Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
File: _z8mtUHwu6ilznHqU4EbRsFlerM.mft (raw, json)
Hash identifier: U+D0D3pnkQaVmjroKXx5nt9BwO8HmHxP5cP3/FOMb34=
Subject key identifier: 88:45:9C:CB:25:3F:46:B0:E6:0E:45:14:66:F6:F0:9C:E1:35:5A:AA
Authority key identifier: FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
Certificate issuer: /CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Certificate serial: 0197718858CA605B70CD6768F29AC960ED81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
Manifest number: 158E
Signing time: Sun 15 Jun 2025 03:00:50 +0000
Manifest this update: Sun 15 Jun 2025 03:00:50 +0000
Manifest next update: Mon 16 Jun 2025 03:00:50 +0000
Files and hashes: 1: _z8mtUHwu6ilznHqU4EbRsFlerM.crl (hash: MQJorFwIkIYYsuEY8St26crNtpfdEUDNcuLwPwpeTLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 03:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:88:58:ca:60:5b:70:cd:67:68:f2:9a:c9:60:ed:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff3f26b541f0bba8a5ce71ea53811b46c1657ab3
Validity
Not Before: Jun 15 03:00:50 2025 GMT
Not After : Jun 16 03:00:50 2025 GMT
Subject: CN=88459ccb253f46b0e60e451466f6f09ce1355aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:44:b5:d0:89:af:25:a0:ae:c5:4c:77:b9:92:
fc:b8:15:8a:86:d6:ec:69:f6:40:b6:19:ba:ac:40:
49:c1:1e:c3:1d:a5:aa:f5:ec:e8:cf:5c:65:ad:12:
56:9f:ae:d5:77:4c:fc:70:90:f4:d5:e7:36:22:58:
0a:5b:9d:98:df:67:5f:3c:88:b3:3d:ad:f0:51:e4:
58:0a:db:03:eb:2a:4f:e7:7f:26:ac:b0:a2:2e:85:
61:37:f0:df:c3:d5:13:33:3b:be:8e:b5:94:d4:cd:
5b:80:04:f3:8a:df:7e:d3:ac:f9:6d:e1:62:b9:3d:
47:5c:a7:89:38:4d:69:59:d9:90:93:08:8a:38:0b:
aa:a4:07:90:63:44:d4:f9:92:be:26:b9:e2:c2:64:
14:c1:50:5c:69:9e:be:87:59:7d:e4:20:c4:e9:bc:
c2:3a:b9:b1:e1:c9:ca:1f:e0:49:7b:c0:aa:de:f8:
0c:6a:c0:32:76:df:00:6c:cf:20:46:85:e1:9c:3d:
56:4c:7b:0b:ff:9e:38:d7:6f:bc:0a:19:d6:d4:16:
96:45:95:cf:9b:a5:41:c6:5f:c9:67:51:21:32:99:
98:86:cb:09:0c:93:9c:f0:cb:49:0a:d1:02:d0:da:
7b:9c:45:0b:25:14:13:6d:51:1f:f2:57:be:40:e8:
d7:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:45:9C:CB:25:3F:46:B0:E6:0E:45:14:66:F6:F0:9C:E1:35:5A:AA
X509v3 Authority Key Identifier:
keyid:FF:3F:26:B5:41:F0:BB:A8:A5:CE:71:EA:53:81:1B:46:C1:65:7A:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_z8mtUHwu6ilznHqU4EbRsFlerM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/a48ab2-d523-40f3-96bf-1c260b1e28d1/1/_z8mtUHwu6ilznHqU4EbRsFlerM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:ff:1c:40:b1:b6:b8:be:09:10:fd:29:7e:44:c7:e0:9a:e0:
9e:a7:0f:84:94:06:91:9d:1c:ec:0b:d8:63:19:f5:9c:ed:0d:
d7:b0:64:48:8f:af:2e:dc:ad:d9:f5:f1:ac:42:ea:91:16:03:
9e:fe:0e:26:68:57:48:b2:e8:81:a9:55:f7:7a:2f:61:4c:0d:
49:10:6b:3b:e2:c7:3a:34:e9:a7:93:cd:0b:30:af:12:b1:5b:
cc:65:e9:b8:9c:e6:6d:4e:c5:ca:06:8c:c3:b4:a4:17:42:ca:
d9:40:8b:c6:74:eb:98:c2:62:b8:fb:90:24:f8:df:f9:0a:81:
be:a0:3e:80:00:8e:cf:28:61:a8:94:f2:d6:aa:a2:02:e8:c1:
06:d9:e3:cf:81:f5:b2:ac:a4:a2:d7:04:fa:80:16:21:01:0e:
b0:bf:99:ca:d3:55:c1:a1:90:7a:65:4c:78:87:03:f6:42:86:
b3:f9:b7:1f:af:f5:6f:79:76:30:a0:41:cb:c7:28:fc:a2:9c:
fb:6e:e2:44:fa:c3:f6:b7:47:0f:11:eb:f3:3d:75:fb:1f:4e:
ab:08:36:4b:6a:2b:f6:71:e3:e8:c1:b0:b5:5a:2c:1d:5a:09:
92:26:e7:40:96:48:19:63:91:78:d2:bd:08:d4:fd:e4:56:b2:
d7:10:1a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:03:41 2025 by rpki-client