Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
File: 8iyKma2nf70-JAFPXiTxr2lQXCM.mft (raw, json)
Hash identifier: zmkLl/AOgvoo5XXFliuJXjPg90NL1ngA/PK5M/IOFSE=
Subject key identifier: 11:2F:0A:2A:88:D2:1A:67:F5:6B:A7:B9:EB:BC:1B:E8:ED:9D:C2:E4
Authority key identifier: F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
Certificate issuer: /CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Certificate serial: 01976F2CFAC4FCED5323EC163C885E399006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 16:01:48 +0000
Manifest this update: Sat 14 Jun 2025 16:01:48 +0000
Manifest next update: Sun 15 Jun 2025 16:01:48 +0000
Files and hashes: 1: 8iyKma2nf70-JAFPXiTxr2lQXCM.crl (hash: jv5Z7Q1t3Kc/1TJCFCrbmoH3Q/5V3EWD02WGPxpwMFw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:fa:c4:fc:ed:53:23:ec:16:3c:88:5e:39:90:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22c8a99ada77fbd3e24014f5e24f1af69505c23
Validity
Not Before: Jun 14 16:01:48 2025 GMT
Not After : Jun 15 16:01:48 2025 GMT
Subject: CN=112f0a2a88d21a67f56ba7b9ebbc1be8ed9dc2e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:dd:f9:39:37:17:ac:0e:8b:f0:fb:3c:49:fc:
a3:ad:17:98:dd:4d:0f:75:7b:51:5f:0c:f6:be:60:
2a:4d:af:18:0f:70:84:68:32:30:e9:21:1e:10:e8:
cd:24:11:65:a7:ec:13:9c:94:9c:bb:f0:61:92:96:
0d:86:0f:92:a6:77:80:80:b9:56:96:d9:4d:51:cc:
06:68:06:b0:b7:db:94:f9:7b:f5:1e:20:f6:76:3b:
93:09:b7:1f:b2:db:02:0e:d3:df:2c:38:0f:b0:aa:
bd:d0:c4:5b:a3:20:6c:25:6f:c7:a2:a7:f8:d5:ae:
42:5d:4e:09:46:ef:f1:93:85:19:22:0e:66:9a:5a:
8a:5e:e1:10:f4:03:a2:33:22:75:00:e4:ef:60:56:
7e:15:9e:71:4d:3e:0f:b5:74:63:d8:50:34:eb:32:
87:48:1e:1b:fd:44:99:d8:86:68:3e:c1:a3:a3:e3:
91:41:29:52:0d:e8:81:9b:41:1b:cb:9b:71:75:9c:
33:f0:e2:0d:55:f2:6a:c3:fc:7e:81:3a:3b:0a:bf:
40:a4:1d:bf:d2:54:4c:75:ca:02:a9:61:08:f7:60:
43:5e:af:09:f1:30:03:cf:43:49:ac:94:df:57:75:
68:0f:ef:24:a4:bb:c4:8a:ae:97:33:d8:97:35:fc:
d0:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:0A:2A:88:D2:1A:67:F5:6B:A7:B9:EB:BC:1B:E8:ED:9D:C2:E4
X509v3 Authority Key Identifier:
keyid:F2:2C:8A:99:AD:A7:7F:BD:3E:24:01:4F:5E:24:F1:AF:69:50:5C:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iyKma2nf70-JAFPXiTxr2lQXCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/0a8b1b-bb69-48d7-8ca5-7dc225afe555/1/8iyKma2nf70-JAFPXiTxr2lQXCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:9e:0b:05:45:91:05:ad:fe:7a:85:55:25:4e:4e:50:68:6e:
92:a2:94:70:23:54:cf:41:00:b1:ab:27:c1:44:38:b5:f9:76:
cb:81:e3:0b:93:f1:44:62:42:51:fa:ea:ae:ec:75:3b:85:15:
62:69:9f:7d:74:78:80:b6:2c:a2:80:e3:e4:fa:c6:9b:04:55:
2f:5c:18:a5:ac:0d:f8:a4:80:90:9d:9b:b9:7a:39:6a:73:cb:
2d:f2:24:94:25:e3:83:51:af:21:d3:8c:6d:66:60:9b:1b:98:
56:c0:63:d8:39:4e:87:ac:66:0e:0a:54:32:9f:94:79:b5:97:
d6:12:84:55:0e:f3:e5:cf:63:ba:02:35:b2:15:02:ca:34:09:
68:4f:d4:16:5a:fa:61:5c:d3:ad:7f:c6:29:e3:28:63:35:56:
9d:9f:97:4a:96:f2:c3:2e:bb:87:b9:00:8e:bf:14:a3:cb:da:
6d:27:39:45:1a:76:45:39:3c:a3:a8:f2:0d:fb:b0:d8:91:b2:
67:14:7b:81:ab:96:55:1f:c8:c9:a9:44:c5:10:e7:c3:fc:c8:
da:a8:69:62:5c:74:87:a5:d3:17:6f:98:b0:f5:11:0c:61:da:
d2:1a:49:61:a2:39:c3:16:8e:0b:67:5e:9a:be:c5:c7:fc:bf:
be:31:de:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:19:23 2025 by rpki-client