Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: bqMYsHc8zYOqVFgV6TodIG6KrLJUQv4RNAfkcFLgYmU=
Subject key identifier: 45:28:9A:8C:FD:4A:FF:86:03:7F:A9:46:A9:27:96:64:50:8C:E6:EF
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 0197488D02A55600CB2B17895A18634DABD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 1237
Signing time: Sat 07 Jun 2025 04:01:30 +0000
Manifest this update: Sat 07 Jun 2025 04:01:30 +0000
Manifest next update: Sun 08 Jun 2025 04:01:30 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: ROC3pQdQ9HKIoOKLLhObkMpA1VP3keq3l+DY+JsOX7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:02:a5:56:00:cb:2b:17:89:5a:18:63:4d:ab:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Jun 7 04:01:30 2025 GMT
Not After : Jun 8 04:01:30 2025 GMT
Subject: CN=45289a8cfd4aff86037fa946a9279664508ce6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:24:c3:f2:6f:f9:91:c1:68:37:68:f5:52:9c:
8f:6d:38:88:c1:6a:49:1d:41:3c:5d:5e:f1:bd:f7:
ac:93:1a:83:b6:2a:15:a7:c6:1f:2c:af:da:23:c5:
f3:ec:f8:14:dd:54:00:92:46:b1:b3:28:eb:3f:ec:
58:8e:29:35:50:30:5c:84:ca:d0:77:f7:e5:7a:9c:
71:dc:63:63:99:b0:db:fe:75:ee:38:57:d1:00:64:
ff:ab:3a:c6:63:a3:ae:f1:f3:6a:47:cf:10:f8:75:
3c:8e:de:00:ec:a8:b4:09:3e:ab:7a:9d:34:f0:c0:
a0:d2:f4:7d:11:79:c8:c6:cb:24:8d:eb:27:98:fc:
34:57:ab:1b:8c:b9:da:1f:be:39:79:e4:ae:f3:06:
ae:d4:29:a5:d4:67:70:2e:b8:44:1e:64:1d:1e:17:
94:ea:62:de:7c:05:bf:79:ad:bd:10:da:a7:e9:d8:
e6:2a:9b:01:7d:b6:79:23:b9:62:2e:a8:f3:b9:cb:
32:01:7e:09:3d:0a:11:2f:ce:e7:74:f9:ce:a2:26:
bb:03:3a:41:38:b4:bf:fb:29:ed:27:eb:93:05:62:
e9:71:7b:b2:ba:60:0f:98:44:83:91:24:78:a0:0d:
89:8f:e5:31:22:37:c4:d6:ac:f5:cb:f5:9f:3d:b1:
0f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:28:9A:8C:FD:4A:FF:86:03:7F:A9:46:A9:27:96:64:50:8C:E6:EF
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:dc:95:5b:de:44:e0:b1:5d:1b:75:6e:b5:31:3f:d3:4b:04:
78:f5:5c:03:d4:2c:32:56:ec:b4:95:23:64:81:0b:7f:05:87:
e8:3f:6d:51:7a:ec:97:0c:64:80:4e:2b:16:0f:49:5a:50:e6:
eb:aa:18:78:72:ef:1d:14:20:fa:b1:53:3a:ef:33:6a:0f:e5:
51:67:4d:6a:4e:dd:c4:3b:d5:7e:04:e5:3c:c7:6b:fd:a1:75:
28:d7:0b:e9:8f:ef:dc:d7:3b:78:8a:c8:a0:a7:d8:c0:89:b8:
df:f4:0c:50:0e:9e:6e:8b:a1:a1:13:68:e1:ba:a8:8d:cf:b8:
c2:bb:64:f2:6a:72:74:b7:ef:78:4c:51:f3:2e:49:fb:29:8c:
c7:ff:41:30:1f:76:9c:3f:58:3a:d3:ac:4d:fa:d2:8f:4e:6e:
aa:a3:60:a1:1b:3b:1a:96:76:d5:48:93:ec:00:f5:c6:d4:a8:
01:56:0d:d9:83:fe:7f:2c:19:a5:f3:1c:b3:11:7e:6a:80:99:
0a:4c:9b:e3:15:63:0d:67:0d:a1:c4:b8:09:fc:03:7f:21:f1:
38:03:23:cb:35:99:72:03:ba:26:ca:dd:47:4a:19:21:e2:ba:
16:8b:c4:90:7c:a0:83:a3:25:44:c3:c0:a8:7f:9e:ef:4d:17:
38:d2:88:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:56:55 2025 by rpki-client