Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: P7AQwBmcCpOYc5aBXe6QLxUGNmG6s1CdQFYvIAcNGbQ=
Subject key identifier: 82:79:50:4C:D4:18:09:25:2C:96:8E:7A:B5:25:8C:37:09:8F:C8:8D
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 0197715157396B29AD22A3234D51EA23F086
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 053C
Signing time: Sun 15 Jun 2025 02:00:45 +0000
Manifest this update: Sun 15 Jun 2025 02:00:45 +0000
Manifest next update: Mon 16 Jun 2025 02:00:45 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: ikwJAJYn0bgUNMTTIEah2a8N+YyPFSNbOl/76NPVsXs=)
2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:51:57:39:6b:29:ad:22:a3:23:4d:51:ea:23:f0:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Jun 15 02:00:45 2025 GMT
Not After : Jun 16 02:00:45 2025 GMT
Subject: CN=8279504cd41809252c968e7ab5258c37098fc88d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:2d:fa:a6:7e:2e:37:b9:4b:a6:17:4a:0f:34:
64:3e:09:17:16:08:b3:ae:2c:ae:8d:d2:d5:2b:80:
4b:f4:12:7c:78:d2:1c:49:ea:fd:60:b8:b3:09:a4:
b0:af:52:5b:b9:df:d1:e6:a0:e5:62:cc:8b:8c:8a:
b0:54:cf:7b:e9:f2:f3:47:8a:80:73:c7:39:2b:fc:
c7:2c:18:92:bd:23:f2:45:81:cf:0a:f5:ca:eb:ec:
65:52:d4:6a:66:3a:77:0c:bb:c4:ae:fe:98:1a:5b:
3d:98:81:8c:e8:2d:fc:88:c1:bc:90:cf:e7:c9:80:
3b:dc:9a:ae:50:0c:70:47:9c:04:93:b2:1c:60:9e:
26:7f:90:4f:a9:1c:6f:c2:b2:93:84:0a:62:14:21:
ae:5f:fc:aa:cb:3e:96:40:28:f6:9b:58:5f:bf:93:
7d:15:b5:d5:7a:d4:43:e5:20:88:95:0b:bd:a7:35:
b0:0f:0c:ff:93:91:4c:93:93:09:c0:b3:44:67:36:
7e:07:35:4c:b7:9c:78:bd:1f:52:64:e1:c8:de:74:
3b:a1:0c:b2:b0:19:8b:a4:6a:51:29:97:43:f8:eb:
13:f1:d9:09:5a:df:19:77:36:c7:09:8a:e6:e1:c2:
68:ba:96:7a:3f:25:47:03:e4:fe:21:91:2a:e9:46:
84:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:79:50:4C:D4:18:09:25:2C:96:8E:7A:B5:25:8C:37:09:8F:C8:8D
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:b3:c3:16:31:39:95:44:8f:10:7f:90:3c:76:d1:c5:f2:96:
fc:41:a7:8a:8b:83:3c:d0:65:f3:1f:10:8c:19:93:22:f2:78:
18:c9:a1:c9:2c:88:24:ee:93:12:46:af:4c:11:1a:fd:b4:eb:
7c:7a:0e:82:6b:0c:5b:72:42:4a:41:3c:06:1c:5b:4c:e7:19:
e9:73:f3:68:4a:c1:ba:f9:b6:50:85:b0:60:a6:61:7e:25:8c:
72:49:7d:1a:b2:28:bd:62:89:f4:f6:e2:6f:b9:81:f4:ba:a8:
2a:83:7f:af:3d:a2:65:a9:f3:a3:37:54:b9:6e:40:8c:d8:40:
af:d5:d4:86:f8:b9:82:e6:9a:b2:e2:f6:86:fe:a9:29:97:dc:
f4:17:2e:b5:7a:5b:ce:36:82:95:74:f4:95:cf:1a:30:2e:fd:
db:01:9a:8c:7b:8d:6d:40:e6:e8:4f:71:e2:e0:4f:d5:12:73:
40:d0:b7:31:95:53:a6:bb:0b:e0:5f:25:9f:35:30:72:77:1f:
56:97:23:bd:76:5c:8d:ec:27:c3:d5:ce:f0:56:8a:b0:f2:5c:
e7:b1:57:dd:37:d0:76:91:26:42:d4:b0:c1:91:1e:be:f4:e5:
93:5c:75:7c:9b:31:88:3d:c2:22:0e:de:18:f2:1a:23:4b:b8:
c9:06:38:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:09:59 2025 by rpki-client