Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
File: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft (raw, json)
Hash identifier: lhB+6WKTMpts5hV7nHO3REym0aFxDJ/NsdspupZnTHg=
Subject key identifier: 05:49:7A:C4:31:64:E4:5B:1E:0F:49:50:29:4F:38:C8:90:87:AC:79
Authority key identifier: F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
Certificate issuer: /CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Certificate serial: 019750EAAFD9B14B41F253A33EF3420E12E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
Manifest number: 065C
Signing time: Sun 08 Jun 2025 19:00:47 +0000
Manifest this update: Sun 08 Jun 2025 19:00:47 +0000
Manifest next update: Mon 09 Jun 2025 19:00:47 +0000
Files and hashes: 1: 8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl (hash: Xe2gLBB4ZbO4jel9x05Zh/3N9CijCjAnFxdJfinooSw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:ea:af:d9:b1:4b:41:f2:53:a3:3e:f3:42:0e:12:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08c19648470091fca7c0ed79ce9df6bdaa0cdff
Validity
Not Before: Jun 8 19:00:47 2025 GMT
Not After : Jun 9 19:00:47 2025 GMT
Subject: CN=05497ac43164e45b1e0f4950294f38c89087ac79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:40:ae:3e:96:f5:03:c2:56:93:ed:fa:61:25:
8a:86:dc:37:4a:b8:a8:3f:a7:01:eb:91:24:f2:12:
8f:eb:e2:86:60:e7:8c:3e:c0:69:31:65:ab:60:a7:
9d:1a:ad:82:aa:bb:cb:1a:8b:a9:cc:05:97:82:aa:
84:d2:31:ff:4a:bb:5f:dd:ef:7e:8c:6f:0d:a1:9a:
bd:26:ad:19:4a:aa:36:0c:a9:4f:42:c1:34:4f:50:
ef:35:0a:1d:c7:c8:66:7c:59:8e:8a:bb:90:cf:78:
d3:86:03:c0:24:9e:40:19:24:44:c7:be:9c:d1:7c:
85:32:88:4d:41:6e:5a:b7:42:10:ff:c8:d4:f8:2b:
03:6e:c1:fd:5c:d8:01:b8:53:4d:f2:22:c7:f2:94:
14:c6:3a:60:59:70:61:67:c3:81:0c:c6:1f:b6:23:
21:78:7e:d4:14:08:6d:7f:b2:9e:39:ed:0d:77:66:
79:4f:34:f8:fb:8f:fd:ec:f0:44:70:a8:15:85:b3:
db:0a:8b:c0:a7:e6:d9:fe:5b:12:37:10:21:19:c6:
0f:96:b7:58:c6:41:f2:bf:7d:a5:aa:45:ea:ca:9b:
5c:aa:44:2b:14:bc:fa:45:ff:1c:49:77:1d:7e:94:
87:bf:09:5d:d9:07:3a:db:1f:11:29:47:be:f4:23:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:49:7A:C4:31:64:E4:5B:1E:0F:49:50:29:4F:38:C8:90:87:AC:79
X509v3 Authority Key Identifier:
keyid:F0:8C:19:64:84:70:09:1F:CA:7C:0E:D7:9C:E9:DF:6B:DA:A0:CD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8IwZZIRwCR_KfA7XnOnfa9qgzf8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/c5485e-3826-43e8-8be2-d1fe8cb01456/1/8IwZZIRwCR_KfA7XnOnfa9qgzf8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6c:16:2c:1c:cf:2c:3d:26:2e:8a:ae:22:98:91:a7:e4:4e:
ea:52:d4:44:82:5f:65:f4:aa:6a:a6:86:a4:30:89:ce:c2:58:
bd:67:8e:fb:33:e5:02:85:eb:b1:57:54:68:d4:5f:7e:52:c2:
0a:8f:c2:99:3f:e0:49:8c:a8:ac:fd:a4:0f:f5:da:5c:5c:5f:
b8:af:b0:34:10:fd:a6:fb:b2:14:aa:e1:5c:2a:93:34:eb:df:
90:0d:33:60:8b:df:2d:d5:08:45:c3:09:4e:51:84:d4:7f:01:
16:37:3a:e6:f1:0f:61:d1:96:ed:de:73:f9:06:fb:8d:69:b6:
37:5d:1d:cd:26:81:3c:20:67:18:ba:f4:59:4d:5d:72:3c:c9:
05:cd:2d:5c:72:54:33:87:26:b7:dc:79:9c:fd:dd:35:82:40:
e2:41:46:b1:0e:e1:ef:61:e6:34:74:8b:65:45:70:4a:37:6b:
98:ce:38:58:54:8b:ef:2f:0e:1c:f2:89:79:74:a9:b0:24:40:
21:f0:76:0c:04:a1:a1:df:54:d6:86:04:cd:a7:82:ac:33:93:
ae:f1:36:af:33:1f:ef:77:57:32:e2:29:68:09:bc:57:ab:93:
88:53:35:ef:6c:73:7b:87:7b:2a:cf:47:96:2a:a1:f5:7b:ca:
39:7a:90:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:21:29 2025 by rpki-client