Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: wcm9kXoFGJDHQtTTLrGLv/cFhaKc7FkPTEdVyWQhI2M=
Subject key identifier: 5B:20:3C:94:CD:6F:7A:73:67:B3:0D:D3:CC:D8:0F:D2:64:8B:58:46
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 01974AE89C5776DFB5F39EF89E9DBFB301AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 09D6
Signing time: Sat 07 Jun 2025 15:00:47 +0000
Manifest this update: Sat 07 Jun 2025 15:00:47 +0000
Manifest next update: Sun 08 Jun 2025 15:00:47 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: dPnKrW1K+iWmW5KpCRdDgSJjImGObAPTvzjdTZQY5rY=)
2: 9fWa2lfLkLJ8sCmivN6TQyBLwDA.roa (hash: IPb2Fry6AFROnpqPDxpsLGmfQRyiCcADkUuNtSOH1vw=)
3: M0hmVP_O7pmzGC1lZ8auVtUv08M.roa (hash: O6keKWXCa23CBnMYQ5j2NdMEa5h/R6dRjRYYfD56tpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:9c:57:76:df:b5:f3:9e:f8:9e:9d:bf:b3:01:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Jun 7 15:00:47 2025 GMT
Not After : Jun 8 15:00:47 2025 GMT
Subject: CN=5b203c94cd6f7a7367b30dd3ccd80fd2648b5846
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:16:1d:6f:fd:33:38:5f:ea:04:2c:7a:c0:83:
fd:00:d7:ed:f2:61:ed:4d:f0:1e:c3:c9:be:bc:aa:
33:7a:ea:a6:22:79:a6:3d:19:54:c7:1b:90:b4:53:
78:5b:b3:4c:00:18:fb:53:d3:1b:ac:4f:a4:10:9a:
80:42:79:e4:62:24:d6:7f:c2:25:c3:99:84:d2:04:
3a:c8:4c:ff:6f:db:e1:90:55:9e:7f:6c:8f:12:de:
2f:e7:49:01:92:6c:3b:1b:9c:c3:4a:10:69:25:e3:
cb:a2:ba:1c:b8:1e:67:de:16:5d:c5:d6:53:bb:86:
65:19:35:13:aa:69:ac:03:e2:41:78:da:29:40:11:
f3:e8:1d:db:de:76:7b:10:46:fe:c5:2d:e1:20:a6:
6c:fa:ef:57:74:35:8c:30:e6:8a:b6:0f:6a:2c:5f:
8b:ec:56:15:1a:bc:ee:02:e2:35:a4:a8:35:e8:25:
54:59:a6:51:ee:ba:ad:36:d8:0a:94:5a:8d:05:b9:
cf:33:e0:45:44:c3:7c:fc:e1:bb:0f:fd:5b:40:ed:
c6:c1:6f:4c:f4:12:c9:30:03:60:cc:06:26:da:26:
a1:4f:4e:48:bf:3c:4a:33:eb:ac:e5:f4:7e:0b:f8:
40:fd:41:c4:28:5c:6c:d8:25:41:9e:fd:42:5e:24:
c6:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:20:3C:94:CD:6F:7A:73:67:B3:0D:D3:CC:D8:0F:D2:64:8B:58:46
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:05:44:9b:f7:6f:86:82:59:dc:dd:6d:df:25:70:ab:8c:ed:
23:fb:17:75:90:62:ec:d8:84:9f:e0:2c:9c:65:32:4e:04:33:
9a:8a:c7:a5:fc:8f:38:de:44:7f:9c:52:7a:57:83:ad:09:51:
85:60:3e:57:34:90:f5:59:8f:d6:2d:f3:2b:fd:52:f8:ae:84:
ac:4c:7a:2b:9a:5a:10:5f:15:74:4d:e1:51:b6:93:17:ac:f5:
d2:6c:8f:4f:d1:df:7a:23:7d:ee:22:d6:39:de:95:35:f0:53:
8f:e9:43:b1:5b:5e:85:14:68:74:a7:94:90:49:b0:2d:e1:a9:
ee:f4:b2:01:54:74:07:5d:4f:c8:ed:b7:a2:9b:d6:c2:6f:dd:
e1:43:04:31:16:f0:bb:76:7b:3c:5d:c2:50:35:31:43:6a:3a:
0b:aa:a9:80:4f:ac:0b:a7:50:d0:31:50:b5:e5:7c:ed:56:36:
6a:33:65:1c:f2:10:35:9c:2c:b0:f4:3b:6b:95:38:f4:c9:23:
f6:f4:99:b8:d6:da:54:1d:c6:9d:34:c0:0a:7c:38:41:6e:83:
64:64:a0:77:40:5d:32:b3:e3:ff:99:9f:42:2b:44:53:c9:2e:
e6:8b:67:63:2e:e6:9e:c1:9c:51:c4:27:71:d8:9e:5e:a6:bd:
d7:d0:b8:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 19:38:07 2025 by rpki-client