Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
File: 8hFTAR3kWGrYqAOIfufSsArv1hs.mft (raw, json)
Hash identifier: o8NO7/Ek1OFp0XLq53F7qKVDyDYeztmYEMbC/CwWc1Q=
Subject key identifier: 3E:1C:BA:E1:86:EB:DF:5F:61:FA:F2:2C:FF:C3:F4:80:4E:34:7B:A7
Authority key identifier: F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
Certificate issuer: /CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Certificate serial: 01976F9A44AE62B16DA7519CB8255FDF4B70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
Manifest number: 03E7
Signing time: Sat 14 Jun 2025 18:01:10 +0000
Manifest this update: Sat 14 Jun 2025 18:01:10 +0000
Manifest next update: Sun 15 Jun 2025 18:01:10 +0000
Files and hashes: 1: 8hFTAR3kWGrYqAOIfufSsArv1hs.crl (hash: GCYT/3nG91+/zUeppQYr5KvLjmoyMcwQRiU5eccwZgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:44:ae:62:b1:6d:a7:51:9c:b8:25:5f:df:4b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f21153011de4586ad8a803887ee7d2b00aefd61b
Validity
Not Before: Jun 14 18:01:10 2025 GMT
Not After : Jun 15 18:01:10 2025 GMT
Subject: CN=3e1cbae186ebdf5f61faf22cffc3f4804e347ba7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b6:bd:8d:e1:f2:be:52:40:8a:d1:fb:a3:df:
d8:0e:0e:7d:e7:9f:7f:af:4d:74:de:21:64:75:95:
5e:4d:38:ae:13:52:57:b5:63:dc:5b:85:be:6c:85:
56:70:a4:e0:db:1f:7a:a4:f1:46:f0:4c:c3:7a:83:
ed:36:73:25:35:3d:96:fc:3e:f4:91:41:ef:36:99:
11:12:c7:85:a2:b8:2c:71:a5:88:38:8c:90:50:bb:
a9:cc:c4:c2:88:d5:e6:97:b9:a2:49:c0:af:88:68:
97:d9:eb:20:e5:ac:7f:cc:59:b4:79:50:00:ae:39:
d3:c5:81:f7:e1:c3:38:cb:9c:d9:79:44:5d:d4:9c:
fd:a3:9d:72:2a:e5:28:f6:6c:be:83:f1:05:37:a0:
cc:5a:84:22:28:05:11:32:6d:f2:de:33:e3:7a:9b:
e8:82:e5:70:43:7a:93:70:16:98:12:1f:de:a3:f1:
c8:c5:09:5e:48:d1:0d:9f:fd:33:ff:ec:e7:3c:6a:
42:21:56:d9:59:90:c9:9a:ee:56:35:61:48:e1:45:
f4:fe:79:d9:ff:11:d5:17:5b:5e:1f:c2:ad:8f:b7:
5a:0c:78:38:86:2d:43:36:7b:5e:de:40:c2:31:f2:
eb:44:2f:d8:dd:d3:7f:bb:7a:70:9c:f5:df:04:40:
d8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:1C:BA:E1:86:EB:DF:5F:61:FA:F2:2C:FF:C3:F4:80:4E:34:7B:A7
X509v3 Authority Key Identifier:
keyid:F2:11:53:01:1D:E4:58:6A:D8:A8:03:88:7E:E7:D2:B0:0A:EF:D6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hFTAR3kWGrYqAOIfufSsArv1hs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/988181-1d19-42e2-8dc7-2825370c95fe/1/8hFTAR3kWGrYqAOIfufSsArv1hs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:1f:15:75:13:58:27:d2:a8:6b:ef:9e:bc:01:cf:d4:29:ce:
14:05:39:65:c2:d4:59:0b:fb:4f:62:df:79:c5:fe:9e:7d:21:
20:64:a7:c0:e7:87:e1:cd:ec:ba:8a:0a:6d:94:04:36:35:3e:
b9:a0:ee:ec:55:a7:0a:81:44:e7:7e:54:57:73:d2:74:b7:ef:
d1:23:2e:ba:3f:8b:1f:07:b1:c9:0c:ad:9b:40:2b:f1:26:0b:
f6:c9:c6:71:b1:ed:b0:a4:52:22:06:e9:6a:e7:f2:4c:72:17:
c0:66:ab:8b:8a:6c:9c:a1:42:5a:5e:8d:6b:c2:bb:3e:02:5d:
d7:d7:a7:45:40:cc:10:62:dd:95:be:37:40:db:27:c5:25:e7:
01:d2:6e:ca:55:b0:23:2e:7e:9d:88:0d:4c:22:de:a6:50:5e:
f1:27:5f:3a:63:2a:9b:68:a9:5d:a3:e3:d8:56:24:20:05:12:
9a:92:cb:d1:1c:28:3a:0b:48:ea:0d:b5:6d:10:13:4f:1d:76:
2a:55:99:67:fc:c3:8f:4c:fe:fc:b3:32:bc:51:20:2a:d6:b7:
b5:a3:65:11:36:b2:8e:69:88:4f:0c:6c:84:5c:69:1c:6a:4d:
79:f7:1c:5f:2a:28:51:ea:c7:d1:fa:8e:43:24:e4:24:30:85:
c2:77:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:24:38 2025 by rpki-client