Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier: g6NOFXEHJRNXQbVPr4UZf/clF+z4fKsZ/p7k+w6CMeg=
Subject key identifier: FB:8B:0D:14:A5:ED:3B:8D:0B:76:67:04:2B:14:C4:40:C9:21:43:65
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 01974B566D3C73DC8C8D72B929EA2F8C229E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number: 10BF
Signing time: Sat 07 Jun 2025 17:00:44 +0000
Manifest this update: Sat 07 Jun 2025 17:00:44 +0000
Manifest next update: Sun 08 Jun 2025 17:00:44 +0000
Files and hashes: 1: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: NH9EPwEMEYr3qBHufta+rV57HihhbfRbfKQNO6XPOv8=)
2: RxiVRcsHeclsIn7rqDibVKMm4qY.roa (hash: RdPDIHwu5UxKtKljTR4KLIRVl+B3RPcwmBVzbEhliKU=)
3: n1BFonHtDGvA8w45LaQUVIMy610.roa (hash: UPpZGSFwSh5u0Vmh3TPpTDA5brKnQclTUnn56OlMfIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:6d:3c:73:dc:8c:8d:72:b9:29:ea:2f:8c:22:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: Jun 7 17:00:44 2025 GMT
Not After : Jun 8 17:00:44 2025 GMT
Subject: CN=fb8b0d14a5ed3b8d0b7667042b14c440c9214365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:52:22:ec:f2:c0:aa:f9:00:47:9f:d0:8f:83:
08:bb:d4:51:aa:a3:97:c8:dd:4b:89:b8:d0:4d:83:
fa:fe:dc:5a:5d:23:b2:97:86:4e:42:76:f4:8c:2d:
9d:a5:1f:b0:d2:37:88:25:75:b5:d8:fc:46:42:ed:
85:f5:c0:07:a1:7b:4b:d5:b9:33:0e:26:9f:fd:13:
d2:dd:3b:f4:7d:d2:d2:e3:91:10:fa:5b:e9:ea:fc:
4e:d4:d9:a5:df:be:bb:48:1d:92:aa:a3:58:03:e1:
22:e4:e9:87:39:e0:d0:0b:c2:20:24:b2:b7:32:53:
b1:ca:1a:d1:93:6b:48:3a:81:9c:b4:b2:d3:95:53:
88:1c:52:74:41:a3:39:37:da:39:d5:df:3a:08:7e:
2d:6c:79:40:c7:56:52:a1:cf:7d:de:9b:04:f3:89:
ae:ca:49:7a:32:cf:75:dd:26:7e:65:3d:fb:6f:8f:
a0:97:34:58:e9:49:da:36:fc:3e:63:8c:ba:2c:39:
75:db:84:de:68:65:bd:61:a9:d2:6b:44:2e:05:f5:
a9:08:08:50:22:38:ea:8e:f9:20:20:10:61:04:20:
54:7f:67:62:f1:c7:65:ea:62:16:2d:51:16:2f:44:
de:74:45:7f:d4:00:6a:dd:31:b4:2f:49:f9:7f:5b:
cc:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:8B:0D:14:A5:ED:3B:8D:0B:76:67:04:2B:14:C4:40:C9:21:43:65
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:d7:ae:e9:ce:45:0d:22:32:41:a2:9e:9d:e1:67:e7:ce:5b:
10:8a:cf:30:a2:9b:21:41:63:be:9d:f4:0c:a9:2e:bc:c0:6d:
75:08:2c:29:38:4d:ed:ec:3c:d3:9e:d9:b4:07:10:7e:d7:b4:
17:35:ba:f7:01:7d:fb:27:d0:fe:c9:f9:89:89:77:a4:20:a8:
33:94:59:05:bd:6b:59:dc:da:ed:b7:ad:f2:9f:b4:1f:eb:97:
69:73:a1:55:53:8c:47:f2:4e:e7:57:82:a9:4d:38:98:da:57:
a9:1b:75:cf:04:fb:d6:33:fd:96:48:0e:8b:50:f0:18:22:fd:
56:02:e0:3d:16:a1:55:ee:46:90:67:f5:3b:43:cd:47:6c:51:
98:c4:07:17:c6:9c:a3:50:09:59:fb:ee:c1:83:93:43:94:f4:
b0:ff:97:b6:87:95:20:fc:0a:1b:e5:18:d1:b6:6c:a2:11:3d:
ae:c9:c1:e7:95:81:c7:e2:bf:08:f3:20:f4:b2:3c:4c:c0:6e:
74:4c:90:d9:3b:96:a0:40:73:54:b3:85:50:f2:0d:4a:73:3c:
3e:ef:a2:1b:60:a0:c0:50:80:1c:18:4d:58:0a:52:20:4c:96:
d6:39:a7:f4:82:fc:f2:ce:89:72:f8:ee:27:c8:36:ac:e4:78:
b2:a1:d4:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:41:28 2025 by rpki-client