Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier: QIfpb6/6PiZg+UHt1BApWaMleH+CGyKIpUO6vRyG+3w=
Subject key identifier: DC:5F:92:0E:DC:9A:6F:01:0E:2E:57:1B:97:76:B5:CF:7A:60:FA:B1
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial: 0197499F5FC37BF0592B9B79DF3D86F513E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number: DF
Signing time: Sat 07 Jun 2025 09:01:10 +0000
Manifest this update: Sat 07 Jun 2025 09:01:10 +0000
Manifest next update: Sun 08 Jun 2025 09:01:10 +0000
Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: Ym3Eut4kIDHKTSF06iy4B6JLhD8v6WNTPgEOlWN73EQ=)
2: FruHS8sKA0UVPBPUKiJYlzj46rI.roa (hash: If8vnhAP47c8P1zX/kOfX6rctIeesg8CbkDyipSuox4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:5f:c3:7b:f0:59:2b:9b:79:df:3d:86:f5:13:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
Validity
Not Before: Jun 7 09:01:10 2025 GMT
Not After : Jun 8 09:01:10 2025 GMT
Subject: CN=dc5f920edc9a6f010e2e571b9776b5cf7a60fab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:e9:c5:52:f0:4f:d4:f7:19:4a:b6:8d:08:83:
38:c5:ce:2a:53:f3:17:30:c0:f3:0b:77:53:05:90:
06:70:b7:7c:8c:fb:b6:a2:a0:19:a7:af:49:cf:e8:
38:ec:57:3a:6a:1a:5f:98:93:9e:02:e0:8a:71:27:
45:cd:99:d6:f3:fd:97:4b:e1:24:5f:b5:4c:99:a4:
5a:46:44:82:b6:4c:00:1c:4e:bb:20:40:ad:fa:56:
11:41:79:74:26:33:a4:de:ee:68:fb:93:02:7c:c2:
04:d3:54:24:d4:77:cf:c8:22:88:1f:c1:c4:57:38:
2f:c0:de:2d:ca:48:2a:fe:c5:03:e3:f3:20:f4:c1:
5e:07:fd:10:26:7d:ce:f4:3e:7e:b9:70:38:8d:28:
fb:2e:00:4c:e2:64:db:ee:52:eb:9f:d6:90:e7:b1:
07:1e:ff:69:47:13:5a:cd:9b:82:bd:ec:50:98:de:
1d:57:12:5b:2e:93:7c:ba:cc:72:a5:7c:7e:2e:f3:
c6:f1:7a:a7:c2:2a:5a:a5:03:d2:1c:a7:6f:46:30:
7a:2e:ce:c5:db:ff:f5:09:63:e2:0f:fe:11:0f:1d:
2f:aa:25:39:fe:4d:96:ff:51:d2:93:72:6f:f6:9b:
dd:f0:e6:79:1b:cf:1d:71:6a:e0:ee:06:df:88:9a:
87:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:5F:92:0E:DC:9A:6F:01:0E:2E:57:1B:97:76:B5:CF:7A:60:FA:B1
X509v3 Authority Key Identifier:
keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:88:5c:22:a9:21:57:f9:46:12:51:e9:39:4a:0d:24:b5:fe:
44:13:90:38:38:c3:63:72:7a:36:41:2b:ea:44:5c:4b:82:4c:
6a:ef:89:ef:40:66:44:08:e2:9d:95:11:f3:26:7f:86:9d:02:
0c:12:0e:1e:8a:a8:a3:85:31:d6:f7:e8:84:02:52:18:ba:f7:
32:7e:1f:79:11:61:9c:c7:ef:ee:ae:d7:22:7d:56:bb:1b:f3:
47:1b:e6:d0:b7:b7:80:17:b4:94:e2:c7:65:6c:e2:17:0c:25:
84:2a:66:12:46:08:93:5b:8c:a2:8e:f5:f6:3f:d1:ad:95:a4:
d0:0f:19:a2:ec:25:89:a2:30:2b:12:e4:2c:e7:75:79:d0:7e:
cd:4b:35:e6:bb:45:ac:2c:17:3d:65:56:49:b4:60:05:d0:e7:
7e:d9:61:3c:af:02:0f:32:2c:1a:d2:6d:bc:36:f4:6d:86:14:
fd:d5:8f:4e:54:45:37:23:d1:53:b1:45:01:32:35:d4:b3:fa:
3c:fc:0b:57:66:16:ca:6b:3d:77:f4:47:b0:0d:33:c3:0f:2f:
d3:18:a1:b0:ee:72:ca:22:d2:33:f5:13:1d:69:f8:05:f6:40:
3c:1a:16:82:84:08:2a:ec:6f:e1:36:9f:66:eb:6a:6c:9e:b3:
d2:4a:f9:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:51:40 2025 by rpki-client