Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
File: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft (raw, json)
Hash identifier: CHf/bdRFP/WF6S0So7FWyzcaf2pck/hcXHlRNlY16bI=
Subject key identifier: 5C:05:D1:9C:C3:78:83:88:4A:68:A5:1D:B9:53:55:0E:50:9D:D2:33
Authority key identifier: F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
Certificate issuer: /CN=f25551c7047b3bf9031808c21b8379b9b860c426
Certificate serial: 019873E1F0A730D36A351466AE94E893D658
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
Manifest number: 0128
Signing time: Mon 04 Aug 2025 07:00:43 +0000
Manifest this update: Mon 04 Aug 2025 07:00:43 +0000
Manifest next update: Tue 05 Aug 2025 07:00:43 +0000
Files and hashes: 1: 8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl (hash: Yqo2btJ1SzAeiK+fPsfWkO7P7Fx5Iju5y9uK703h+50=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e1:f0:a7:30:d3:6a:35:14:66:ae:94:e8:93:d6:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25551c7047b3bf9031808c21b8379b9b860c426
Validity
Not Before: Aug 4 07:00:43 2025 GMT
Not After : Aug 5 07:00:43 2025 GMT
Subject: CN=5c05d19cc37883884a68a51db953550e509dd233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:61:c6:bc:04:a4:2e:35:e6:17:58:b5:34:2c:
16:4b:b3:a6:98:60:b5:2e:9e:a7:65:a2:c5:50:3e:
9d:3f:50:07:a7:78:f0:5a:11:76:4a:19:92:05:ce:
18:0a:25:40:41:c3:05:16:a5:ce:c6:00:32:b9:cc:
16:48:02:71:ed:ef:4d:fd:8f:e5:53:65:82:ab:9a:
7f:90:d1:18:99:ce:9f:7d:43:12:8f:68:21:e9:b2:
0b:eb:d6:8c:17:e8:f9:43:0a:1a:54:4c:d5:c5:d3:
83:0c:1e:60:4f:a9:95:fa:ce:29:a8:0c:02:6d:b3:
d9:42:46:4a:c8:24:e4:7d:11:b5:67:78:29:50:24:
98:f3:43:14:c4:45:03:f3:dd:03:dd:07:1b:30:6b:
84:4f:10:92:18:7a:e2:9b:11:e9:1a:41:ad:3c:f2:
72:5b:1b:62:a1:8b:8c:84:01:e4:bb:e0:0e:7a:c9:
07:4f:22:e6:af:15:d4:2a:e4:af:03:68:df:b0:b8:
bf:0f:63:bf:54:80:6d:8f:e2:af:c5:ff:25:89:ba:
0c:d2:4d:2d:b3:d8:ae:dd:b5:4c:91:2f:98:c3:48:
68:a5:c6:bd:6b:97:9c:2c:70:7b:77:cd:3a:2f:c5:
5d:3e:f1:92:0d:3c:6e:f4:83:cb:62:35:9d:f8:ff:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:05:D1:9C:C3:78:83:88:4A:68:A5:1D:B9:53:55:0E:50:9D:D2:33
X509v3 Authority Key Identifier:
keyid:F2:55:51:C7:04:7B:3B:F9:03:18:08:C2:1B:83:79:B9:B8:60:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lVRxwR7O_kDGAjCG4N5ubhgxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1525e8-492b-4ea4-9212-75554dd44b6d/1/8lVRxwR7O_kDGAjCG4N5ubhgxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:d5:43:6b:d8:c3:bd:60:57:b4:a4:88:ae:f6:06:d7:31:b3:
d5:3d:46:11:cb:8a:44:30:fc:cf:a6:b7:c2:4f:a3:0f:71:4d:
ec:a8:bf:18:3e:39:12:76:cd:cb:5d:6e:cc:98:5d:0f:d8:0a:
30:81:ca:0c:5c:98:86:70:5c:b0:5a:ba:b5:97:e7:e1:fc:ad:
59:7c:af:e2:68:dc:17:cb:c5:c6:a9:e2:06:4e:a7:53:bf:f7:
75:ae:0f:4c:71:18:53:1e:83:e0:3b:cc:9d:c9:82:62:d7:b8:
51:0e:c1:e8:47:8f:ce:70:db:80:b6:85:2f:bf:d3:59:14:c2:
f3:21:9e:1e:44:0a:69:39:5e:fc:93:bc:e4:65:a8:75:68:7f:
98:13:5c:d4:e4:b2:0d:b2:bc:31:9c:73:cc:cd:89:f3:6f:26:
d7:d3:87:1b:68:a2:ab:95:59:3a:18:ce:d2:69:f9:f1:05:d1:
9d:c6:a3:55:c2:c0:48:bc:c8:05:e1:2a:a4:55:08:0d:6d:00:
3b:49:1b:5d:e4:8a:d4:17:b5:f9:43:92:b2:55:7c:e3:55:d0:
77:8e:64:35:60:3b:ee:c8:71:77:42:65:49:44:8a:12:0a:0d:
44:82:8b:5f:2b:e7:ff:2c:2b:6b:67:47:19:ae:27:19:68:ba:
ef:ad:8c:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:37 2025 by rpki-client