Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: 9rmJJ1FE/rczqIYYOh3Jrc+E446OUTTlEA+PwhC6BFI=
Subject key identifier: A5:09:AE:06:A6:83:08:F7:C4:F4:20:3F:51:3B:D0:A1:70:6A:A8:98
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 019748C30F5D2E13D5F6C564D4BE5EA62A4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 1466
Signing time: Sat 07 Jun 2025 05:00:32 +0000
Manifest this update: Sat 07 Jun 2025 05:00:32 +0000
Manifest next update: Sun 08 Jun 2025 05:00:32 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: s9wKxf3BcQRJSkWQOOP/0H0YXms+rEIN+AZHT1aHnwk=)
2: E1bqejAdTN3uYMBTKCwH33KmoEE.roa (hash: /XRVb9kLwHV21UKOVZ0MM6evc9apWkwvTlQRZL1Tohg=)
3: gAbWpwUUphvqV25CUB0maQ_pAx0.roa (hash: BLsk+LJxA+WagSmLj3Bzfhh4p3QvCZDF/XVfmTYGdec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:0f:5d:2e:13:d5:f6:c5:64:d4:be:5e:a6:2a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Jun 7 05:00:32 2025 GMT
Not After : Jun 8 05:00:32 2025 GMT
Subject: CN=a509ae06a68308f7c4f4203f513bd0a1706aa898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:09:d0:1f:e0:39:81:58:96:65:b1:ed:a6:b0:
ab:25:25:6b:1d:7f:0a:cf:e0:a0:ec:fd:33:76:56:
13:9e:37:b2:9d:41:1e:33:08:30:0c:36:64:63:ec:
f2:c2:90:43:e8:b9:43:02:9a:0f:c2:8c:ca:6e:55:
86:26:3e:33:27:be:44:6f:06:61:e8:f5:69:dc:57:
b3:e5:95:6f:97:d4:8e:0b:c7:11:6c:64:ae:95:cd:
c2:94:f6:fe:e9:4b:b7:85:ad:11:c1:da:f1:87:59:
aa:b8:78:c5:69:60:6e:06:d2:ea:21:07:22:32:45:
7f:8d:82:67:5d:56:bf:77:cc:f9:eb:28:2f:18:c2:
ac:ce:dd:a3:6a:aa:b2:58:9b:57:b8:24:96:06:7e:
49:43:5a:aa:d2:53:4a:8a:37:23:53:02:1a:aa:7a:
18:9c:d9:7e:c7:c7:91:41:c7:7f:fe:28:15:b3:f0:
19:9f:ed:96:27:05:62:ee:35:89:14:6e:8e:fc:40:
35:c0:cf:92:83:81:a3:67:d7:a3:63:90:8f:cb:ca:
6e:b1:39:fc:fe:d9:3f:41:63:20:47:9b:47:3c:78:
28:9a:00:ad:35:3e:f9:65:d8:39:8d:01:cf:41:25:
3b:77:a9:99:da:b2:89:24:65:0c:ee:bb:e7:6f:9e:
72:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:09:AE:06:A6:83:08:F7:C4:F4:20:3F:51:3B:D0:A1:70:6A:A8:98
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ec:ce:6e:86:48:5c:6a:94:e7:cb:b5:cd:46:86:00:44:a8:
2b:3a:38:b5:18:c5:46:a2:46:c0:64:d7:56:0c:4e:9e:62:f4:
a9:fd:ef:32:96:21:9f:aa:2c:a1:06:ab:34:16:50:27:80:86:
70:42:82:32:d8:6b:80:07:19:5d:23:b2:db:c3:bc:7e:09:14:
ab:78:c1:e6:26:15:50:77:74:bc:e3:5f:7e:fe:86:bc:c1:5f:
54:ca:68:ee:32:54:b4:7e:a8:8a:c1:06:15:19:ba:76:02:8b:
55:17:21:30:52:21:6d:c6:32:43:ce:b8:e8:64:cd:85:a1:cd:
ed:a8:47:8e:07:41:3f:13:77:6c:58:99:06:7a:53:e1:dd:75:
b9:90:67:b0:aa:bb:e5:e3:64:34:cd:ac:8b:c4:7c:15:9d:a7:
13:36:1a:a5:6d:17:8c:92:ad:e2:b5:8c:78:3b:f2:3b:9d:0d:
f6:ad:2f:70:c2:26:0f:c3:71:d0:e3:a6:53:a6:e1:05:c8:03:
0d:66:1d:bb:b7:72:5e:3e:57:80:79:3b:34:7e:45:f6:66:06:
94:b2:f8:3c:3b:9d:42:1c:09:7a:dc:fc:9f:d0:cd:a0:04:8b:
8a:2c:a7:c5:54:f5:66:92:3b:a3:3f:65:50:97:ff:9c:3e:76:
a9:ef:a3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 10:44:58 2025 by rpki-client