Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
File: 8A5uimGIP2gBZbX0FUhfjw1PWo0.mft (raw, json)
Hash identifier: B89O4LjSKNV5EeJ0CiQonoiAqSPeLJy9pRTrfibzpd0=
Subject key identifier: 9A:8B:74:17:69:A0:8B:F0:D4:42:DA:3B:1D:DB:6A:2E:89:F9:7A:13
Authority key identifier: F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
Certificate issuer: /CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Certificate serial: 0197470C84F4C60ADE3D0DE7F7698BB55A53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
Manifest number: 1274
Signing time: Fri 06 Jun 2025 21:01:32 +0000
Manifest this update: Fri 06 Jun 2025 21:01:32 +0000
Manifest next update: Sat 07 Jun 2025 21:01:32 +0000
Files and hashes: 1: 8A5uimGIP2gBZbX0FUhfjw1PWo0.crl (hash: /us4+ZP+vsYjbTQ9ooMkDJqH9jel1UdXuWSBwXbbZus=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:84:f4:c6:0a:de:3d:0d:e7:f7:69:8b:b5:5a:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00e6e8a61883f680165b5f415485f8f0d4f5a8d
Validity
Not Before: Jun 6 21:01:32 2025 GMT
Not After : Jun 7 21:01:32 2025 GMT
Subject: CN=9a8b741769a08bf0d442da3b1ddb6a2e89f97a13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:1b:b6:f0:73:7a:bc:36:b8:4b:65:0f:29:
76:db:99:d6:ba:d5:be:24:8c:62:b5:cb:53:50:a2:
bb:13:8b:35:d5:23:84:ef:70:f6:25:66:84:f5:56:
a5:5f:55:19:20:b7:76:3c:9e:04:0a:f2:15:d5:58:
cf:15:c6:0c:e7:f5:17:ed:e2:b9:a2:e1:05:39:ca:
19:18:25:df:38:41:bb:a7:e3:ba:79:3a:a6:7b:a4:
8d:9f:86:08:ae:0b:82:c4:6c:03:f9:0b:a4:58:01:
d9:c0:a4:f7:95:b1:87:04:0c:08:9e:35:36:64:1f:
2e:c6:bd:b3:eb:0a:88:af:b3:a5:ca:55:09:ff:28:
86:4a:29:ce:1f:cc:67:8d:c9:e2:2d:3e:1e:9d:88:
50:0a:79:54:00:ec:af:b1:b4:e7:07:b6:fb:49:9a:
65:cd:54:93:2f:b8:95:d8:40:b9:b8:04:24:ce:3d:
29:46:d3:5f:53:60:14:37:3f:d1:00:a6:fb:56:e1:
04:2e:49:d7:b5:38:de:51:50:32:22:ca:d0:24:7b:
1e:98:87:27:df:72:06:bb:d5:79:fa:ad:ea:01:00:
5d:73:27:8f:96:f4:2c:87:4b:1f:45:0c:3f:a1:69:
b5:05:05:08:0d:7b:12:de:65:9a:34:a7:67:82:87:
8f:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:8B:74:17:69:A0:8B:F0:D4:42:DA:3B:1D:DB:6A:2E:89:F9:7A:13
X509v3 Authority Key Identifier:
keyid:F0:0E:6E:8A:61:88:3F:68:01:65:B5:F4:15:48:5F:8F:0D:4F:5A:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8A5uimGIP2gBZbX0FUhfjw1PWo0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/842815-138a-43da-872c-3cff14828dfd/1/8A5uimGIP2gBZbX0FUhfjw1PWo0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:a1:d0:25:0e:cf:58:34:a7:11:f7:d2:35:8a:74:f5:54:32:
8f:c9:ef:bd:7f:0b:30:84:2e:e7:1b:d6:08:d7:51:79:57:f8:
37:8e:cc:e1:f9:22:2c:74:21:5d:6b:82:1d:d4:3f:b5:0f:38:
99:25:e1:6b:ee:06:79:8b:3b:9a:c8:be:64:6b:da:dd:51:fd:
7a:0c:f9:75:4c:5d:e2:c7:f4:f2:9f:6c:f7:62:f2:f1:47:f2:
da:6e:d2:d2:bc:fd:2c:09:c1:59:13:25:fd:72:98:9a:5a:3e:
e8:e5:d5:28:49:50:32:53:8f:cb:d5:8d:e6:f2:e8:20:17:4a:
a2:1b:d4:00:3b:0a:50:eb:e5:b2:a4:b0:ac:43:7c:c9:5d:d9:
a8:43:10:b6:33:f5:89:42:29:6f:31:76:6b:b4:ff:60:8a:2d:
58:d5:fa:08:9d:93:a3:30:ba:18:0d:5e:74:19:dd:e6:05:e9:
a1:b3:0d:cb:6e:52:de:a7:23:69:3b:eb:ea:c4:6e:e7:42:34:
5f:c6:9b:26:cf:c0:31:94:d1:cc:eb:02:fe:98:4d:67:d0:b4:
9e:4b:d2:82:c8:36:93:07:00:35:38:7e:3c:f3:08:24:53:bb:
c7:81:1e:a0:68:43:00:77:42:2a:6e:0d:a4:e5:87:b9:d6:ce:
9c:7d:42:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:44:28 2025 by rpki-client