Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: +/yq9hNCfWjWCvpqQCW1mB2RW+0ITRdIoTmEQwMpgko=
Subject key identifier: E2:DC:18:41:90:4E:31:37:15:B2:6C:4D:8D:36:49:D0:C9:02:5F:DD
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 019853E8B26E7693D482D720A0B9DE495D1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 0B5F
Signing time: Tue 29 Jul 2025 02:00:15 +0000
Manifest this update: Tue 29 Jul 2025 02:00:15 +0000
Manifest next update: Wed 30 Jul 2025 02:00:15 +0000
Files and hashes: 1: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: jSdPpTFwXRI918t4n5cQ72SeZn1FfFgegHmOvpP74hw=)
2: ww5W_AzyvORyhz7R6e4M2kGu004.roa (hash: h+p5BWiNgVQT+Ps96Xby3wyi4OgT8Zpuq9hDEAln8lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:e8:b2:6e:76:93:d4:82:d7:20:a0:b9:de:49:5d:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Jul 29 02:00:15 2025 GMT
Not After : Jul 30 02:00:15 2025 GMT
Subject: CN=e2dc1841904e313715b26c4d8d3649d0c9025fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d1:a5:1f:d6:a5:99:d4:ca:c8:ed:45:2d:48:
9f:b9:a3:66:9c:21:5a:5c:53:ff:bd:eb:78:28:9d:
ef:77:e9:d8:ee:a3:87:11:dc:25:bd:13:29:98:52:
a6:7e:0a:a3:cf:76:11:ed:05:9a:67:ca:f1:3f:ef:
bd:c3:be:16:2a:4d:78:c3:60:75:e2:65:e4:32:57:
ed:a2:87:58:e6:11:05:52:ce:27:84:94:cb:bf:65:
54:e7:3d:01:c0:62:51:53:4c:7f:3a:a8:65:8d:d8:
c9:41:e0:7f:0a:89:c2:27:59:f8:58:f9:8f:fc:1a:
41:a0:23:d4:4d:6f:8e:d3:02:d7:ca:98:9a:17:31:
5f:d7:8f:38:50:38:2b:2f:1b:58:c3:d6:b1:bd:08:
a0:56:aa:3c:50:73:08:ea:06:bb:6c:e9:67:ad:46:
6e:51:75:d8:d7:2a:e4:f0:a7:b9:97:20:65:05:1c:
71:0b:c3:71:77:82:8a:37:aa:58:ce:14:82:7f:fa:
dd:74:06:4f:d0:c8:4c:43:cb:1a:4d:9e:5b:29:ff:
0d:68:d2:f1:1e:bb:8e:0b:0b:02:78:d0:f0:23:8c:
ac:73:61:22:08:c7:e2:49:4d:93:38:a1:df:10:a4:
76:f8:fc:db:dc:a5:19:43:77:c3:dd:fd:f3:2c:a4:
79:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DC:18:41:90:4E:31:37:15:B2:6C:4D:8D:36:49:D0:C9:02:5F:DD
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:e1:11:19:b3:61:22:94:c4:c3:55:c5:be:0d:ba:ee:c0:1b:
37:52:3f:0b:63:09:87:16:a6:4b:88:1a:38:83:fa:96:b5:67:
4d:5c:a1:75:f9:a7:f5:37:cc:f9:c6:42:e0:ef:5e:2b:e9:ff:
df:4d:92:12:ce:8c:3c:62:8a:51:65:35:bd:1a:57:ab:76:d1:
11:47:6e:25:52:be:c1:0d:cc:a7:14:c6:e5:e6:51:d6:80:8e:
b6:c7:c4:37:9b:c3:a0:9b:54:ad:43:84:01:f6:52:a4:ed:dd:
7c:5b:39:bd:96:ca:da:25:e0:66:e8:8d:63:30:0b:00:4f:16:
60:22:da:56:09:bd:9c:70:92:db:00:35:e1:ac:f6:2b:09:d0:
9b:95:e0:2e:f6:a9:37:6d:59:3a:d6:4c:53:3b:0c:a8:1e:d8:
e2:32:c0:62:27:a1:b4:56:b9:75:71:20:5b:2b:93:f8:c3:c9:
59:b2:f4:71:94:9c:98:2e:45:12:13:fa:72:ba:78:aa:db:31:
5c:b8:e9:7e:aa:9b:2a:98:68:00:7b:66:5a:5a:3e:04:8f:6e:
d3:31:6e:ed:f0:da:7c:a8:67:de:57:90:f3:27:f6:45:09:53:
0f:85:b4:18:b2:18:39:c4:ac:3e:35:42:dd:de:90:3d:c5:c8:
58:42:36:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 29 05:21:49 2025 by rpki-client