Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: /OSvuSmrztA3uJR39fE0ecBFZpPWHeNgr0j1KdEQII4=
Subject key identifier: DC:1B:23:1A:9B:41:71:FE:CC:63:0A:F8:BC:CC:71:C1:8D:CC:3C:56
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 01974AB1951382A51A0DD066087067DE729A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 0528
Signing time: Sat 07 Jun 2025 14:00:41 +0000
Manifest this update: Sat 07 Jun 2025 14:00:41 +0000
Manifest next update: Sun 08 Jun 2025 14:00:41 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: jApb/6nxph4nO9nsXK3LX4o3kBp2KIOTZIbctqFmTbE=)
2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:95:13:82:a5:1a:0d:d0:66:08:70:67:de:72:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Jun 7 14:00:41 2025 GMT
Not After : Jun 8 14:00:41 2025 GMT
Subject: CN=dc1b231a9b4171fecc630af8bccc71c18dcc3c56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:0b:a6:3e:f9:5e:50:9c:96:d9:8d:26:33:a6:
a4:6c:87:f8:62:98:d0:a4:89:12:49:80:2a:c4:32:
eb:26:dd:a0:62:b2:03:2e:b3:28:aa:0a:58:6e:cd:
23:a9:98:06:9a:28:ee:5f:79:50:45:1d:bf:40:ff:
92:2d:17:db:fc:31:6e:e0:e8:71:fe:d1:eb:a6:7a:
d8:d5:8f:66:09:c3:08:32:a4:20:c7:3d:50:19:70:
e3:09:a6:de:f1:91:ba:06:3c:08:c2:4c:33:7e:f4:
a6:6e:3f:1d:db:03:f4:76:95:36:11:a3:69:19:58:
61:14:97:e9:ef:25:b8:8e:14:53:73:00:8c:f3:79:
06:c8:bc:b2:52:c6:6a:d2:46:ed:11:cd:58:1c:14:
49:05:fb:6e:f0:ea:2b:ac:53:09:fc:ad:bd:27:c8:
98:56:5c:56:27:eb:7b:36:44:91:08:be:04:cd:1f:
b0:8e:d8:d0:61:38:7e:da:8d:20:a2:0a:78:9d:9b:
e5:13:5a:4d:fc:2b:b2:ae:2d:0d:ca:05:67:82:74:
87:fe:b7:c0:85:10:7a:67:48:17:ff:6a:65:39:a7:
e5:f8:ef:a6:7e:dd:c3:52:04:60:72:f9:a2:99:d6:
ce:71:17:27:6a:e4:ac:15:fb:1e:96:80:33:e9:22:
d9:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:1B:23:1A:9B:41:71:FE:CC:63:0A:F8:BC:CC:71:C1:8D:CC:3C:56
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:4a:5f:8c:93:d2:6c:e6:e2:ce:1b:9e:05:f1:e2:02:97:58:
0b:27:b8:c8:d7:00:ef:f9:b3:55:c4:4a:95:ee:23:35:96:68:
8a:67:f8:c8:15:a1:90:20:f4:13:1b:b8:4b:c2:60:15:32:3c:
9d:63:ff:2e:af:b1:1a:5c:e9:30:ac:31:0a:74:44:45:8f:8f:
5c:ea:70:4c:6b:34:a4:e6:d3:31:69:d5:0e:28:8e:0f:c5:62:
a8:a7:74:ef:5f:02:3b:84:e0:94:97:0c:3e:0d:e4:fe:5f:33:
5e:64:93:39:c3:f0:68:5e:d3:92:4a:f8:bd:65:65:b6:28:74:
8d:7f:be:1e:25:45:b0:f6:d2:20:2c:41:14:93:2e:f8:e5:3f:
3e:ec:5f:0c:bf:12:85:f4:d2:bf:88:b1:c4:66:6d:de:1b:aa:
e0:4f:85:13:ec:01:45:ce:7b:20:41:d7:96:d1:cc:ae:ca:c1:
1e:7f:c4:d3:d8:da:d2:ae:37:d3:a4:88:71:34:ec:e8:2c:c2:
ba:63:19:73:fe:c4:5c:92:3b:2b:96:f9:51:bc:00:00:05:bd:
9f:95:81:db:fd:7e:21:9f:20:38:61:af:90:bc:e1:ed:51:00:
67:6a:64:94:b6:b1:95:c1:ea:25:58:a5:d4:be:9a:17:3e:8a:
bd:b0:f8:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:06:39 2025 by rpki-client