Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
File: 8JLOTWiFNFSE6Zp312Fm_HICIDM.mft (raw, json)
Hash identifier: RAqaBBrc8MSOKkiHhh1hHn3XSX0GE0c3YgnDpCJ+9VY=
Subject key identifier: 6F:7B:E3:24:3A:3D:EA:BC:9D:86:B7:F1:2F:DF:22:0E:F6:67:55:30
Authority key identifier: F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
Certificate issuer: /CN=f092ce4d6885345484e99a77d76166fc72022033
Certificate serial: 01988FC72114101F39D568C4C41622442C20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
Manifest number: 1624
Signing time: Sat 09 Aug 2025 17:00:48 +0000
Manifest this update: Sat 09 Aug 2025 17:00:48 +0000
Manifest next update: Sun 10 Aug 2025 17:00:48 +0000
Files and hashes: 1: 8JLOTWiFNFSE6Zp312Fm_HICIDM.crl (hash: TIbVIbGBw3HQhHb5a0ckUVM3giDmXQcHyeMWtymNz3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:c7:21:14:10:1f:39:d5:68:c4:c4:16:22:44:2c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f092ce4d6885345484e99a77d76166fc72022033
Validity
Not Before: Aug 9 17:00:48 2025 GMT
Not After : Aug 10 17:00:48 2025 GMT
Subject: CN=6f7be3243a3deabc9d86b7f12fdf220ef6675530
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:e3:8d:fc:2d:ec:10:16:c1:fc:c3:22:e9:42:
cb:81:4b:4d:40:47:7b:90:df:d8:55:11:71:dd:bc:
e8:db:64:4a:b9:ef:83:0a:4b:b9:8e:57:0d:a7:4c:
91:b9:03:0a:38:1b:56:0c:cb:91:8e:9c:65:82:41:
cd:33:e3:3a:08:bc:f3:ca:be:d1:dc:2b:1b:57:22:
d7:74:fd:18:47:db:a1:ad:2e:12:6c:4a:b3:73:ed:
1b:92:00:4f:2a:35:84:1b:0e:ce:28:82:65:95:73:
9d:f5:9a:72:2e:d6:a3:b1:1a:eb:85:9d:bd:93:26:
87:9a:c3:84:69:dc:b3:e5:07:cb:5f:dd:41:3f:43:
88:01:52:2c:2b:53:0f:6a:8f:b4:2c:2a:d2:7a:9c:
13:e3:b8:49:a2:56:e0:ae:a8:bb:43:20:9f:c3:f7:
e3:e9:fd:c0:c9:03:63:7c:31:b3:50:88:91:61:6b:
07:52:e6:78:f3:f5:d5:01:01:67:19:76:ec:18:20:
a5:4a:b7:d8:8a:88:01:36:f6:e4:f9:ae:1f:48:6e:
c6:1c:80:32:ce:a8:3a:e3:f4:0e:1d:62:13:4d:6a:
fc:e3:e8:3a:0c:c9:95:30:4d:de:bd:71:18:87:12:
87:85:41:7d:16:25:8c:89:9d:fb:e7:31:f7:98:65:
06:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7B:E3:24:3A:3D:EA:BC:9D:86:B7:F1:2F:DF:22:0E:F6:67:55:30
X509v3 Authority Key Identifier:
keyid:F0:92:CE:4D:68:85:34:54:84:E9:9A:77:D7:61:66:FC:72:02:20:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8JLOTWiFNFSE6Zp312Fm_HICIDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d02218-5df9-43fd-beec-031596112480/1/8JLOTWiFNFSE6Zp312Fm_HICIDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:97:b0:4b:dd:63:99:19:26:cc:90:7f:18:94:05:08:5f:7b:
01:b3:99:82:8e:d3:b7:31:d7:ca:c0:5f:e2:01:51:ed:26:09:
4a:cc:7d:d8:6c:1c:c5:55:f1:b0:00:a9:d0:1c:61:5a:bd:b1:
70:c6:39:5c:12:81:f8:63:5d:b9:39:5e:61:37:12:7e:0f:1f:
87:7c:ce:d4:c0:c6:59:8c:37:93:6d:82:5b:f9:f7:d4:4a:b3:
1c:fc:b2:73:19:52:89:3e:c7:0b:e5:07:ee:c6:48:40:26:64:
b1:3d:1c:df:8c:7b:f4:e0:6f:08:b9:2a:f0:f6:6a:c0:39:f8:
0f:79:5f:d7:47:7c:01:67:93:81:48:52:1f:e3:57:89:74:2c:
8b:4f:57:95:e4:c7:70:dc:73:d0:2f:65:df:ca:95:2c:35:32:
34:1b:47:18:8b:e7:e8:fe:47:d2:81:4e:a1:c6:d3:a6:6a:d3:
13:f8:48:5e:d7:57:78:26:23:2f:76:2e:1a:6a:75:b3:b6:10:
e0:d9:43:0d:f5:be:3d:b2:1c:72:d6:66:65:27:d7:6d:9f:07:
79:b2:e6:9b:e8:75:c4:b0:d7:09:f2:95:ce:39:be:e8:22:66:
70:1c:a5:b5:72:82:c1:6f:d2:ab:27:6b:43:62:d1:63:38:34:
6c:40:a3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 20:44:17 2025 by rpki-client