Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
File: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft (raw, json)
Hash identifier: 8cMe/VToht0hQTkh7hWzlflD7p8JAzfOJWZyQkpuIgE=
Subject key identifier: 8F:47:2C:0F:EA:12:14:29:F4:0C:5F:2C:0F:1B:B7:A6:54:EC:60:EB
Authority key identifier: F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
Certificate issuer: /CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Certificate serial: 01974B1F6B2FA24A1B4BB7EB79C837DC6EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
Manifest number: 0467
Signing time: Sat 07 Jun 2025 16:00:39 +0000
Manifest this update: Sat 07 Jun 2025 16:00:39 +0000
Manifest next update: Sun 08 Jun 2025 16:00:39 +0000
Files and hashes: 1: 8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl (hash: WydB3umFaJpOT4sZjP3NBOEcHn0PZFmyKF8XFMxmxY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:6b:2f:a2:4a:1b:4b:b7:eb:79:c8:37:dc:6e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03f1f335c7d04b3608fd1914a9c053b04a7fcb9
Validity
Not Before: Jun 7 16:00:39 2025 GMT
Not After : Jun 8 16:00:39 2025 GMT
Subject: CN=8f472c0fea121429f40c5f2c0f1bb7a654ec60eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:34:f1:35:f8:31:7e:d5:3d:d1:d2:79:fd:d9:
0a:a6:47:48:0b:02:dd:0e:ee:a0:42:7b:94:e9:46:
7e:6a:76:55:92:06:97:34:a9:a0:3b:bf:aa:26:fb:
5d:5e:37:7c:7b:ec:e2:d9:7c:4e:1e:a9:63:ed:bb:
34:51:3b:95:7d:1f:37:cf:89:71:29:69:38:d3:6f:
37:f5:1e:26:80:ba:4a:46:1e:96:3a:2c:4b:08:67:
5c:be:3b:9b:d7:ee:92:f6:c2:77:27:42:95:93:91:
4a:fe:3c:e8:9a:81:65:a1:02:74:0a:a1:f7:98:a5:
bb:bf:ef:6f:47:51:5c:5d:c4:51:2b:f2:25:ca:aa:
89:11:cd:6e:e9:aa:a4:85:db:b5:51:b0:ff:31:ac:
e2:68:ee:50:c2:03:c2:51:9e:0b:e6:0c:c7:72:43:
b0:04:48:91:b1:94:d9:62:9b:0f:aa:d3:9a:a4:6e:
8e:7a:80:7d:9a:07:45:55:73:cb:1e:cb:19:0e:02:
9f:67:da:15:31:7d:3a:eb:2c:15:4d:35:ea:fd:ac:
dd:7d:ae:dd:d4:c3:95:45:38:4a:fa:5b:d2:92:a0:
8d:39:7d:f6:a0:fc:57:03:27:10:a0:a4:ae:77:48:
bb:45:d3:38:62:3f:11:aa:27:c5:b6:ca:ba:cd:2b:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:47:2C:0F:EA:12:14:29:F4:0C:5F:2C:0F:1B:B7:A6:54:EC:60:EB
X509v3 Authority Key Identifier:
keyid:F0:3F:1F:33:5C:7D:04:B3:60:8F:D1:91:4A:9C:05:3B:04:A7:FC:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/897cf7-b386-4c87-841f-338a07e8ebd6/1/8D8fM1x9BLNgj9GRSpwFOwSn_Lk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:22:92:3c:c1:c6:0b:a4:04:21:20:0d:48:25:11:1f:e4:94:
15:17:0e:26:a8:8c:7e:7c:e7:19:8f:2c:eb:42:37:e7:88:ec:
3b:c7:c6:44:48:86:10:c3:c3:24:f8:9b:94:61:78:45:0a:cd:
be:8b:4b:69:7a:4a:5d:1a:d3:4d:7b:d1:89:d4:1b:30:59:53:
8e:04:67:6f:f1:71:ea:77:3d:e0:88:f2:33:e2:e6:4f:43:ac:
29:b2:ee:c9:20:63:32:e2:5f:38:f3:52:47:a0:77:38:c4:fe:
b4:12:27:d3:a7:ac:90:56:18:e2:a9:9b:36:ee:44:bc:ca:80:
f8:63:de:8b:1b:18:60:d8:60:b4:01:13:be:a1:21:22:af:f1:
d9:85:18:72:02:7a:e4:92:b6:43:c3:90:15:55:f2:85:17:73:
31:8f:56:26:06:b7:f0:ec:7a:b6:ff:a2:79:53:f2:7b:11:cd:
45:7b:79:9a:4d:c9:d3:d4:11:d7:d8:7d:85:19:c4:3f:67:fb:
5e:04:85:52:23:17:5d:fa:64:22:2d:25:ea:3f:2a:4d:48:b5:
c0:71:e1:18:c0:4a:a9:39:90:0e:63:89:30:e0:cb:69:88:d3:
33:5b:29:ee:df:20:1d:b1:89:01:ca:b8:fc:a6:7f:1b:0d:ea:
bd:ba:5d:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:57:04 2025 by rpki-client