Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
File: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft (raw, json)
Hash identifier: Mx9t+YiTVXropaXz0E+FhWjvyLhioD/4KILpyYX1pvs=
Subject key identifier: E4:57:62:8E:34:9F:B9:EA:3A:84:C4:AE:22:45:9C:31:A1:53:01:19
Authority key identifier: F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
Certificate issuer: /CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Certificate serial: 0197488D341BD0294FC852C01B5895938845
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 04:01:42 +0000
Manifest this update: Sat 07 Jun 2025 04:01:42 +0000
Manifest next update: Sun 08 Jun 2025 04:01:42 +0000
Files and hashes: 1: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl (hash: BGii517YPtkkRJDwZTsna9ra+612fULDahWfFh4DlTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8d:34:1b:d0:29:4f:c8:52:c0:1b:58:95:93:88:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Validity
Not Before: Jun 7 04:01:42 2025 GMT
Not After : Jun 8 04:01:42 2025 GMT
Subject: CN=e457628e349fb9ea3a84c4ae22459c31a1530119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:92:24:c6:a1:a7:41:b6:d0:ad:9c:66:2f:6e:
5e:d2:0d:b0:40:dd:59:a7:86:d3:7c:57:2b:37:99:
99:3d:8a:0b:36:c8:10:c1:7a:2d:be:52:98:ec:d7:
a8:be:2b:b3:c8:c0:bb:86:bf:49:0b:54:52:3f:71:
65:89:34:33:4a:f9:a9:28:63:d0:70:fd:c4:40:6f:
a6:60:c4:09:87:f1:da:60:ad:04:eb:dd:ae:58:de:
d1:f1:e3:05:a9:87:8a:48:b3:ae:8e:cf:4e:d5:19:
e3:be:28:2f:0a:2c:fd:8d:29:14:77:94:69:76:13:
ff:6e:9f:2a:3d:31:3f:80:be:4e:86:fa:69:26:56:
98:d8:16:4c:8d:bb:4b:65:18:38:30:fc:19:97:0c:
13:9b:22:f1:df:0c:1f:ae:34:52:96:05:72:1e:c0:
36:d8:ec:a1:c0:81:6f:28:77:bf:a8:69:a1:4b:81:
74:5a:d3:79:be:35:fa:f8:85:69:c0:30:06:f9:0d:
d3:96:01:c1:49:3e:df:33:42:89:80:c1:95:5b:1d:
f4:35:1f:ff:01:5c:02:62:9d:1e:e4:a9:9c:07:db:
d2:90:67:4a:c1:4b:59:fe:cd:a1:ae:30:f5:d2:47:
54:4f:2c:44:19:bd:e7:a4:94:44:d5:e8:6b:d8:17:
eb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:57:62:8E:34:9F:B9:EA:3A:84:C4:AE:22:45:9C:31:A1:53:01:19
X509v3 Authority Key Identifier:
keyid:F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:1f:c7:a0:7e:3d:7b:bb:20:89:b1:f0:64:be:57:b8:d1:15:
21:bb:6f:c7:71:9d:a6:48:e9:1f:fb:8e:4e:32:fb:5b:97:f8:
56:0c:75:72:cb:2e:d4:c9:7d:5b:8b:5a:67:e2:6c:2a:43:62:
a9:49:11:5f:47:97:74:41:74:c2:a0:d2:3b:a9:11:8d:a8:7f:
63:a9:72:f3:ef:22:6d:97:94:b7:37:ef:3b:44:f1:52:a8:b0:
c4:e0:ee:15:7e:8f:c0:46:1d:4b:61:11:34:f6:8c:32:fb:24:
d9:83:b3:0a:b9:f9:b2:d6:8f:fd:92:5c:72:e2:26:39:98:0c:
20:65:26:7e:66:fa:60:6f:99:aa:1f:6d:ab:65:85:04:74:3a:
14:67:20:03:c7:cc:85:e8:89:7d:ec:47:dc:cd:f4:36:4e:d1:
32:8b:20:f2:15:a9:55:24:67:32:fb:3e:2a:58:18:26:ea:1c:
f2:3b:7a:a8:1d:89:2a:e3:c4:96:1d:7b:54:8f:49:12:65:1c:
ab:a7:74:82:be:6b:d2:e6:49:93:15:47:8f:89:d8:9c:b6:53:
24:6f:6c:e0:97:9e:0b:79:df:bd:d5:74:5d:e3:9d:a0:58:28:
58:40:32:c4:17:70:ec:55:ab:a5:c2:be:5f:aa:61:e1:6e:8e:
01:6a:7e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:58:28 2025 by rpki-client