Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
File: I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft (raw, json)
Hash identifier: eE173HupcZHublh/l0J9+1gUU6XMReQ0N56RgAjG7CE=
Subject key identifier: 67:E3:B0:1A:33:15:9E:52:D3:D2:99:2B:E7:8E:87:A7:F9:80:EA:EC
Authority key identifier: 23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
Certificate issuer: /CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Certificate serial: 0197715161BB0830D80F95BA1E47B164017E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
Manifest number: 158C
Signing time: Sun 15 Jun 2025 02:00:48 +0000
Manifest this update: Sun 15 Jun 2025 02:00:48 +0000
Manifest next update: Mon 16 Jun 2025 02:00:48 +0000
Files and hashes: 1: I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl (hash: 8GXlrzHlY4GVyo8N4yWrC6j0Dy1/a7T8DWyUzdX5x8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:61:bb:08:30:d8:0f:95:ba:1e:47:b1:64:01:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23cff646adc19c03f6417a6e2a1c4183c6b8d3fe
Validity
Not Before: Jun 15 02:00:48 2025 GMT
Not After : Jun 16 02:00:48 2025 GMT
Subject: CN=67e3b01a33159e52d3d2992be78e87a7f980eaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:d6:ea:8a:3b:dd:4c:0d:9a:a6:c0:6b:ab:b9:
79:a4:de:f9:bf:80:64:c3:7a:65:52:5e:61:37:ba:
f1:cb:09:c2:3a:6e:4b:68:00:b0:14:db:55:bf:46:
6a:af:c2:6f:ec:c8:3e:f1:43:91:54:18:5a:5f:b9:
7e:9b:b6:75:14:42:97:7f:1a:37:6c:d1:d6:ca:c0:
5d:dd:6a:c4:74:16:42:50:29:a0:e1:be:8d:f6:86:
5b:04:81:3d:81:95:92:a7:2c:14:20:21:a4:6e:0f:
97:e9:07:f7:a3:ea:cb:10:e2:b4:a8:b5:0a:fe:32:
41:02:1d:55:63:13:0b:20:9a:2b:24:d3:08:7b:bc:
29:9e:6d:0f:13:c1:3f:e2:01:27:8c:d9:32:5f:94:
5a:89:c3:61:8d:38:ec:27:61:f3:6f:50:2e:b0:10:
3b:e6:09:39:34:d4:d7:e3:76:29:6b:c8:9b:65:b4:
dd:e2:9a:4c:b4:f5:fd:73:4d:de:59:42:b1:51:a2:
d1:90:36:e1:f2:db:bc:18:43:dd:1d:ba:94:0b:d8:
f9:ca:7e:c7:b6:97:4f:25:86:9f:30:0a:22:b1:9e:
14:59:49:97:88:30:5f:8c:94:85:7d:53:14:2c:46:
63:15:ec:ae:35:8b:ed:cd:13:1d:2d:d3:54:03:5d:
21:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:E3:B0:1A:33:15:9E:52:D3:D2:99:2B:E7:8E:87:A7:F9:80:EA:EC
X509v3 Authority Key Identifier:
keyid:23:CF:F6:46:AD:C1:9C:03:F6:41:7A:6E:2A:1C:41:83:C6:B8:D3:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8_2Rq3BnAP2QXpuKhxBg8a40_4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/c41378-dbdf-4cb3-96ee-0238c910a9bf/1/I8_2Rq3BnAP2QXpuKhxBg8a40_4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:3d:8e:5f:12:0b:69:26:02:5c:d0:25:99:a1:5e:1c:01:ed:
66:9a:c9:a3:04:ab:df:30:f1:ef:07:b3:0a:79:e4:d4:17:28:
9c:fc:b7:4c:4d:1b:77:be:a6:d6:84:d9:74:07:c3:ab:37:cd:
55:fe:3a:67:6b:b8:e8:a1:f9:8b:07:4c:fc:f8:ce:40:9d:12:
35:48:dd:67:8e:a9:1c:49:aa:2b:c5:25:d2:8d:fa:51:9e:b2:
c1:ef:bf:16:e0:6f:35:8d:f2:36:cb:27:c7:37:5b:d7:16:c6:
7c:f1:2a:5c:40:f4:40:37:36:d0:38:66:5b:11:26:71:dd:c1:
45:2b:f8:2c:94:4c:47:f2:89:58:6e:49:d9:5c:36:e3:af:2e:
d4:b4:d9:4b:e8:bc:d5:95:c8:0f:68:66:59:44:b5:cc:54:27:
ca:10:63:81:2d:90:7c:56:1b:38:33:e1:4a:61:9a:b2:ed:45:
cc:53:f6:b3:30:79:63:98:02:71:cb:98:45:d8:86:9c:36:13:
f7:7f:97:ec:80:e9:db:f4:9e:a0:ec:97:0c:43:4d:14:53:7b:
02:5c:8c:ec:b3:36:15:80:b1:b5:94:48:64:8d:91:4d:29:cf:
b9:60:eb:2f:89:74:ad:e5:e2:b7:ca:74:09:a0:c6:2f:8a:57:
8d:c0:a3:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 04:02:21 2025 by rpki-client