Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
File: k8QjPQuo54YYoJpyVh3M0GSYyE4.mft (raw, json)
Hash identifier: HwaadcGmnWGT6horwGcqn0dkrP8A3s1XD2Nv2TU5kT4=
Subject key identifier: 84:C8:F3:12:E5:1D:0F:84:AF:1E:1D:22:3B:C2:C8:EA:9B:B0:81:96
Authority key identifier: 93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
Certificate issuer: /CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Certificate serial: 01976F2CC8C4158B036213219F42EE6A8890
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 16:01:35 +0000
Manifest this update: Sat 14 Jun 2025 16:01:35 +0000
Manifest next update: Sun 15 Jun 2025 16:01:35 +0000
Files and hashes: 1: k8QjPQuo54YYoJpyVh3M0GSYyE4.crl (hash: aLmNS0xBhEQHn3VtnYIoDyvl/u1VAZ3gtfvDnTi8oKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:c8:c4:15:8b:03:62:13:21:9f:42:ee:6a:88:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c4233d0ba8e78618a09a72561dccd06498c84e
Validity
Not Before: Jun 14 16:01:35 2025 GMT
Not After : Jun 15 16:01:35 2025 GMT
Subject: CN=84c8f312e51d0f84af1e1d223bc2c8ea9bb08196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:38:90:ef:0a:e8:98:80:83:c1:03:4a:cb:8d:
1a:31:fe:b9:5f:8e:2d:f4:6f:dd:f2:50:bf:fb:f0:
03:46:b1:b8:95:d4:1a:05:8e:e3:86:4b:9a:b5:e1:
74:22:92:d1:fd:76:62:97:71:45:6c:d2:d4:f9:40:
96:61:bd:70:5c:03:0b:50:ca:23:a4:41:6c:5b:19:
2a:5d:94:0b:c9:86:8c:0f:36:26:2d:fb:28:a6:bf:
0b:fc:40:c3:50:55:87:52:45:6a:22:ee:f5:06:36:
c2:dc:26:43:15:66:dc:63:fe:b1:44:11:ee:fc:21:
d7:1a:9d:67:98:55:1a:fb:21:f6:1c:3b:15:bf:92:
1f:ef:96:e0:13:ef:f9:fe:93:0c:44:a6:ad:3d:a0:
8e:43:8f:d1:30:38:4a:ca:59:91:5a:21:a8:9e:45:
f6:67:a3:88:4f:ca:c8:07:0e:27:6d:f0:3d:83:a4:
a1:60:95:2c:75:03:93:cc:4c:a4:b5:93:2a:3c:4e:
43:55:8f:98:8a:db:49:da:a6:5b:64:85:2c:97:cd:
75:17:54:6f:97:69:83:09:c2:bf:b7:82:95:97:8c:
ca:9c:9f:63:1a:87:b8:61:f1:ba:4a:a1:22:21:1f:
f9:6b:a6:3b:67:6d:bf:85:9d:60:19:88:a3:d8:7f:
18:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C8:F3:12:E5:1D:0F:84:AF:1E:1D:22:3B:C2:C8:EA:9B:B0:81:96
X509v3 Authority Key Identifier:
keyid:93:C4:23:3D:0B:A8:E7:86:18:A0:9A:72:56:1D:CC:D0:64:98:C8:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8QjPQuo54YYoJpyVh3M0GSYyE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/5f757b-4f22-43db-9da9-2496116e415d/1/k8QjPQuo54YYoJpyVh3M0GSYyE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8e:78:3a:de:e4:85:31:a9:52:07:70:b9:37:c0:6e:49:02:
c6:18:06:15:74:87:6a:64:e2:c0:da:af:a0:69:af:73:fb:68:
34:87:3d:7e:47:ba:62:65:e7:f5:47:58:67:a5:51:c7:ed:d9:
78:20:02:28:76:ef:a2:2f:f7:03:fe:32:3a:d3:52:2e:d6:7f:
4b:f2:fa:80:25:d2:f2:96:c5:14:b2:dd:ae:4e:24:83:10:b1:
42:0c:11:b5:88:3d:3c:d9:64:36:8a:74:54:62:09:43:15:f1:
f2:ca:c0:e1:5f:98:ac:f8:79:d3:b5:d7:0b:bb:b4:b7:4e:c8:
2d:a4:a5:a1:f0:d5:fb:38:ab:28:23:cd:5b:12:56:6b:08:20:
ac:27:63:1e:d8:2e:ec:ca:20:08:25:98:22:7d:c7:f0:52:b8:
1c:61:05:27:7c:1e:12:80:1f:4e:ba:6f:99:4d:07:36:4d:ba:
5a:16:b4:36:0b:a8:d5:52:ff:3d:37:9e:74:9c:a2:0c:82:35:
d3:a3:9d:57:2d:5b:e0:d0:91:86:21:65:51:46:23:c1:1d:1c:
41:ca:11:9b:af:fe:83:06:93:5f:12:51:66:af:41:b3:9a:84:
52:fb:89:db:17:93:ab:cb:79:99:68:5c:61:5b:75:c0:25:b8:
c7:26:ce:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:05 2025 by rpki-client