Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File: 8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier: vHqReWfjWa1xQBtneH3jNXZcokWTVa4MDee4dry/M7c=
Subject key identifier: AF:3F:A4:C9:BE:49:F3:7A:42:A8:42:23:4B:35:5D:49:EC:83:6B:A5
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 01974A436CEF9ADE7A32DFF54991EF99C74B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number: 1581
Signing time: Sat 07 Jun 2025 12:00:22 +0000
Manifest this update: Sat 07 Jun 2025 12:00:22 +0000
Manifest next update: Sun 08 Jun 2025 12:00:22 +0000
Files and hashes: 1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: P7G9B4NAxGtBZ3HgMQqMP7TkrO8TyF3CCgg91Yche2E=)
2: N4NsUcZuS_9XiBDgAfw6eryV7HU.roa (hash: tpgeA/zfOVEAg9H115FFWM358l26uFQNlABFRgvWlU4=)
3: yV4dNy3NsBZVUNWCmHTLsnrsaLM.roa (hash: HeRl5vH7gTSirrF3z1irtqiGbkDXqM3OvljtYndKLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:6c:ef:9a:de:7a:32:df:f5:49:91:ef:99:c7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: Jun 7 12:00:22 2025 GMT
Not After : Jun 8 12:00:22 2025 GMT
Subject: CN=af3fa4c9be49f37a42a842234b355d49ec836ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c5:39:cd:03:85:38:da:c2:0a:22:eb:d1:34:
0e:ad:9d:15:27:e1:8a:0a:81:04:ea:15:a8:8d:78:
7b:d0:e8:84:0a:e3:5a:59:1d:ec:7b:69:09:bf:46:
ce:da:32:41:6a:14:be:67:05:b7:5c:d6:bb:d1:31:
4f:63:2a:8b:27:64:05:c7:90:93:e8:5a:2a:e8:d3:
57:32:2d:18:a5:fc:dd:59:6d:9b:74:d3:86:61:9e:
c2:a5:2b:7a:7a:86:cc:0e:34:44:04:dd:24:9f:e9:
0c:1f:fa:cc:3f:e0:4f:16:05:26:44:b4:b2:ab:09:
c9:1f:8e:70:89:46:08:1e:69:6f:89:cf:06:53:f1:
5b:d0:0e:66:e5:eb:19:51:42:ec:7d:0a:60:20:4a:
0e:8a:a5:89:ea:07:cb:89:e4:ab:dc:ea:5e:5d:11:
e7:7e:15:11:a3:47:d7:24:78:70:2b:bc:3d:5b:5d:
87:ed:13:3e:e2:70:4c:e3:a4:e4:65:50:00:16:e7:
0e:37:d0:02:d1:57:51:85:45:16:b6:55:e0:f9:b3:
ab:b4:5a:d3:de:c8:c7:87:14:1b:03:3a:ff:cf:af:
d2:0d:26:ff:bf:97:fc:84:fc:b7:50:93:39:35:73:
8c:f1:94:4e:58:43:5b:b8:22:dc:26:c6:e8:e4:4c:
f7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3F:A4:C9:BE:49:F3:7A:42:A8:42:23:4B:35:5D:49:EC:83:6B:A5
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f7:c7:b5:43:31:44:fa:aa:13:00:6a:61:5c:1c:58:c4:1a:
ff:8a:04:07:8d:c7:49:eb:50:9d:d3:da:4d:62:d3:e9:71:91:
e1:cf:ae:f6:bc:58:dd:7a:0f:fe:72:d2:bc:12:bd:e7:91:8f:
38:2f:f7:c4:8f:66:f6:20:a0:77:ad:2f:60:a4:da:33:f6:53:
33:08:c2:51:04:88:47:a7:f5:cf:58:2a:5f:da:db:c9:af:0e:
76:ec:df:38:fa:a4:8e:19:78:63:d9:e2:ba:70:76:50:fc:b1:
1a:63:2d:c7:c2:9c:7e:3d:90:84:1c:23:ab:41:c1:cd:a2:8d:
4b:96:00:61:b5:34:47:6a:7a:6c:87:20:ca:38:e6:e9:72:75:
44:38:d5:45:ff:5e:14:fe:f5:3a:87:fd:a1:15:b4:34:83:1e:
d1:43:fe:39:3b:f7:23:e6:68:78:f5:79:f2:15:1f:e8:16:b7:
3e:c6:32:90:27:6f:17:1c:cb:b7:42:1b:3a:3b:bd:cf:6f:38:
04:c5:52:3a:2e:3d:46:c1:d8:db:b7:68:df:73:23:49:fd:89:
68:84:3c:0e:0b:29:a6:a4:50:7f:4a:b2:c3:c1:6d:38:e4:b6:
22:9a:db:b1:ad:c5:6f:8d:15:87:73:8d:97:0c:1e:d3:97:6a:
ab:70:a9:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 18:40:04 2025 by rpki-client