Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
File: 8AI84rpaHU_QpeIn3nTLxB0rucg.mft (raw, json)
Hash identifier: p0OxkoMTNb6icOaGkdfQVcKvQTOgbZlE1TgnP4oNCEI=
Subject key identifier: C0:D2:EA:F4:0F:22:C2:D3:27:BF:E7:8F:3E:6F:DF:0D:A9:FF:5C:13
Authority key identifier: F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
Certificate issuer: /CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Certificate serial: 019748FA0191B78C42F194F4B35CF182973A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
Manifest number: 12C5
Signing time: Sat 07 Jun 2025 06:00:33 +0000
Manifest this update: Sat 07 Jun 2025 06:00:33 +0000
Manifest next update: Sun 08 Jun 2025 06:00:33 +0000
Files and hashes: 1: 8AI84rpaHU_QpeIn3nTLxB0rucg.crl (hash: ubhXJAlNIDDnOcsiBVfJ1xqLC9008ympRf2g2rhrr3o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:01:91:b7:8c:42:f1:94:f4:b3:5c:f1:82:97:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0023ce2ba5a1d4fd0a5e227de74cbc41d2bb9c8
Validity
Not Before: Jun 7 06:00:33 2025 GMT
Not After : Jun 8 06:00:33 2025 GMT
Subject: CN=c0d2eaf40f22c2d327bfe78f3e6fdf0da9ff5c13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:07:a0:06:a5:a0:91:62:a3:dc:ba:53:47:c0:
68:ab:ea:5f:d0:4a:1d:e3:2c:61:37:42:c0:6c:ee:
ae:54:c2:bb:b3:2c:47:1a:ad:9b:55:c3:5e:c0:6b:
86:9f:10:94:a6:1b:2b:86:fe:32:13:eb:88:e6:0c:
1b:52:3c:fa:7f:97:4e:fb:97:0d:01:e4:85:17:00:
40:ee:f5:60:81:b4:75:ea:6e:61:92:da:d2:3f:35:
3d:74:ab:bf:41:3f:74:26:f2:67:29:9c:cf:9f:43:
e9:bb:8d:0d:4f:ba:a7:f2:85:aa:4d:e8:42:93:f5:
ef:5c:a0:e8:c4:c2:f2:b4:f5:9d:33:8e:d8:80:55:
53:88:6c:29:c4:61:cf:55:f8:35:33:6c:d5:bf:3a:
b0:e2:08:a6:fe:6e:7d:4e:b9:38:63:12:86:7d:3d:
f0:62:da:f5:5e:cf:c8:d2:02:fa:5c:e4:25:0e:8f:
82:34:5d:d7:2b:2b:80:41:c9:9f:ac:0e:a4:0e:5c:
cf:e0:79:f7:e1:3c:5e:12:7a:eb:77:10:f3:20:3a:
31:1e:18:69:ce:28:ea:74:ed:18:e9:b0:84:27:94:
5c:f0:a2:cc:4d:06:36:0e:fd:8d:33:62:ab:37:3a:
e7:26:c6:5c:af:5b:37:0e:89:f6:6e:0a:eb:92:ad:
71:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:D2:EA:F4:0F:22:C2:D3:27:BF:E7:8F:3E:6F:DF:0D:A9:FF:5C:13
X509v3 Authority Key Identifier:
keyid:F0:02:3C:E2:BA:5A:1D:4F:D0:A5:E2:27:DE:74:CB:C4:1D:2B:B9:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AI84rpaHU_QpeIn3nTLxB0rucg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/0a0c19-023c-40f5-a772-ebd69d7734f0/1/8AI84rpaHU_QpeIn3nTLxB0rucg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:96:4b:77:30:da:e7:0a:b0:5e:4c:b4:47:0c:c9:d5:ae:74:
26:9e:f9:9f:1d:e2:c3:7d:d8:79:a6:92:92:ea:8c:74:a8:71:
53:17:92:36:90:e5:6f:f3:2d:44:a5:17:40:a0:a8:a6:a2:e8:
f5:64:a6:2c:11:d5:54:9d:9e:b2:ab:08:ed:87:5b:26:a3:98:
33:d5:ee:61:b9:1e:77:71:d7:5c:ca:ab:d7:25:fd:c3:5e:37:
e9:79:c0:98:9b:92:18:bb:18:b5:2b:89:2e:fe:0e:99:b5:4c:
c2:2c:70:2c:97:ec:34:36:d3:3c:d4:d8:13:d1:40:b2:13:ee:
67:22:d5:2a:08:f3:85:82:3a:f4:d7:59:90:f1:aa:89:07:12:
e8:30:fb:51:f5:12:2a:7b:d2:a2:6f:77:2e:d7:b9:6f:51:e6:
48:0a:92:f3:f9:4f:4f:30:74:6c:0c:b8:c7:83:92:31:96:92:
0e:d9:6e:9f:67:4a:cc:1a:fc:b5:d5:8b:af:97:0f:75:94:15:
e4:18:17:27:d5:84:d3:61:54:c0:c4:74:c4:a1:ea:1a:c3:49:
94:e9:7e:0b:c2:fb:76:d5:e1:65:94:e7:94:30:77:4c:c8:ed:
56:d8:c6:f2:89:ec:e1:3c:c8:fe:19:41:73:6e:0c:b6:4f:d8:
1b:19:8e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 11:35:00 2025 by rpki-client