Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
File: 8gRTIEA3KhoBrACJS58IvT_hreM.mft (raw, json)
Hash identifier: N9WcZTI4v13SluJSD5SzdjkxCSynX22BbWcPA2BXCZI=
Subject key identifier: C3:9A:2A:40:D9:84:6A:66:47:42:65:02:6E:D1:F6:5E:A2:5F:F8:DA
Authority key identifier: F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
Certificate issuer: /CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Certificate serial: 01976E8734F84F763F27895D659B48881946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
Manifest number: 2C
Signing time: Sat 14 Jun 2025 13:00:44 +0000
Manifest this update: Sat 14 Jun 2025 13:00:44 +0000
Manifest next update: Sun 15 Jun 2025 13:00:44 +0000
Files and hashes: 1: 8gRTIEA3KhoBrACJS58IvT_hreM.crl (hash: r7IY8ncGkSYQ8MsnjKX9ULMYKHfyX2n4867bnhcImiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:34:f8:4f:76:3f:27:89:5d:65:9b:48:88:19:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f204532040372a1a01ac00894b9f08bd3fe1ade3
Validity
Not Before: Jun 14 13:00:44 2025 GMT
Not After : Jun 15 13:00:44 2025 GMT
Subject: CN=c39a2a40d9846a66474265026ed1f65ea25ff8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:1f:da:72:a0:9c:69:96:68:ed:5b:16:83:ea:
93:c6:f8:27:80:d7:d5:2c:df:51:fe:1f:65:9f:e2:
ad:f9:9f:83:04:31:12:ed:2f:2f:47:4b:95:92:1a:
a1:3f:ab:94:29:da:95:18:b0:67:c2:f2:0f:5d:52:
a0:8b:08:d9:72:59:3f:c0:22:8e:50:54:96:64:8f:
de:d1:85:b0:89:85:80:46:ed:70:ba:33:b5:ad:aa:
a8:21:9c:c5:dd:33:d1:5c:e1:f6:02:31:72:e9:28:
8c:47:6f:92:3d:25:95:f5:06:f1:ea:79:df:11:bd:
dc:f9:08:13:63:43:ab:6c:27:88:4a:50:92:df:21:
4c:77:06:5d:a0:d2:73:61:01:dd:6f:2e:6e:63:a3:
83:7b:f5:81:69:df:17:3b:a3:d7:0e:d6:45:03:83:
b7:47:a8:f4:c6:bb:f0:7a:b9:ab:f1:52:ba:85:5d:
9e:8a:ef:2c:2d:ef:74:4b:c6:3e:f4:f5:de:cc:77:
c2:da:c8:92:e5:7d:1b:3a:30:cd:27:79:e6:72:d3:
aa:dc:32:0e:29:fd:cc:bf:6c:51:4d:50:79:a2:6e:
2b:3a:62:30:6f:25:7c:31:07:07:1c:b8:e0:e1:6f:
61:84:bc:7f:08:f1:0e:1a:78:42:57:11:e7:56:69:
68:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:9A:2A:40:D9:84:6A:66:47:42:65:02:6E:D1:F6:5E:A2:5F:F8:DA
X509v3 Authority Key Identifier:
keyid:F2:04:53:20:40:37:2A:1A:01:AC:00:89:4B:9F:08:BD:3F:E1:AD:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gRTIEA3KhoBrACJS58IvT_hreM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/47a265-3ebb-4105-bc43-34249e61a474/1/8gRTIEA3KhoBrACJS58IvT_hreM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
f1:35:1b:61:ae:d2:2b:f7:5c:5b:c7:db:56:1f:3c:b0:f4:84:
a5:32:8d:03:4b:fb:00:e3:23:eb:df:a4:fc:06:43:9e:c6:d2:
16:36:3d:11:6f:23:9f:0c:a4:81:f8:b6:97:7d:aa:87:ab:79:
d2:10:01:1b:b3:d1:34:29:88:e1:94:f8:66:95:93:d6:ee:ba:
ab:c0:e5:6c:0e:ea:1a:b2:36:ea:9a:a3:4b:8c:8d:38:9f:f3:
4a:80:3d:d2:f1:e4:89:3a:30:d7:b9:65:91:e9:b5:b1:ba:16:
e1:8c:3d:8e:7c:e6:b5:98:96:19:ad:ca:c0:06:8e:46:d7:50:
a4:16:87:f8:08:8a:de:7e:90:49:c5:fb:03:ba:bc:b6:4f:70:
85:f8:18:11:37:d5:a8:80:7e:24:a2:b4:96:38:f5:86:ca:e6:
ad:10:c4:b5:74:b8:2d:2c:eb:c2:e0:6a:d0:96:d7:13:73:5e:
0d:52:99:e6:df:6c:63:32:8a:fe:98:75:63:ca:a1:ca:ca:25:
77:35:5c:30:b7:30:f0:8a:2f:5e:69:ed:a4:f4:d7:7d:ff:50:
d9:87:c2:65:00:98:c2:8b:26:13:fe:23:da:a5:9c:f1:b5:46:
12:41:8d:f1:22:3b:21:35:f0:52:53:a2:56:50:c9:06:0f:a1:
e5:5c:80:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:06:18 2025 by rpki-client