Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
File: 8EDR-cl75GbgverISSieKjzKns4.mft (raw, json)
Hash identifier: hKgjmx9ZwkFHRil/t43B3Fn0yuWCBuKDA7p/IFXbK9o=
Subject key identifier: 2F:29:17:D9:73:41:18:2E:0E:42:F1:7C:1B:56:B2:41:6B:D7:EB:52
Authority key identifier: F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
Certificate issuer: /CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Certificate serial: 01974EC5C27FF631252077F52CBA68E81B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
Manifest number: 157A
Signing time: Sun 08 Jun 2025 09:01:12 +0000
Manifest this update: Sun 08 Jun 2025 09:01:12 +0000
Manifest next update: Mon 09 Jun 2025 09:01:12 +0000
Files and hashes: 1: 8EDR-cl75GbgverISSieKjzKns4.crl (hash: MInZgmYAoBgew6T0QlwCeZaNfMHRvg7ogbgh8SAIIVI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:c2:7f:f6:31:25:20:77:f5:2c:ba:68:e8:1b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f040d1f9c97be466e0bdeac849289e2a3cca9ece
Validity
Not Before: Jun 8 09:01:12 2025 GMT
Not After : Jun 9 09:01:12 2025 GMT
Subject: CN=2f2917d97341182e0e42f17c1b56b2416bd7eb52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d2:da:2f:26:61:39:e2:d3:75:1e:48:03:a2:
a7:9b:a7:a2:63:f3:1b:ff:23:12:55:39:27:db:d3:
5c:c2:69:46:c9:ad:e2:33:51:ab:a9:70:ab:02:ab:
a6:5a:35:9f:c3:c3:98:fe:51:b1:98:50:5b:22:c0:
9f:f8:c0:18:21:80:96:57:c1:36:0d:fc:73:a6:10:
64:67:af:e9:e1:06:51:fa:34:e8:63:a3:0b:59:b8:
54:d5:de:be:85:0f:bc:9e:2b:84:55:fb:f5:28:c3:
c9:da:71:be:d4:e9:68:d1:04:f7:6b:43:7c:8c:e2:
9f:85:f3:cf:fc:9f:90:da:a2:c3:50:6b:78:6e:35:
10:dc:69:60:b7:64:5e:09:e0:70:b8:66:fa:cc:16:
e1:91:7d:15:a7:b2:ec:39:56:60:f8:46:f9:85:ba:
6b:b4:72:58:d3:f3:bc:67:fa:6f:fa:c8:c8:a6:69:
96:fe:cd:31:43:69:61:7c:ee:e9:d0:5a:3f:8b:f6:
d2:40:58:0f:59:ae:37:5c:37:27:d0:d1:86:98:2e:
8c:f4:5d:90:ce:75:92:26:80:5f:59:17:15:d4:14:
bf:60:32:89:00:df:84:a4:50:40:01:49:24:4f:89:
f5:9d:3c:ca:1a:ef:05:6d:62:6c:fa:ea:a6:74:f7:
85:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:29:17:D9:73:41:18:2E:0E:42:F1:7C:1B:56:B2:41:6B:D7:EB:52
X509v3 Authority Key Identifier:
keyid:F0:40:D1:F9:C9:7B:E4:66:E0:BD:EA:C8:49:28:9E:2A:3C:CA:9E:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EDR-cl75GbgverISSieKjzKns4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/3c2f3b-559a-405b-9216-8953ec8ddd4a/1/8EDR-cl75GbgverISSieKjzKns4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d2:8c:37:2d:e8:5e:d0:c7:23:e9:1d:e7:c7:a3:08:ec:4f:
40:cb:6b:09:69:3d:75:fb:09:36:00:71:18:2a:6b:c8:d5:29:
74:e4:d4:43:06:ea:c9:96:56:12:dd:9e:af:f4:79:07:85:ec:
03:aa:9a:87:40:7c:f6:33:dd:a3:d2:ef:41:d3:5d:a4:33:b7:
9d:82:5a:3a:f2:81:9d:5e:90:73:31:0f:08:5e:60:ef:0f:fc:
5a:81:f9:da:81:35:92:72:ac:5c:e1:fd:c8:38:d4:11:89:a7:
dc:f0:44:5e:26:84:27:ee:79:67:77:77:a9:c2:13:7c:78:cb:
1a:f6:97:7e:15:20:3a:c2:0e:e9:1d:e3:65:8a:b0:4f:00:8d:
e6:fc:67:97:18:ab:36:b9:9e:0b:2d:7d:6d:e6:93:23:3a:e4:
d1:a0:15:36:f9:13:b4:52:83:d1:7a:4a:94:82:96:a7:b7:28:
f9:32:11:71:14:4f:aa:0e:c0:97:dc:45:60:24:91:68:03:bd:
62:ec:0d:ff:76:59:f7:9f:c9:d4:49:78:44:7a:db:31:ef:92:
84:ef:25:8b:50:e8:bc:99:60:f1:fe:bd:53:57:44:b4:e0:f6:
97:a6:96:26:b8:c5:19:62:e9:de:59:d6:6a:af:14:44:b6:ee:
d6:72:05:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 17:15:39 2025 by rpki-client