Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier: 7nRZvYFUdCgHLf7EzZgIaH+olGMlN8D5mQAazdKhWB8=
Subject key identifier: 5F:5E:F6:4A:5C:0D:2F:38:02:F3:7B:B4:00:D7:41:8D:BD:20:6D:E4
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial: 0197500EF70ADFA11FF7AF8A2D5EB1C8FA85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number: 0F70
Signing time: Sun 08 Jun 2025 15:00:47 +0000
Manifest this update: Sun 08 Jun 2025 15:00:47 +0000
Manifest next update: Mon 09 Jun 2025 15:00:47 +0000
Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: HIguWi7TvVN9LGb6liEJjqyMAjJ9zW9B7rwfdEj+WZM=)
2: qPfR7RG57f18LNEfOXECDUWuxuU.roa (hash: QgXqOHY45cNI3RJ9Yex5GhM6/GX8GPU2S0Ij2p9Y640=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:f7:0a:df:a1:1f:f7:af:8a:2d:5e:b1:c8:fa:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Validity
Not Before: Jun 8 15:00:47 2025 GMT
Not After : Jun 9 15:00:47 2025 GMT
Subject: CN=5f5ef64a5c0d2f3802f37bb400d7418dbd206de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:cf:8d:8d:ec:17:8b:59:58:d9:c0:21:04:41:
a0:e5:ca:81:d0:7b:a8:14:37:a4:23:72:6a:f6:14:
8c:a6:dc:89:ed:e0:2f:9f:0a:47:55:cd:7f:9b:53:
0b:36:10:72:94:ec:a6:ad:42:c4:c0:76:75:7c:37:
5a:f1:b0:5f:5f:a0:08:be:1c:74:52:82:d2:4c:a5:
14:10:99:c5:38:a9:c5:ee:21:dd:28:77:37:d0:89:
15:ec:02:36:7e:b0:49:c7:14:84:eb:f4:5d:86:1b:
d9:f0:cb:9e:3d:85:cb:8c:8f:63:87:98:5c:0f:c5:
95:83:ca:3a:08:61:13:ed:cd:ea:f5:57:8e:2c:14:
d9:47:0a:c4:48:f6:35:f2:ac:36:a8:77:53:27:e7:
6b:fd:02:cb:08:21:47:28:49:71:f4:2e:15:b6:58:
e3:75:26:d8:32:ca:a9:b0:75:ca:52:a8:c3:91:25:
ef:41:d8:66:1e:ef:13:3b:bf:95:bc:10:e3:ac:ab:
68:60:30:41:93:b3:e5:0c:c7:93:4b:31:72:d8:0c:
e2:5b:e8:40:e9:ca:dc:3a:57:d2:2c:44:95:2c:eb:
ea:00:e3:34:58:4d:41:56:19:ad:b6:55:b2:11:33:
1f:02:e8:70:32:96:0f:bb:0e:1e:8c:61:09:01:93:
55:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:5E:F6:4A:5C:0D:2F:38:02:F3:7B:B4:00:D7:41:8D:BD:20:6D:E4
X509v3 Authority Key Identifier:
keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:da:c8:ae:54:a8:47:f6:c2:ab:52:8b:0e:88:40:92:1b:1b:
e9:1c:5d:9d:c2:dc:8b:7a:b0:0f:28:8c:2f:c3:ee:03:07:d8:
f8:f6:ae:c4:58:85:31:a4:dc:82:e9:ca:92:39:5b:29:e2:c3:
a8:8f:f0:fd:8f:dd:16:ec:f9:24:26:c3:fa:4d:a3:b5:3c:c0:
c6:43:5c:e7:35:85:b0:04:10:f5:fb:62:02:af:06:e5:92:b8:
ba:48:62:a8:d2:b4:52:fb:84:c0:1c:07:e6:1b:0c:bd:81:70:
45:24:21:2b:25:07:6a:e5:89:6e:74:57:29:90:60:42:16:f9:
24:7f:ac:1a:29:5c:68:97:7e:f8:d3:7b:b1:28:07:d6:cc:60:
41:6b:f6:dd:96:77:f8:d1:d2:5a:06:3c:f4:bf:10:ee:8a:4f:
47:96:35:0b:59:1d:20:c2:af:3d:71:38:fa:03:f9:10:f8:73:
22:32:f7:b0:0d:b8:fb:48:c2:7a:96:2e:ce:e8:0c:63:35:8d:
25:e4:75:f4:3d:c6:95:36:f9:6d:31:31:23:fb:5c:8e:62:d4:
89:3f:41:e5:44:6c:81:74:bb:f0:18:68:c1:23:63:fe:42:ab:
25:21:b7:bb:b5:38:03:53:43:ee:c6:c4:19:f4:b2:97:d9:e3:
fe:ba:48:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:22:14 2025 by rpki-client