Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
File: 8E3LHKHUaLwERw8dtKRuz1uCeEg.mft (raw, json)
Hash identifier: h8Ha60VctzCLFgBIlQ66zAiORBojWqKb2eu6j0LcCOI=
Subject key identifier: AA:E9:D6:34:2E:B5:1F:DD:3F:61:6F:6E:9B:74:C8:52:12:2C:0F:33
Authority key identifier: F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
Certificate issuer: /CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Certificate serial: 01974EFC7F8438120C6C459C463D618CCD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
Manifest number: 01FE
Signing time: Sun 08 Jun 2025 10:00:59 +0000
Manifest this update: Sun 08 Jun 2025 10:00:59 +0000
Manifest next update: Mon 09 Jun 2025 10:00:59 +0000
Files and hashes: 1: 8E3LHKHUaLwERw8dtKRuz1uCeEg.crl (hash: e2m8JsF5gav771A5hZC5llt7BDlI5sGeWyfl/Ha6+g0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:7f:84:38:12:0c:6c:45:9c:46:3d:61:8c:cd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04dcb1ca1d468bc04470f1db4a46ecf5b827848
Validity
Not Before: Jun 8 10:00:59 2025 GMT
Not After : Jun 9 10:00:59 2025 GMT
Subject: CN=aae9d6342eb51fdd3f616f6e9b74c852122c0f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:5f:20:26:fe:a3:37:62:f3:25:99:3f:b6:
a6:3f:74:d4:67:ec:cd:34:34:1d:2b:8f:66:8d:eb:
15:30:fc:3e:46:61:d0:e0:2d:f7:a9:b6:ac:61:84:
12:16:50:43:50:a4:5b:c3:2e:96:ac:60:40:e5:08:
a0:c0:67:34:91:c0:77:82:25:64:f3:9f:9b:ca:a8:
4d:b6:b6:f5:10:d3:ea:73:65:75:4c:3d:93:a8:95:
54:5b:e6:ce:0b:32:6a:b5:cd:71:07:f6:80:c5:8d:
29:4c:cd:d4:f4:c4:bf:9f:60:89:34:6f:46:2f:d0:
3f:c8:13:9a:5a:84:1b:4a:b8:67:30:ac:15:7f:1f:
0d:7a:48:51:c2:15:f4:d3:38:47:29:86:77:28:18:
09:4b:b6:d2:59:a9:d7:2e:d0:a7:31:30:4e:f5:64:
7a:32:23:e6:84:8b:5c:87:e5:5c:fe:ff:55:2b:70:
1b:8a:45:73:e9:51:1c:81:86:93:72:2c:cb:15:20:
ee:3a:27:aa:89:33:02:93:56:f0:ac:7c:a1:10:c8:
00:58:eb:e5:fe:f9:1f:b7:58:22:53:ed:76:ef:2f:
b8:b1:fd:42:85:07:02:3b:e0:73:32:52:af:1f:99:
53:b8:31:cc:7c:ec:17:83:b4:ee:fe:30:c1:1c:48:
2f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E9:D6:34:2E:B5:1F:DD:3F:61:6F:6E:9B:74:C8:52:12:2C:0F:33
X509v3 Authority Key Identifier:
keyid:F0:4D:CB:1C:A1:D4:68:BC:04:47:0F:1D:B4:A4:6E:CF:5B:82:78:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E3LHKHUaLwERw8dtKRuz1uCeEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/c56b1b-4b10-41dc-9ffa-db5160ee74e7/1/8E3LHKHUaLwERw8dtKRuz1uCeEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:04:a5:c6:21:f1:5a:4b:f8:72:22:17:0a:56:e4:16:27:f1:
3a:03:f0:27:8a:39:97:3f:ec:81:92:44:53:49:57:97:11:c7:
74:a8:16:c3:18:f3:8c:a3:a9:82:e1:53:1a:49:d8:4e:8a:ec:
67:4f:c5:d2:9b:74:e1:e7:17:5a:26:d5:8c:27:91:b1:77:74:
5b:af:ba:b3:46:db:35:7e:15:9b:a7:6e:55:16:8f:fc:33:84:
ef:e3:eb:6a:e2:94:c0:d1:09:55:f4:0b:6b:a6:16:a0:5c:04:
d9:8e:64:0a:f8:3f:f1:77:ec:0d:db:9f:12:be:e2:19:7b:f7:
46:b2:7c:e8:33:4e:6f:6f:2b:69:12:98:48:3a:2b:7c:89:d6:
1b:b3:04:93:23:46:5f:a5:f7:80:ba:4a:95:1e:bf:bd:a5:74:
14:41:c0:56:6f:c2:08:05:7c:a2:1d:34:3d:8b:70:47:ef:e7:
13:2c:bd:34:bc:6f:c1:26:a6:36:5f:26:9a:6a:3f:22:cf:0f:
d2:33:db:2d:7b:c0:ea:37:2f:4c:d9:11:84:38:45:38:dc:7a:
51:a9:16:b9:4f:a1:7a:ed:7f:1f:29:6c:bb:92:5b:92:79:c0:
63:bc:d1:aa:ef:b5:af:3a:f9:d4:8b:77:05:78:6e:32:0c:e1:
0a:77:b7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:53:09 2025 by rpki-client