Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
File: mD8bE53ySgXC5SVgUrAhJRfkc1E.mft (raw, json)
Hash identifier: ijfCVKQyadY0chkfptmgrzWrDSToEePU40/o2o3sDcQ=
Subject key identifier: ED:E3:85:14:C2:4D:8C:14:6A:2B:2F:8D:7B:7C:E9:6D:0F:CD:B9:FB
Authority key identifier: 98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
Certificate issuer: /CN=983f1b139df24a05c2e5256052b0212517e47351
Certificate serial: 019762F0F5D8D634E23A6D1DAA2386F1C8D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
Manifest number: 018B
Signing time: Thu 12 Jun 2025 07:00:48 +0000
Manifest this update: Thu 12 Jun 2025 07:00:48 +0000
Manifest next update: Fri 13 Jun 2025 07:00:48 +0000
Files and hashes: 1: mD8bE53ySgXC5SVgUrAhJRfkc1E.crl (hash: enUuRdjUiLX74vayeVslZNpKX1Tjn0V2ojknLXHvVOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 07:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:f0:f5:d8:d6:34:e2:3a:6d:1d:aa:23:86:f1:c8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=983f1b139df24a05c2e5256052b0212517e47351
Validity
Not Before: Jun 12 07:00:48 2025 GMT
Not After : Jun 13 07:00:48 2025 GMT
Subject: CN=ede38514c24d8c146a2b2f8d7b7ce96d0fcdb9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c2:77:ba:0e:50:1e:83:b4:7c:9a:e4:f6:87:
32:41:29:1d:53:48:bb:18:cc:06:41:5f:79:cb:51:
16:8b:fa:ed:f0:84:eb:9b:d1:f3:0f:7c:40:b8:fc:
11:d7:b4:c9:7b:e3:e0:db:1f:8a:8a:ac:79:ee:a9:
2b:36:98:a4:ac:12:18:41:dd:55:d9:29:9b:d9:cf:
a9:ae:86:cf:99:dd:91:17:2c:34:93:5b:6b:38:f9:
23:fb:c7:96:6b:7e:a8:5f:84:9b:ea:40:6a:3e:13:
77:2c:c1:92:60:f9:5f:96:66:0c:33:26:31:65:8d:
60:0a:da:69:58:ce:15:9d:4a:6c:dc:9c:68:65:a9:
de:06:37:55:bc:ad:25:d7:cc:29:eb:07:21:58:45:
d4:10:fe:57:4d:c7:07:c7:e2:7a:b4:9a:19:21:5a:
c8:79:fd:1e:af:c2:bc:9f:9c:91:03:79:40:87:e2:
a6:79:26:6a:6b:2c:38:e4:21:92:eb:81:4d:82:8c:
57:46:98:0f:4c:20:be:8c:4b:4a:be:c8:9e:5e:2d:
21:2d:80:e6:c8:14:03:d4:89:20:70:8a:da:7c:37:
e4:92:f1:0f:ec:11:af:00:4b:df:d2:e0:f8:c0:b4:
45:28:b0:18:51:5d:7c:bd:ed:20:8d:e8:84:99:71:
ae:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:E3:85:14:C2:4D:8C:14:6A:2B:2F:8D:7B:7C:E9:6D:0F:CD:B9:FB
X509v3 Authority Key Identifier:
keyid:98:3F:1B:13:9D:F2:4A:05:C2:E5:25:60:52:B0:21:25:17:E4:73:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mD8bE53ySgXC5SVgUrAhJRfkc1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c2cc5f-25a6-42bb-a970-ef9644312ddb/1/mD8bE53ySgXC5SVgUrAhJRfkc1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c3:13:31:4c:e1:15:56:43:2d:18:bf:77:e2:b3:77:61:ad:
81:7a:7f:bb:88:2a:a8:2f:2a:2c:6d:cc:e9:a8:0b:84:6e:db:
3e:93:e4:9c:ac:d4:b2:75:57:c2:72:3a:5c:e9:b7:d8:9e:07:
bd:e5:d0:a8:e2:08:a4:56:b0:b1:32:29:74:e6:be:fd:a0:8a:
9d:57:a1:a4:68:46:83:6b:27:67:ab:33:72:11:30:e5:bf:56:
4a:4e:18:f9:47:ad:b2:ee:14:ee:4d:f9:de:26:0e:34:47:d5:
55:dd:ec:bc:fc:be:30:7c:45:cc:ab:1d:55:c7:b6:e0:ef:6c:
b9:78:60:20:80:d3:0b:b2:fb:57:63:2e:15:f7:cf:d2:56:aa:
85:0e:54:a2:ce:90:ad:c7:ab:84:df:b5:a6:99:5f:a1:f4:8f:
4f:85:77:79:8b:fb:30:e4:d4:95:16:b2:87:84:0a:8a:70:5f:
1e:69:f7:a0:6d:84:bd:4d:c6:95:46:cf:41:72:8c:e8:3b:d0:
7b:84:90:1a:4e:81:65:0d:6f:51:92:fd:a9:c3:69:b7:60:89:
bd:62:0b:8d:9b:18:e7:f8:3b:e5:f7:91:1c:b8:c5:bb:e1:c6:
a9:36:37:54:34:b3:39:a7:5a:14:a4:50:4e:4d:ca:f3:e4:74:
79:d1:4b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:51:01 2025 by rpki-client