Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
File: 8gRTIEA3KhoBrACJS58IvT_hreM.mft (raw, json)
Hash identifier: +md0GlbLMLKrw7Yy9ZVjAxGhCEjbKLyLEFjo5AUA61c=
Subject key identifier: 61:C2:63:F8:09:46:31:E7:80:02:EE:FD:2E:54:D3:2B:33:D6:43:AA
Authority key identifier: F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
Certificate issuer: /CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Certificate serial: 0197440AFA7D275CC382AAB0EAC00643111E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
Manifest number: 16
Signing time: Fri 06 Jun 2025 07:00:59 +0000
Manifest this update: Fri 06 Jun 2025 07:00:59 +0000
Manifest next update: Sat 07 Jun 2025 07:00:59 +0000
Files and hashes: 1: 8gRTIEA3KhoBrACJS58IvT_hreM.crl (hash: attWadobEH9JevEV9DoQJCvanSThMc9SNrGCgTUXV6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:44:0a:fa:7d:27:5c:c3:82:aa:b0:ea:c0:06:43:11:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Validity
Not Before: Jun 6 07:00:59 2025 GMT
Not After : Jun 7 07:00:59 2025 GMT
Subject: CN=61c263f8094631e78002eefd2e54d32b33d643aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:03:8a:ed:9b:21:8c:09:0a:d1:3f:73:06:9d:
9a:e1:36:ab:d4:e7:2f:52:06:8d:1e:15:cc:92:77:
ea:83:fe:80:1f:cb:a0:6c:58:a1:3b:23:9c:35:05:
7a:0b:6b:8a:01:40:59:d7:42:b8:23:fa:72:f7:b5:
17:7e:c7:58:16:d4:81:b5:44:de:b6:e8:67:7c:0e:
39:8e:76:6a:f0:6c:14:3a:1d:e3:84:c3:bc:b9:f7:
58:a7:70:62:5c:44:6a:bb:b0:55:86:7f:fb:14:a3:
a8:b7:99:eb:8f:a3:65:03:d1:64:35:da:1d:52:bb:
21:56:e0:84:17:f3:73:5d:d6:25:62:bf:7b:9b:4f:
04:66:21:d6:2c:24:d4:d3:9b:6a:73:cb:9d:ce:15:
70:78:0f:47:31:95:ae:11:84:2f:dd:06:6e:dc:c9:
0d:e2:16:f3:5a:68:6f:0d:d1:4f:b2:25:d1:57:06:
98:0a:1a:9d:15:59:c0:0d:a6:18:dc:1a:c5:2c:2b:
39:c5:d4:fc:07:88:ce:26:7f:e4:51:33:4a:70:ce:
0d:a0:4e:90:d7:6b:28:91:c4:7b:91:ad:4e:5a:63:
81:40:8f:79:3d:94:6e:27:0d:05:52:6e:ce:3f:b6:
8d:1e:5b:02:65:07:b9:af:98:0f:d0:14:ca:9b:7b:
7f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C2:63:F8:09:46:31:E7:80:02:EE:FD:2E:54:D3:2B:33:D6:43:AA
X509v3 Authority Key Identifier:
keyid:F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:20:8d:95:b1:3d:0e:20:99:d3:d9:97:3f:6a:8b:16:43:2f:
00:14:46:a5:59:0f:3a:f3:9f:2d:4e:88:51:44:eb:67:b5:02:
bd:7d:13:37:db:ab:2e:04:ae:92:c2:fb:fa:3a:ce:b4:f3:3f:
78:11:99:15:d6:a4:65:f2:4a:23:93:3c:d6:28:07:eb:57:a2:
78:f1:db:98:93:33:04:27:0a:84:7d:0a:31:91:0b:07:54:36:
43:0d:1e:2e:4d:6e:9f:33:c9:f6:8c:84:80:b8:c0:1e:6f:da:
63:a7:91:44:70:fd:a8:59:18:64:22:1d:2c:40:14:82:62:39:
32:59:bd:69:cd:14:5e:4c:d0:9c:1a:f5:ed:5e:c7:76:f9:3e:
1a:7e:e1:81:6c:93:af:cd:b9:12:99:0c:a9:5e:c0:c3:1a:06:
0d:0a:46:4e:9e:44:4b:d4:63:b7:80:14:d5:23:cd:05:f5:40:
84:9b:d4:e9:c4:72:33:b2:cb:cf:80:b6:3f:16:5f:0b:92:cf:
e0:26:fd:3e:ad:b6:96:2d:cb:b0:33:39:df:fb:d2:70:d3:dd:
85:10:c7:4a:dd:7d:65:b4:71:3e:cd:ef:41:7b:ef:59:4a:e3:
9c:d0:12:9d:95:e0:31:3d:b8:7e:9b:06:ec:7b:a6:96:1c:c9:
e8:5c:93:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 16:44:07 2025 by rpki-client