Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
File: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft (raw, json)
Hash identifier: ycvyyDbEE4ReLuDK5veGbi5EAjyxF5FlP9TkkrmK9t0=
Subject key identifier: 3C:21:AA:17:F4:26:AA:3B:24:3A:B9:63:10:F5:37:EE:C0:00:87:31
Authority key identifier: F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
Certificate issuer: /CN=f04e3c322db11c10491e5e835fc66efd42e59015
Certificate serial: 0197711AC626C7D21681D00651FCC028F6F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
Manifest number: 158E
Signing time: Sun 15 Jun 2025 01:01:09 +0000
Manifest this update: Sun 15 Jun 2025 01:01:09 +0000
Manifest next update: Mon 16 Jun 2025 01:01:09 +0000
Files and hashes: 1: 8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl (hash: aIdEQB5K+eetCIkS2THcD9/0DVgmrNdiZMyXPKEB+Dc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 01:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:c6:26:c7:d2:16:81:d0:06:51:fc:c0:28:f6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04e3c322db11c10491e5e835fc66efd42e59015
Validity
Not Before: Jun 15 01:01:09 2025 GMT
Not After : Jun 16 01:01:09 2025 GMT
Subject: CN=3c21aa17f426aa3b243ab96310f537eec0008731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4e:8a:ad:40:1e:dc:cb:6f:61:3c:7d:28:29:
75:0c:84:d7:79:dc:67:87:30:19:b5:c1:18:d8:d3:
2a:04:2f:c1:c2:5a:e7:0b:97:9b:53:99:1f:f0:8d:
39:cc:7a:3e:18:e4:2d:5a:99:8d:ee:5c:dd:56:52:
fd:1c:43:e7:a0:17:c0:1b:a7:f8:92:5c:2c:c3:16:
7f:1d:1a:bf:c2:47:f7:32:a7:96:b9:2e:8f:6b:8d:
71:1b:70:d5:87:6a:06:0a:d1:a0:0e:92:b5:e2:d2:
f3:e1:a0:42:37:28:11:95:e9:83:4e:e7:03:75:db:
d1:e8:4f:5f:bc:2c:12:1a:d9:a8:e8:85:af:5e:71:
a4:52:25:41:1c:a6:7c:ec:f3:79:a7:a7:57:92:dc:
a4:43:43:96:31:71:05:27:86:7a:b1:c6:b4:bf:37:
59:74:45:10:44:a1:71:7e:e7:e3:0c:8b:ed:18:19:
c5:fe:05:61:e5:52:ca:53:29:4d:48:86:0d:5d:eb:
47:ef:ee:69:1b:80:2f:96:44:1d:fd:61:47:8d:b9:
c8:c9:e6:ee:a7:82:c0:bf:6d:25:ff:4c:4d:81:47:
a6:79:ef:2e:38:5d:df:d9:2c:ca:b7:aa:d0:cf:b8:
3c:24:f3:04:ab:b3:a4:62:d1:cb:bb:37:14:64:d0:
7e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:21:AA:17:F4:26:AA:3B:24:3A:B9:63:10:F5:37:EE:C0:00:87:31
X509v3 Authority Key Identifier:
keyid:F0:4E:3C:32:2D:B1:1C:10:49:1E:5E:83:5F:C6:6E:FD:42:E5:90:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/f76d4f-f41f-4905-bec7-e670e3dd5c21/1/8E48Mi2xHBBJHl6DX8Zu_ULlkBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:0b:60:3c:20:69:31:41:33:86:b7:d2:12:b5:52:7d:5f:11:
6e:ec:c6:63:bb:74:42:ba:c2:0f:d4:0c:37:0f:64:02:9d:a7:
fc:18:cb:a3:6b:5f:b7:e9:b9:d9:ee:1d:ae:5d:e2:42:08:58:
a2:52:54:8f:00:73:90:66:55:a0:94:9b:86:9b:cf:97:5b:ec:
bf:9a:96:91:93:0a:14:33:0a:a8:3d:b0:75:6f:b2:be:72:2a:
e2:73:cc:9e:58:b7:cc:f2:69:1a:57:74:5a:b5:a9:7a:78:fc:
ae:88:cf:41:84:df:90:17:d5:35:2d:9e:cf:d4:1b:6c:55:5f:
42:15:58:c1:dd:2b:e3:42:b6:20:9c:90:b4:8b:4a:8e:70:ab:
1a:c4:c6:84:31:2a:2c:84:f9:5d:0d:7d:a2:f5:6d:17:4e:78:
95:6a:a6:19:ef:e9:4f:5d:07:57:76:b1:3b:ec:01:11:60:7f:
a1:cb:e5:7a:53:a6:6c:ff:43:fd:08:48:60:42:ab:cb:59:ab:
b7:20:19:49:d2:5c:10:c0:ac:6d:1e:1c:3c:0c:ef:fe:ea:e4:
83:65:af:34:56:24:47:98:32:cb:36:18:5b:9a:ad:22:c8:52:
fc:e5:97:06:95:54:1a:69:e7:3f:79:e0:fc:a1:b9:06:28:95:
bb:76:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 11:36:15 2025 by rpki-client