Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: LW7B2xtrrSr0/w8rZsWoExuEk5bHyrYoqIUSxLMNnZ0=
Subject key identifier: 5E:E7:B2:0F:3F:49:FE:F3:49:83:DE:6B:0F:CA:E6:08:CF:C4:74:A7
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 0197639676CA52E15EFA818051216EDA7BE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 1589
Signing time: Thu 12 Jun 2025 10:01:34 +0000
Manifest this update: Thu 12 Jun 2025 10:01:34 +0000
Manifest next update: Fri 13 Jun 2025 10:01:34 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: L7sR2GWU5lsGY2zmjCsyKSM61PSDvXvyUhuiNlNpcc0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:96:76:ca:52:e1:5e:fa:81:80:51:21:6e:da:7b:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Jun 12 10:01:34 2025 GMT
Not After : Jun 13 10:01:34 2025 GMT
Subject: CN=5ee7b20f3f49fef34983de6b0fcae608cfc474a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4e:ab:d9:b2:4d:96:9a:c6:59:9b:fb:f8:1a:
7c:e7:1d:cc:66:f2:36:0d:c4:63:f8:64:69:ef:5c:
30:7e:ea:a5:75:77:c8:b1:2a:14:37:dc:47:12:67:
ec:af:fa:a8:df:34:e6:a8:e6:55:e6:67:a8:30:92:
5e:73:2c:c8:9f:ef:99:e2:39:8b:27:b4:1b:ea:0e:
b8:56:ed:3f:7d:07:a3:4b:28:d5:01:ae:77:96:f6:
02:c5:38:24:41:9c:b4:11:08:e8:cb:40:94:35:af:
37:e3:1c:bd:ae:c6:6c:52:da:ca:d2:80:b6:5a:30:
9e:b7:c0:cc:d7:68:52:c7:d5:f9:4a:33:b8:e5:c8:
c4:5e:e7:d0:2a:13:df:55:fd:80:10:b9:60:01:de:
94:b4:4d:74:ac:35:26:e1:69:5f:e6:b7:56:11:f8:
4f:c4:d6:5d:6b:4b:a9:09:22:2b:71:3a:c2:cc:0e:
33:21:3f:a8:ad:ac:e0:ec:4a:07:42:5e:3f:3a:17:
13:62:bb:01:02:b8:2c:31:09:29:9c:eb:55:80:a2:
61:dc:82:d0:3c:9e:7c:a4:c2:55:b1:ae:da:9b:38:
1d:89:2a:53:85:b2:62:23:58:9c:8d:be:2b:33:1b:
fe:c8:5c:19:b8:41:a7:02:ef:f8:fa:36:bf:a9:91:
7e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:E7:B2:0F:3F:49:FE:F3:49:83:DE:6B:0F:CA:E6:08:CF:C4:74:A7
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e3:71:66:b6:79:c0:d0:19:de:7e:b3:f1:4a:7d:a0:aa:1f:6c:
4b:74:78:4d:e3:24:68:ce:13:66:dc:bd:54:98:13:28:e0:08:
d2:33:d3:84:06:63:95:96:66:67:c1:23:e5:44:ab:2f:c0:dd:
73:d7:82:80:48:dd:9b:46:7b:a4:66:68:45:2c:68:c1:2e:2d:
94:9d:48:25:04:f1:1e:fa:a5:a5:34:2e:ad:58:7c:52:db:6d:
a8:7c:3f:e1:e4:d5:96:7e:81:ac:8f:2f:e8:07:97:2f:12:61:
e5:08:99:bb:28:e4:0f:88:5c:49:2c:94:88:de:4e:58:05:02:
42:a2:58:b6:50:d4:c9:8e:3d:b0:53:ac:bc:85:11:65:ec:98:
9e:30:f6:3d:98:1f:5d:9e:74:5a:d5:ea:db:87:77:19:67:bf:
b8:fb:7b:22:54:4b:5b:68:3a:ef:83:56:b5:f9:cb:97:1c:56:
83:f7:38:fd:5e:86:0d:07:47:bf:b3:aa:b4:6e:46:e9:54:95:
a9:ae:a0:89:84:d6:3c:bc:26:c8:35:5f:92:0b:7f:07:02:97:
fe:19:72:83:84:90:a0:7b:50:62:de:57:b9:ba:0e:a8:f3:c3:
79:bf:f8:ee:7c:c1:46:48:c1:25:47:3c:0b:4e:42:b6:f0:67:
f0:91:5d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 14:03:24 2025 by rpki-client