Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
File: in1zAecVR30mgJu6u0zQMr07Vhg.mft (raw, json)
Hash identifier: q+GZk3xca+Ab4/vtUmZsuvb7ilu61+iH7obfg7ZQ7HQ=
Subject key identifier: 8A:B6:5B:57:AA:B3:32:6C:4E:75:3C:E7:5D:62:9F:A5:00:A2:15:A1
Authority key identifier: 8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18
Certificate issuer: /CN=8a7d7301e715477d26809bbabb4cd032bd3b5618
Certificate serial: 019749684D15607FA16D128B6FB26BA68FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
Manifest number: 022B
Signing time: Sat 07 Jun 2025 08:01:01 +0000
Manifest this update: Sat 07 Jun 2025 08:01:01 +0000
Manifest next update: Sun 08 Jun 2025 08:01:01 +0000
Files and hashes: 1: in1zAecVR30mgJu6u0zQMr07Vhg.crl (hash: JpBrXL6L7Dtm3OAN6rcrfhylrcU/rKapS14zinV+TJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:4d:15:60:7f:a1:6d:12:8b:6f:b2:6b:a6:8f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7d7301e715477d26809bbabb4cd032bd3b5618
Validity
Not Before: Jun 7 08:01:01 2025 GMT
Not After : Jun 8 08:01:01 2025 GMT
Subject: CN=8ab65b57aab3326c4e753ce75d629fa500a215a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:fa:23:43:0b:fe:b7:05:f6:d4:6e:11:4d:
40:c6:d4:0b:66:5c:16:b4:3a:a5:53:8c:1d:79:63:
7e:91:4b:69:3c:8b:6e:60:94:e4:a9:99:96:8e:90:
70:61:e8:c5:f8:5d:14:7a:52:f3:12:a3:69:65:fe:
d2:8d:af:e5:d5:5e:c4:fb:b4:4b:62:42:e9:10:41:
48:c3:3c:ef:44:fa:83:d7:b5:e7:0d:5e:5c:f6:51:
26:ee:ca:7b:ac:4c:ce:60:37:64:52:a1:83:78:15:
55:34:bf:d1:d5:de:ba:2d:b0:7e:20:54:f7:21:86:
4a:3f:5d:12:a1:64:34:a5:24:97:35:26:e5:50:8f:
d8:70:09:39:6c:b1:7d:b4:46:eb:58:92:fb:ee:c3:
ee:9d:25:67:08:cc:0e:1f:f3:a6:c5:ef:75:f6:93:
b6:f6:69:cc:c1:27:6d:cb:ee:20:d1:4d:24:5c:8a:
97:00:9b:05:b4:fd:57:a5:ea:23:ac:12:28:d1:06:
d3:3a:c4:2f:ac:bd:cd:a4:d1:b1:40:af:da:d2:05:
91:13:33:cd:54:24:e6:0d:b8:91:7d:fd:12:14:73:
3a:b5:2e:43:33:3d:95:22:25:78:15:79:81:8c:9f:
f2:51:86:0d:70:28:40:4b:12:6d:b3:5a:5e:8b:ef:
a5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B6:5B:57:AA:B3:32:6C:4E:75:3C:E7:5D:62:9F:A5:00:A2:15:A1
X509v3 Authority Key Identifier:
keyid:8A:7D:73:01:E7:15:47:7D:26:80:9B:BA:BB:4C:D0:32:BD:3B:56:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/in1zAecVR30mgJu6u0zQMr07Vhg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b66986-8f6b-46b9-bccd-f7369f9dcc9c/1/in1zAecVR30mgJu6u0zQMr07Vhg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1a:50:07:d1:45:60:a0:62:56:2a:05:0d:1d:c4:ba:30:11:
2b:b6:b9:c8:9b:60:21:5a:bb:ac:da:98:90:41:01:ee:b0:4c:
19:02:1f:40:06:13:60:df:d4:1d:e4:08:9f:ba:e9:ed:8f:84:
0e:c4:51:fd:3d:60:99:95:cf:a8:f4:c0:c1:aa:cc:2b:9a:bc:
7c:3b:39:cd:e2:64:ff:e5:60:20:fb:c5:9c:50:06:d8:f7:94:
35:01:69:8c:69:d2:f7:12:9b:6b:09:52:32:8b:30:93:34:57:
f5:1c:8e:38:1a:2b:2c:3d:12:4e:43:0e:e0:f6:29:ea:80:a8:
39:26:bb:6d:3e:4e:f1:52:50:07:ed:dc:89:c3:3f:18:20:51:
a0:e3:9e:21:18:6f:e5:4b:7c:c1:a4:28:ac:e9:20:49:bb:86:
db:85:4b:2b:74:b0:7d:6f:51:3e:a6:49:db:aa:1e:b9:8d:c1:
36:05:b9:f3:0b:4d:c9:18:64:b7:88:ec:c7:7b:b5:c5:dd:e5:
fe:70:ba:2e:cd:27:6e:a6:4c:6d:32:7d:04:b8:57:5a:dd:39:
7f:9d:81:5c:9a:84:3b:78:2f:82:26:86:d6:52:ad:67:eb:cf:
e6:40:43:f7:8a:4d:77:5f:f9:a9:40:ba:c6:ba:bd:54:75:b0:
46:0e:5c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:23 2025 by rpki-client