Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
File: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft (raw, json)
Hash identifier: lXSKnJEAGi7ZUu6lClsDNgWoWDsvVLGbLO0VzAvcjDE=
Subject key identifier: 81:43:4F:F2:85:68:39:2B:D8:0F:67:ED:42:E6:D5:E8:84:4D:F7:6E
Authority key identifier: F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
Certificate issuer: /CN=f2a8516704f57492835b94d007027328c22fa40e
Certificate serial: 019897EE30AB17DE3D15C3D49C8280058233
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
Manifest number: 10AB
Signing time: Mon 11 Aug 2025 07:00:26 +0000
Manifest this update: Mon 11 Aug 2025 07:00:26 +0000
Manifest next update: Tue 12 Aug 2025 07:00:26 +0000
Files and hashes: 1: 8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl (hash: BBt/LkZNLUlnwSp6UaGd5PKwTx6ZdxxKBBvjdG6UD+U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 12 Aug 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:97:ee:30:ab:17:de:3d:15:c3:d4:9c:82:80:05:82:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a8516704f57492835b94d007027328c22fa40e
Validity
Not Before: Aug 11 07:00:26 2025 GMT
Not After : Aug 12 07:00:26 2025 GMT
Subject: CN=81434ff28568392bd80f67ed42e6d5e8844df76e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:73:12:5c:e5:dc:11:82:90:91:c2:18:df:7d:
9f:b3:54:cd:1d:46:57:cd:e1:68:7a:5f:11:06:81:
63:be:61:e0:fd:a1:18:09:7f:3d:86:53:8e:d0:41:
b7:3a:9d:9c:31:0f:e1:43:0f:ee:47:56:7f:1c:8c:
f7:51:52:de:a8:71:6f:11:6a:b2:56:1e:ad:92:f4:
29:70:f4:78:a1:f6:c2:d5:14:46:7d:04:d1:02:63:
05:8c:63:38:12:9c:b8:22:42:ef:65:b5:9f:24:00:
20:8c:06:43:5a:2c:dd:f2:df:04:b3:bb:8d:5c:15:
3b:85:0d:f1:cf:79:23:e5:c9:90:f3:96:9b:6d:ad:
06:be:61:a9:9d:0d:40:63:40:3f:f2:7f:38:3c:b1:
50:76:62:28:d5:1f:8d:ac:89:ff:98:44:7f:0e:5b:
57:d6:bd:3f:85:98:65:27:ad:83:6a:69:e5:b7:37:
3f:0f:46:15:77:de:22:90:19:3e:5e:dc:bc:ee:8a:
fe:3e:1d:c9:e4:1a:36:70:22:3b:4a:11:36:c0:a0:
51:67:25:de:d0:7c:06:ac:3a:9d:bd:27:da:c3:5e:
7b:9a:f0:85:54:e3:b8:5f:8d:80:04:97:3a:67:ca:
64:a2:a8:ba:c7:68:1d:32:c2:4f:8a:04:2d:28:3f:
1d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:43:4F:F2:85:68:39:2B:D8:0F:67:ED:42:E6:D5:E8:84:4D:F7:6E
X509v3 Authority Key Identifier:
keyid:F2:A8:51:67:04:F5:74:92:83:5B:94:D0:07:02:73:28:C2:2F:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qhRZwT1dJKDW5TQBwJzKMIvpA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/247eb7-4bb0-4a1b-9589-7d4d941a37d1/1/8qhRZwT1dJKDW5TQBwJzKMIvpA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:1f:7d:bc:11:c1:6c:91:20:86:8f:cc:81:96:d4:58:7b:f7:
89:6d:21:32:05:67:16:72:00:93:92:7d:07:23:f9:e2:09:87:
16:d8:e9:5d:d8:87:84:d5:c7:ae:ef:ca:80:89:fb:f1:e8:0b:
6c:e7:f2:c3:48:31:12:0a:99:d6:d5:ca:15:d1:18:8a:ed:a9:
3d:3d:f0:97:4c:ce:10:65:5a:28:d9:12:2f:59:97:60:4e:e4:
c5:dd:52:53:d1:cf:20:88:d1:5f:f3:9a:fe:33:b3:fd:26:79:
9a:db:d3:e0:f8:5a:05:08:2c:f7:a7:a0:d3:bb:a2:26:92:c7:
95:9b:b1:46:ad:4b:4e:8d:86:dc:f5:2b:e8:ae:98:91:f8:9c:
51:fe:31:12:7c:0a:46:85:37:92:78:ec:1f:ba:67:34:7e:9a:
03:f6:81:c3:87:ae:4e:8b:65:21:65:43:06:74:68:98:a7:94:
03:d2:4f:3c:0c:f1:6f:ce:0a:86:46:19:b9:35:b4:2d:35:26:
20:40:e4:05:c1:6f:44:1d:6d:d9:2d:38:44:4c:54:79:2f:e4:
c5:90:a0:12:68:97:fa:dd:69:cc:d5:73:a7:17:66:19:42:47:
e7:38:df:1a:a3:ad:fa:b4:fa:35:3b:e6:29:90:70:b5:f1:d1:
80:21:61:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 11 10:30:31 2025 by rpki-client