Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
File: 8wmyGYl7xcKttIcCrC2jDeVj08s.mft (raw, json)
Hash identifier: PqEuZSULKx6qVZ4oFjX1sTfmRAncY0v5MGJfSer3sqU=
Subject key identifier: 22:47:E0:17:DD:42:E8:ED:76:51:BE:4B:B6:25:69:65:4C:AB:89:5A
Authority key identifier: F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
Certificate issuer: /CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Certificate serial: 0197711A5FF396471FE9ADC4E438FFD290BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
Manifest number: 12C7
Signing time: Sun 15 Jun 2025 01:00:43 +0000
Manifest this update: Sun 15 Jun 2025 01:00:43 +0000
Manifest next update: Mon 16 Jun 2025 01:00:43 +0000
Files and hashes: 1: 8wmyGYl7xcKttIcCrC2jDeVj08s.crl (hash: iKn2sYqZs2XNlekUxIvMwXwTQ//oXzSkWcpIFix7P88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:5f:f3:96:47:1f:e9:ad:c4:e4:38:ff:d2:90:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f309b219897bc5c2adb48702ac2da30de563d3cb
Validity
Not Before: Jun 15 01:00:43 2025 GMT
Not After : Jun 16 01:00:43 2025 GMT
Subject: CN=2247e017dd42e8ed7651be4bb62569654cab895a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9e:d9:11:11:2c:ac:59:c9:af:83:b8:52:e6:
33:94:cc:cd:3b:c9:f4:06:14:ec:d5:e5:42:cf:96:
5c:1f:66:38:cb:7f:97:24:4b:29:cf:08:18:6b:68:
02:c0:57:99:c2:fa:ae:cf:2a:e3:03:c7:45:d7:43:
86:d9:14:e7:f0:05:f1:12:a9:24:f1:6f:d6:90:02:
d9:1e:07:25:38:bb:8f:5e:3e:42:3d:6f:bf:02:13:
94:b1:9b:c4:45:e5:5b:9a:73:3a:74:da:db:8a:cb:
3d:e8:58:6e:da:e6:e0:42:1d:16:1f:d5:d9:4b:ac:
55:49:89:f3:c4:58:9f:60:b0:d5:99:8a:fc:7f:aa:
fc:2d:0d:84:06:38:54:88:3f:8b:55:e5:97:cb:59:
1a:8b:ce:8b:3a:6c:7c:6a:5d:09:9e:d8:8b:ab:00:
d7:4d:56:8b:e4:14:c0:05:be:df:dd:ac:f5:56:f1:
57:44:42:bb:88:4a:0a:ee:3e:83:83:be:02:16:a9:
20:5a:42:11:ec:ca:b0:c5:a2:08:bb:ac:ec:44:88:
be:a3:10:49:3f:a1:ba:fe:58:92:8d:62:1d:66:95:
43:41:40:2e:16:32:d4:ec:a0:4f:70:35:92:a4:5e:
6d:21:bb:d7:c2:6a:5f:ee:39:f8:f5:2a:72:db:ef:
4e:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:47:E0:17:DD:42:E8:ED:76:51:BE:4B:B6:25:69:65:4C:AB:89:5A
X509v3 Authority Key Identifier:
keyid:F3:09:B2:19:89:7B:C5:C2:AD:B4:87:02:AC:2D:A3:0D:E5:63:D3:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8wmyGYl7xcKttIcCrC2jDeVj08s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/14c3db-d003-4836-88dc-80a39ba48875/1/8wmyGYl7xcKttIcCrC2jDeVj08s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:69:69:e0:5f:9f:91:1c:52:3a:f6:96:0e:df:94:a4:03:d9:
41:68:6f:d9:b9:85:66:8b:49:68:4b:5f:db:fe:e9:54:6d:64:
69:dd:e0:79:4d:9a:c8:b7:e5:a3:80:a8:5e:91:3c:24:6e:25:
01:68:5b:b7:fe:2c:46:6f:c0:c9:a8:a0:c7:83:da:27:85:9d:
e7:10:e4:6d:23:44:b1:70:3e:04:31:c4:30:64:0b:b5:71:52:
d2:0e:67:f9:18:d2:61:eb:49:4e:e6:5a:01:a5:8a:a1:a8:3f:
fc:5f:37:28:07:7e:7d:1f:2b:cf:06:4d:db:dc:9d:38:4a:58:
1a:14:51:ba:dd:bd:a3:7d:f1:b8:e3:4f:af:b1:f8:fd:dd:ed:
a9:1b:b0:da:10:bf:f4:9c:11:9f:8b:58:43:84:ca:d0:03:d3:
d8:c4:ff:b0:de:65:46:ed:a7:c4:d5:13:56:59:d9:58:14:40:
64:87:ce:5a:97:35:a2:1f:9b:21:a1:a4:71:30:75:ee:e1:ec:
db:6f:cf:d9:d9:74:bc:22:5b:4a:70:ad:6c:33:04:fc:da:2d:
72:6b:b9:f2:c8:b6:86:5d:fa:c1:e7:f6:e1:53:92:a5:4d:16:
b0:49:5a:11:1b:aa:49:30:83:81:5e:59:11:7a:1a:7b:2a:b6:
2f:6e:e8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:29:23 2025 by rpki-client