun 08 Jun 2025 07:01:29 +0000
Manifest next update: Mon 09 Jun 2025 07:01:29 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: 1QZTelt0foPE0iaYp66+ltoUJOxElzzPInIpie3/QXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:29:ee:49:f7:bf:de:4f:15:15:5b:03:50:ae:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Jun 8 07:01:29 2025 GMT
Not After : Jun 9 07:01:29 2025 GMT
Subject: CN=48eabaff32ad37cfcaf6760dbaf84c308f592135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:5c:2e:c9:7b:b4:f5:4a:a3:3b:87:05:8b:34:
68:7b:d1:95:9f:83:2f:6e:0d:56:4a:cc:8c:89:a8:
05:ca:53:5c:a2:54:d4:2e:06:82:39:9d:3f:85:c2:
1b:ed:30:36:1c:fa:40:87:69:3b:e8:59:0f:a8:8b:
1f:aa:eb:9c:8d:43:74:03:86:3a:bf:86:c0:0b:0f:
aa:58:0c:e7:45:27:da:ec:1a:71:a6:be:60:ea:73:
34:9d:9f:08:ab:3f:48:0c:64:63:d0:66:36:16:ce:
fa:1a:36:2d:de:cc:f3:be:90:d4:ba:1a:01:e3:e6:
9d:d1:2d:71:f6:c1:e1:fe:a6:10:72:51:82:d2:38:
bd:bd:61:6b:2d:be:2e:7f:3f:43:57:70:87:f1:fa:
e4:af:43:a7:29:85:98:dd:e4:48:02:8a:c4:f6:60:
b8:84:d8:ec:01:8c:9d:97:5f:cd:de:0f:90:a7:69:
24:1f:91:36:47:27:54:99:c6:73:28:44:95:43:22:
df:71:d8:e8:81:8f:24:6e:40:c1:f9:a5:64:0c:f2:
cd:06:04:ec:e5:f4:66:aa:0b:d2:ed:06:67:a7:cd:
45:13:98:60:bb:f4:02:ef:7d:66:18:55:ed:c0:74:
20:ef:8d:4d:db:be:c9:ac:9b:5f:12:76:8b:7d:f5:
65:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EA:BA:FF:32:AD:37:CF:CA:F6:76:0D:BA:F8:4C:30:8F:59:21:35
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:17:c3:d3:08:38:a4:66:f3:1a:78:83:e0:8a:13:8b:61:40:
87:ad:6f:2e:eb:8f:c1:12:1c:ab:79:f6:fc:2e:d9:47:bf:10:
db:db:bb:12:8a:ee:9a:c8:48:50:b3:66:7f:ea:ba:79:af:82:
a1:50:2e:79:34:62:ba:f3:e5:38:b6:f2:aa:3e:a0:68:ec:b6:
ed:63:62:bb:9f:9e:95:2c:df:bd:1f:42:b6:4b:f0:49:30:7b:
ee:4b:e3:66:cd:58:c5:c9:60:84:89:3c:94:b0:25:3c:cb:5f:
92:24:ae:99:61:35:a9:2d:30:67:9b:c2:02:89:d5:43:3a:93:
56:3e:37:98:cb:0c:68:3e:34:c6:45:c8:21:8e:90:93:55:a7:
e3:33:d7:3f:a6:aa:e4:30:06:5b:f1:7b:d9:cd:56:c1:e9:2b:
5c:13:08:c8:14:2d:39:14:25:8d:60:63:5a:24:6c:dd:21:60:
74:e9:1a:c5:6f:7c:b3:df:46:e4:ba:a9:80:ab:e4:46:68:37:
86:c7:8b:95:67:16:2d:bb:7d:67:12:45:a1:8d:bd:73:a2:bf:
14:5c:89:fa:79:6c:10:11:91:ef:ca:92:61:b3:1c:55:3b:e8:
63:04:95:7b:27:c7:3b:af:a7:73:12:fd:9b:e6:44:cd:74:41:
fd:4f:2f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:50:11 2025 by rpki-client