Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
File: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft (raw, json)
Hash identifier: 4NBIFNwLigA9+OuGAK+5RiFbdUHivlI8VdrfrcQfTQ0=
Subject key identifier: 1E:7B:50:A7:A1:78:13:8F:63:D7:6E:62:0E:82:87:AC:CE:61:5C:E0
Authority key identifier: 9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
Certificate issuer: /CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Certificate serial: 01974EC50A4F393F2B3376BF4AA16D5FA51C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
Manifest number: 12EC
Signing time: Sun 08 Jun 2025 09:00:25 +0000
Manifest this update: Sun 08 Jun 2025 09:00:25 +0000
Manifest next update: Mon 09 Jun 2025 09:00:25 +0000
Files and hashes: 1: m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl (hash: yp3OIloKyMB3sbBbi0hEVvFjkwGMjZsXSxMH7OSsgn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:0a:4f:39:3f:2b:33:76:bf:4a:a1:6d:5f:a5:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9bc0c5be77ef99ca4a7e91dffd58e6a798743cfa
Validity
Not Before: Jun 8 09:00:25 2025 GMT
Not After : Jun 9 09:00:25 2025 GMT
Subject: CN=1e7b50a7a178138f63d76e620e8287acce615ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3a:85:72:11:5c:0b:55:cb:05:23:04:74:e8:
a2:7b:60:b9:e1:85:0b:0e:5a:71:18:56:9a:11:ba:
14:78:07:f9:81:ad:07:e1:c2:d3:f8:e3:40:49:61:
06:cf:f7:cc:c1:83:7b:0d:45:7c:6e:5c:35:8f:f7:
e1:ca:c7:5d:b5:c5:38:ef:2b:01:4f:66:f7:cd:66:
cc:84:0c:49:20:ef:9a:5f:a2:32:55:7b:38:b8:09:
af:25:d4:2c:bc:c4:1c:56:dc:16:11:91:19:f0:6f:
82:90:cd:3a:d4:b5:8b:9a:d1:de:69:46:dc:5f:89:
f0:b9:96:1c:18:a4:a4:a6:55:8e:b8:12:63:d4:77:
dc:34:b4:17:dd:fa:ca:e6:91:83:23:52:44:67:cb:
d0:10:46:ba:e4:23:11:d7:d6:fc:74:a3:0c:ef:e0:
27:84:5e:71:fd:d4:d7:3c:7f:f0:bd:c2:2f:b2:c4:
7f:66:9b:fd:dc:d4:9a:aa:c4:ab:44:65:c7:18:f5:
44:4f:5c:dc:9e:54:3e:90:e4:3f:14:e5:06:f5:9e:
6f:61:3c:de:77:b4:e2:8f:06:4d:04:d0:e6:d2:2e:
00:bc:67:17:be:e8:a0:56:82:ea:9a:e8:ae:20:be:
ff:15:14:be:0c:c6:94:7c:c6:ed:8b:8a:98:3e:75:
99:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:7B:50:A7:A1:78:13:8F:63:D7:6E:62:0E:82:87:AC:CE:61:5C:E0
X509v3 Authority Key Identifier:
keyid:9B:C0:C5:BE:77:EF:99:CA:4A:7E:91:DF:FD:58:E6:A7:98:74:3C:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/89d9f0-9bbc-4eed-b003-ced206511927/1/m8DFvnfvmcpKfpHf_Vjmp5h0PPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:04:d8:2b:48:83:bd:19:ef:00:dc:76:c8:f7:6f:81:35:26:
06:05:fc:ef:d3:d0:ff:70:9b:76:90:a6:9e:03:c3:3c:94:38:
6c:97:2d:3f:cb:0d:4d:28:72:e2:e3:ce:43:94:f4:71:bb:fa:
08:59:0a:b6:16:b8:6e:af:48:95:b6:9f:34:00:82:60:1d:f7:
9e:58:a2:8d:64:cd:4f:08:b4:a4:5c:d0:fc:33:bd:58:f3:7e:
47:eb:03:84:84:88:f7:74:2d:ff:df:65:14:70:d5:ee:be:19:
5b:f9:80:a6:8c:eb:18:ce:59:82:de:e4:9f:6b:82:80:c3:1a:
90:e7:53:7e:78:96:d0:3c:1a:0d:fa:80:e5:eb:39:b0:d5:30:
b9:c2:ca:2d:0a:82:fc:81:2e:65:c9:d4:0a:36:50:d7:3f:19:
7d:17:0c:af:c9:b0:35:fb:18:73:eb:6f:53:0f:4f:38:80:88:
53:11:30:a2:29:89:f1:56:15:54:a5:66:b8:6c:4c:57:8e:99:
ef:01:8a:b2:33:a3:70:8a:77:6e:29:59:f4:50:df:3c:df:62:
2f:df:97:6b:4f:43:ab:8e:ef:b2:17:8a:d8:35:0b:9d:20:09:
7b:11:dc:33:b6:c5:42:bc:45:c7:01:3d:b3:71:b1:5b:10:15:
d8:ef:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:38:11 2025 by rpki-client