Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
File: 8BGVyAze5CsGiNuOk6aLRZuFjm4.mft (raw, json)
Hash identifier: RBpCMBsh6QSRdBrYWcLDILXKRLQ6DsG6wjqKIoU+MJw=
Subject key identifier: 1D:78:E4:B1:15:C9:A6:78:06:96:14:D8:4A:CD:F7:B6:1C:80:91:9F
Authority key identifier: F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
Certificate issuer: /CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Certificate serial: 01974AE8CC99EA8E007B042EC1ED47578CEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
Manifest number: 0364
Signing time: Sat 07 Jun 2025 15:00:59 +0000
Manifest this update: Sat 07 Jun 2025 15:00:59 +0000
Manifest next update: Sun 08 Jun 2025 15:00:59 +0000
Files and hashes: 1: 8BGVyAze5CsGiNuOk6aLRZuFjm4.crl (hash: ss9zdc/jkbTMrNMSIJYeUM1Necvw4DlWG1kpInSWLfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:cc:99:ea:8e:00:7b:04:2e:c1:ed:47:57:8c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01195c80cdee42b0688db8e93a68b459b858e6e
Validity
Not Before: Jun 7 15:00:59 2025 GMT
Not After : Jun 8 15:00:59 2025 GMT
Subject: CN=1d78e4b115c9a678069614d84acdf7b61c80919f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ef:62:c3:d4:18:79:6a:06:9f:ee:10:df:33:
39:5c:7a:56:9f:fc:f4:ce:69:e3:dd:ff:7f:7f:e3:
e4:72:01:1a:87:c2:3f:d6:9a:16:7c:17:09:23:bb:
7b:3a:d0:03:66:2d:98:be:b6:4c:39:c7:56:c2:4d:
0e:eb:5b:3b:c8:90:7e:f5:4f:88:30:50:52:a3:e8:
15:3a:40:6c:62:91:b1:88:71:18:ca:93:d0:58:d4:
82:49:a3:06:85:9a:01:37:21:58:d9:86:c3:6a:ce:
77:26:91:ce:c4:af:65:5e:b2:87:07:c6:f9:f9:f0:
c4:c4:d8:d3:da:40:45:8e:21:54:f3:34:59:3c:0d:
1f:c8:54:9c:3f:47:04:af:b1:82:e1:bd:c1:99:c5:
95:41:f5:cf:ad:0a:c9:57:8a:60:94:8b:32:eb:d9:
6b:45:30:aa:b8:e9:54:e8:d2:18:98:d4:45:28:71:
31:94:28:1e:59:0c:b6:3e:cf:41:6c:a0:2b:d9:47:
13:a3:6e:61:2f:b1:86:31:aa:9c:47:06:32:a3:5c:
f8:5c:d0:c9:db:67:62:68:62:9d:7c:f4:6d:0b:e1:
b5:35:0c:c5:1a:3f:0f:d5:88:54:c4:ea:c1:6d:9e:
af:31:ca:11:76:80:36:40:f3:40:ec:75:7b:d3:77:
7c:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:78:E4:B1:15:C9:A6:78:06:96:14:D8:4A:CD:F7:B6:1C:80:91:9F
X509v3 Authority Key Identifier:
keyid:F0:11:95:C8:0C:DE:E4:2B:06:88:DB:8E:93:A6:8B:45:9B:85:8E:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BGVyAze5CsGiNuOk6aLRZuFjm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/d72e67-1262-418b-8560-df7ac6a8ae2d/1/8BGVyAze5CsGiNuOk6aLRZuFjm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:f0:66:2d:f9:c7:ac:5a:b0:fe:30:dd:74:fc:89:66:00:59:
46:1a:b1:20:91:0d:d0:dd:04:af:1e:bc:ce:e0:26:3b:dc:ea:
70:85:1c:1f:c3:0a:74:db:1a:48:7e:46:60:a1:5b:42:43:51:
ac:ef:a1:7c:1b:36:ef:e3:21:fd:75:57:4d:a5:33:ad:1e:7b:
b7:29:b0:06:bb:11:b5:ab:76:37:15:9e:4d:8e:6e:e6:91:c1:
1f:76:ad:49:5c:d0:39:40:2d:0d:b1:74:a7:e6:61:91:80:92:
73:f0:e9:6d:26:c9:68:ab:e8:8f:58:a5:78:c9:d6:20:03:44:
52:d2:f0:c2:04:15:1f:a9:86:1f:f9:b1:4d:2e:7c:19:69:c6:
2d:9a:c2:aa:71:37:0f:c6:91:a2:24:e8:65:17:ca:1f:80:0c:
c8:27:80:97:a0:65:d7:e3:4e:b1:fc:1b:36:d8:25:e3:32:07:
78:4a:d7:bb:5a:4b:50:76:2d:e6:6b:cb:29:7d:3c:1c:d1:9a:
47:f7:51:00:d1:de:16:3a:8c:cf:9d:7e:87:a3:84:28:f5:5b:
ce:d7:99:ab:dd:5f:2a:67:74:df:96:02:d6:c9:90:f5:2e:90:
f2:8d:43:7b:21:b9:1a:2d:33:4e:43:c1:f4:eb:39:cb:e9:de:
c3:b3:2b:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:53:32 2025 by rpki-client