Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
File: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft (raw, json)
Hash identifier: ufORzHY7Tu5d9zPJGQTWWF26oJWRt81NQb4BK41Ig6M=
Subject key identifier: 2A:8B:F5:9D:CA:C9:FF:B0:F1:23:17:61:A6:05:9C:4C:42:0B:47:E7
Authority key identifier: F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
Certificate issuer: /CN=f0ac0ce700b17d499e898ec7a14730405157c478
Certificate serial: 01976C990612534D82F90A97AE6179E77942
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 04:00:57 +0000
Manifest this update: Sat 14 Jun 2025 04:00:57 +0000
Manifest next update: Sun 15 Jun 2025 04:00:57 +0000
Files and hashes: 1: 8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl (hash: 98sTnA0htz40FKwewwAeaRB++h2qLODTle7Qx50+YiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:06:12:53:4d:82:f9:0a:97:ae:61:79:e7:79:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ac0ce700b17d499e898ec7a14730405157c478
Validity
Not Before: Jun 14 04:00:57 2025 GMT
Not After : Jun 15 04:00:57 2025 GMT
Subject: CN=2a8bf59dcac9ffb0f1231761a6059c4c420b47e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:be:00:c3:9a:7d:57:4e:42:1e:dd:4a:fe:5e:
d8:84:3c:df:f6:9c:30:a5:b8:06:10:da:83:48:29:
23:7b:22:2a:52:2b:eb:21:d2:7c:26:f3:6e:e5:8d:
cb:86:1f:1e:b1:b4:cb:c1:0e:1a:1f:5a:05:91:22:
e4:d0:8c:e8:4c:af:db:2e:a2:00:e2:c1:0d:9b:fc:
24:7e:49:23:9c:45:ae:3e:46:df:b1:77:c9:71:7f:
97:9f:c7:30:d7:8e:45:0f:ec:2b:d4:e9:7d:c8:51:
8e:77:14:17:7b:31:c6:0e:79:bc:be:1c:58:c8:5f:
0d:78:64:16:1e:53:bd:51:f4:68:88:af:8f:95:87:
c2:c6:a9:1d:85:e3:8d:d2:c9:c2:23:17:c7:04:d4:
c4:c2:64:13:84:9d:c1:99:74:b9:c5:5f:08:87:90:
fe:58:5d:11:ee:bf:e6:db:7e:21:82:41:fc:a6:aa:
f5:bd:9b:e2:42:10:03:f8:66:72:9d:27:ff:ac:c2:
1e:eb:60:f6:c3:0b:0d:aa:a2:0a:cf:d9:d2:61:4e:
ca:dd:86:55:0d:a2:ea:58:64:fb:1a:2b:0a:04:e1:
80:0c:86:d9:9a:b5:4a:ef:65:ca:da:97:fb:97:da:
ce:39:50:ba:a1:0e:9f:9f:6f:0a:de:cb:5f:e3:4a:
00:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:8B:F5:9D:CA:C9:FF:B0:F1:23:17:61:A6:05:9C:4C:42:0B:47:E7
X509v3 Authority Key Identifier:
keyid:F0:AC:0C:E7:00:B1:7D:49:9E:89:8E:C7:A1:47:30:40:51:57:C4:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8KwM5wCxfUmeiY7HoUcwQFFXxHg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/8fb2a6-cae5-4f39-a858-7e46cc3701b9/1/8KwM5wCxfUmeiY7HoUcwQFFXxHg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:ed:87:35:5c:09:4d:cb:66:9b:1b:d2:ac:d3:9d:39:37:09:
5c:7e:97:1f:a3:60:22:88:a0:ec:fe:0b:03:c5:94:a0:cd:20:
5e:2c:50:04:a5:39:c9:8f:fc:32:f0:df:f2:ce:a1:ec:4b:06:
6d:76:33:9b:57:f5:35:c5:a7:9e:31:a6:d8:20:be:41:44:ed:
fd:d9:57:2d:86:2c:ec:7d:8c:95:72:ff:33:90:9b:7a:11:36:
8b:a7:63:af:36:e9:40:9f:24:6b:94:b9:40:f4:4f:0a:4f:6b:
b2:c1:cb:5c:3c:c7:c4:6a:05:c8:e5:3b:f8:ee:ea:99:3e:6f:
9e:8f:ab:f5:3a:68:98:38:12:b2:7d:1e:93:4f:90:7a:23:b4:
06:da:7b:c6:e6:40:a3:c2:b1:0c:c4:85:87:c5:f8:6b:e7:68:
50:ef:82:95:0b:c0:e1:96:f3:42:e8:c0:37:2f:de:d3:23:eb:
db:05:42:24:07:01:73:ba:53:39:70:d5:c5:69:20:e2:10:7c:
37:ad:d0:28:ad:5e:ec:62:f8:f4:3a:3f:2e:d1:8c:14:12:62:
3c:b5:87:ea:81:52:40:03:ca:b6:34:04:46:7e:45:fd:bd:f6:
ab:b3:0b:e1:a1:77:ce:dc:19:b1:16:0d:ea:1b:98:4e:d1:00:
fa:a9:ca:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:14:44 2025 by rpki-client