Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
File: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft (raw, json)
Hash identifier: 3Xmz1l0del7Di9W/+cnrhqYYtq7gHxC46bE4fSC0xSI=
Subject key identifier: C2:BC:5F:5D:0E:7E:A8:D7:65:3E:75:83:BA:C5:8E:D1:56:74:5F:AD
Authority key identifier: F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
Certificate issuer: /CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Certificate serial: 019873E2C4AB43EE8735CBDB350B9AE7D179
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
Manifest number: 1615
Signing time: Mon 04 Aug 2025 07:01:37 +0000
Manifest this update: Mon 04 Aug 2025 07:01:37 +0000
Manifest next update: Tue 05 Aug 2025 07:01:37 +0000
Files and hashes: 1: 8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl (hash: cdPxOZklX1w6Y6HHceNuS02GlMi/lELKu+fK794KR7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:c4:ab:43:ee:87:35:cb:db:35:0b:9a:e7:d1:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261fa1fe6dc09fa54d1af59c2e100cd1412c7f0
Validity
Not Before: Aug 4 07:01:37 2025 GMT
Not After : Aug 5 07:01:37 2025 GMT
Subject: CN=c2bc5f5d0e7ea8d7653e7583bac58ed156745fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c7:a8:4e:f5:78:63:70:f2:8b:8b:a7:20:e1:
93:78:69:69:d6:27:6a:21:2d:a5:51:c1:90:10:8e:
4d:74:8d:8c:e8:cd:84:10:47:7b:c9:6f:19:04:76:
4b:2d:d3:87:df:f1:e0:e6:1b:8e:e1:4f:57:a1:9a:
d8:b7:8b:7f:b9:7e:2a:01:87:53:cc:29:80:cd:1e:
30:6e:95:01:a3:c3:89:ff:07:c5:1d:29:8e:57:f1:
34:d0:e2:ec:46:7a:6b:e8:72:5c:54:36:94:0a:e8:
4e:f2:24:a5:2b:19:81:3d:d8:32:6e:72:e9:b5:d6:
24:78:48:13:07:25:8c:72:9c:70:c8:23:56:3b:57:
13:93:a2:4f:a8:46:0b:57:76:a8:50:fe:cb:d5:74:
02:fd:3c:13:11:ad:11:85:18:14:70:f5:2e:3e:e8:
3f:89:f6:28:89:27:0b:b2:e9:f8:dd:69:41:77:1b:
14:61:52:bb:93:f9:73:db:40:28:b8:8c:a2:43:ea:
fb:e1:ba:f6:1b:ca:64:44:38:d9:b4:a4:38:b2:ad:
d3:2e:ee:2d:62:40:ae:2f:54:1d:78:1d:05:c8:0c:
ec:37:9b:20:d5:e7:5b:da:e9:52:ee:6e:5b:e3:6c:
45:88:1b:c2:f4:d8:f9:86:71:fb:cb:1e:11:1d:37:
1b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:BC:5F:5D:0E:7E:A8:D7:65:3E:75:83:BA:C5:8E:D1:56:74:5F:AD
X509v3 Authority Key Identifier:
keyid:F2:61:FA:1F:E6:DC:09:FA:54:D1:AF:59:C2:E1:00:CD:14:12:C7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/5e0e4f-746c-4908-855d-e77e0e21b16a/1/8mH6H-bcCfpU0a9ZwuEAzRQSx_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:c1:3e:38:27:9e:e1:49:f3:ec:c0:bb:e4:5f:b0:7b:fa:b5:
8f:6e:06:d5:95:58:b9:2c:93:7b:6d:af:cf:86:7e:b5:5d:6d:
b9:e1:43:c5:db:49:21:4e:c0:ac:11:8e:33:36:46:cf:1b:91:
4e:67:ef:7b:a3:48:68:02:f4:34:84:e9:8c:70:1b:ff:44:f1:
7f:70:57:dc:aa:e3:64:79:a8:0d:c1:04:26:5d:29:28:0f:12:
10:54:9a:b8:65:fe:e3:e0:33:69:90:4e:cb:45:a3:7a:37:be:
2c:d8:1a:9a:64:55:2b:43:4e:c8:04:18:fc:3b:79:33:de:0d:
59:cd:1f:a6:3c:13:04:49:49:67:d7:7f:60:7a:54:b5:ba:4e:
68:67:cf:61:89:7a:04:90:d4:3c:8e:d7:cd:34:23:1e:6a:90:
6c:4e:73:da:c0:06:83:c7:4d:9d:bd:d9:dd:99:8a:8f:d7:27:
40:22:d6:00:5f:50:3e:ac:8f:95:f8:e1:df:a4:05:67:34:29:
1f:fc:79:8f:14:05:25:0b:32:91:4a:f1:fd:00:1f:ef:3a:19:
f5:77:27:46:2a:30:ed:58:b9:66:79:3c:c7:35:3f:8d:9c:fe:
e5:aa:b8:b7:f5:1b:15:a4:49:bb:84:a0:35:84:46:58:19:93:
47:7e:54:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 11:14:08 2025 by rpki-client