Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
File: 8qJTzfUHoD4fV50gLY3xHWj1w9c.mft (raw, json)
Hash identifier: RV+LsOGknUz8DbFzfIwGMlPr0JplwnzsNJPSBsMsUJY=
Subject key identifier: F8:3A:29:15:09:16:70:FA:D3:2F:D1:E5:65:C8:CE:F2:2F:3B:A1:B4
Authority key identifier: F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
Certificate issuer: /CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Certificate serial: 0197470C3380D22E1941446B1D07659AF9F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
Manifest number: 116B
Signing time: Fri 06 Jun 2025 21:01:11 +0000
Manifest this update: Fri 06 Jun 2025 21:01:11 +0000
Manifest next update: Sat 07 Jun 2025 21:01:11 +0000
Files and hashes: 1: 8qJTzfUHoD4fV50gLY3xHWj1w9c.crl (hash: c3v78+0QsQltP7qFeiUophe8bXaGW8lyLcSlbXvtbT8=)
2: IPgK_RAdsHuRvKKv6Yp_JI973ng.roa (hash: tX54SYM7m1FlAg3IfdN7mYvGyQfWousk3Km0i1Rx1t4=)
3: Ui6ZcVR5VSgOavfnIix1oy38mjY.roa (hash: yRTuvXTUZnIOOWWsEOiOGa2OWkTQmK3kH5dqt1VxT5k=)
4: X6FDOxTNKh52-I33xxvcwTU1qaA.roa (hash: 2Nya6BSwofcloqYL9ndMBA+GqP5w942e0XCFOKQVeZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:33:80:d2:2e:19:41:44:6b:1d:07:65:9a:f9:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2a253cdf507a03e1f579d202d8df11d68f5c3d7
Validity
Not Before: Jun 6 21:01:11 2025 GMT
Not After : Jun 7 21:01:11 2025 GMT
Subject: CN=f83a2915091670fad32fd1e565c8cef22f3ba1b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:19:35:89:a2:40:22:50:48:78:1a:32:7c:9c:
00:24:f6:cf:84:e8:d3:9e:ec:45:86:63:85:f2:4d:
ab:72:8e:f8:6e:18:a1:d7:4c:7b:ce:45:e7:d1:a4:
9f:6b:98:01:58:04:41:91:58:9e:ea:35:79:aa:3f:
7e:9c:da:6e:0d:57:aa:0f:78:39:c6:2b:b0:08:45:
79:d8:77:b9:60:f4:8a:f1:66:fb:9e:ca:aa:eb:5b:
bb:e1:ee:45:58:eb:be:fb:05:82:7b:86:e3:97:8d:
92:1e:09:69:07:35:f1:04:f8:5e:f6:38:2b:30:0c:
1d:71:20:fb:fd:2e:25:1e:43:bd:b6:63:41:4b:08:
8f:9d:af:fd:26:bc:69:0b:dd:23:9c:74:7a:dd:40:
2d:6d:d8:f8:c5:fc:92:68:15:8d:ea:f0:3d:1c:b7:
7d:c9:10:d3:d9:e7:81:c9:0b:0c:82:cc:9a:13:f6:
41:7b:cd:e1:9f:30:de:63:b1:56:2a:c3:86:f6:38:
88:65:b2:13:40:0d:0e:6c:6d:89:e4:3e:4a:f0:8f:
5d:03:93:ea:7a:21:e9:e8:81:b0:7b:c8:c1:02:85:
dd:a9:7a:c9:9c:60:01:b9:5a:eb:c1:de:18:e8:d1:
3d:38:45:bc:50:72:50:55:6b:91:2c:39:ad:aa:b6:
c2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:3A:29:15:09:16:70:FA:D3:2F:D1:E5:65:C8:CE:F2:2F:3B:A1:B4
X509v3 Authority Key Identifier:
keyid:F2:A2:53:CD:F5:07:A0:3E:1F:57:9D:20:2D:8D:F1:1D:68:F5:C3:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8qJTzfUHoD4fV50gLY3xHWj1w9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/10ebec-2784-4daa-8df7-be4d5d09d710/1/8qJTzfUHoD4fV50gLY3xHWj1w9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:4f:94:b3:a6:bf:1e:32:48:69:98:0f:c0:07:0c:bb:2d:0d:
61:ed:9a:50:a4:3e:a3:d8:d6:9a:ec:f3:58:4e:93:db:aa:48:
1f:20:ef:50:6b:63:f9:43:b7:be:70:35:67:05:fb:fb:46:f4:
55:ae:1b:8b:8f:34:3d:87:e5:1a:38:6c:9b:49:bd:95:b5:4c:
02:11:b3:f2:89:6b:a3:82:ff:e0:f9:64:2a:18:e7:47:73:dc:
b9:d3:18:69:7e:36:c6:49:40:73:fe:29:18:6b:17:51:f1:63:
80:86:f3:5c:ec:f1:9d:90:b7:e5:2e:f6:88:54:29:2c:a5:28:
65:33:83:d2:bb:64:8f:84:4f:c4:d0:7b:2b:31:d0:03:e7:7b:
0b:66:f6:50:e0:a2:28:38:30:38:a0:e4:83:9a:35:98:59:b9:
33:e4:08:04:a9:d9:b5:fc:8d:67:31:09:d6:d3:6d:c1:de:8b:
2e:eb:bd:45:84:7b:5a:a2:c6:c1:a6:60:3c:be:f7:2a:51:97:
ad:53:8a:d5:a0:be:05:30:a7:63:df:4c:1a:a3:66:91:42:95:
96:06:61:f9:da:26:f5:ec:8d:6b:f6:ae:38:6e:82:1c:89:da:
a8:9d:b6:b4:69:4f:57:c2:89:cf:23:91:d9:68:49:ed:76:9a:
66:1e:3e:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:35:01 2025 by rpki-client