Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: +yQi4emaLbtac4DBr95iV3pOuKBKXMAe2FxHr3wwn+E=
Subject key identifier: D6:A2:CE:C1:5A:A1:6E:8E:22:AE:61:1D:2F:D1:EE:EE:FD:64:57:59
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 01974EC56131C0F9D5355B7CCB702E81A877
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 066A
Signing time: Sun 08 Jun 2025 09:00:47 +0000
Manifest this update: Sun 08 Jun 2025 09:00:47 +0000
Manifest next update: Mon 09 Jun 2025 09:00:47 +0000
Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: 15xry9hTgalZLHfl7emP/AGPEHw60k/SKANLQ75Z+/4=)
2: FwjOhi182_59p8dwQga5XgkbJ0s.roa (hash: Mc8kDGGDUHY1tIZcCKRSsVLGZ6kIEWbGczkswWitHog=)
3: tFuBusypscfP0op8t0fbvhVLTp0.roa (hash: pms99WF44PQkWw+lLwCckChT1mv5Etpr0MeX5NnHJWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:61:31:c0:f9:d5:35:5b:7c:cb:70:2e:81:a8:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Jun 8 09:00:47 2025 GMT
Not After : Jun 9 09:00:47 2025 GMT
Subject: CN=d6a2cec15aa16e8e22ae611d2fd1eeeefd645759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:78:17:93:85:3d:22:fb:4b:96:75:3c:a8:6f:
c9:02:db:e4:fd:17:ae:c7:a3:c7:69:92:59:ae:ad:
05:b6:38:eb:dd:bf:67:b4:04:b0:9f:ae:3a:24:af:
70:74:b5:7f:fc:93:54:93:e9:68:b8:58:76:8e:44:
03:2e:ff:8b:a8:08:57:35:aa:ff:01:b1:72:9b:c1:
61:90:46:97:4b:cc:88:23:3b:c5:16:9e:0b:55:aa:
59:1e:c0:34:c0:4c:5d:2a:f9:93:65:35:78:ba:53:
c1:e4:d8:52:8e:39:55:60:f6:cb:a7:0f:e9:ba:a5:
f8:6e:1f:08:0d:8e:52:b7:c4:f2:bb:12:5d:77:55:
c5:14:c9:32:3c:41:97:e9:4c:b5:b9:4d:42:c0:d1:
b1:bc:1f:7d:50:65:b5:22:32:64:e2:3a:3d:3a:b5:
2a:2f:e8:55:58:62:a4:05:5f:d7:c5:76:22:39:3d:
3f:fb:37:a8:cb:41:6b:c6:d2:21:ca:c1:5c:1a:7d:
c9:dd:db:ad:26:36:20:28:37:49:54:d4:f1:dc:a7:
2d:45:27:f3:c0:58:dd:5e:f5:84:f0:12:d5:16:7f:
f7:9c:71:e5:0f:74:dc:ec:21:93:8a:67:dd:fc:1a:
ef:e6:bd:30:e0:21:b3:6f:2e:ed:f1:18:81:c6:0e:
d1:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:A2:CE:C1:5A:A1:6E:8E:22:AE:61:1D:2F:D1:EE:EE:FD:64:57:59
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:7a:0f:40:47:8b:a0:d4:23:4d:16:a4:77:a4:74:9d:49:5a:
7e:ae:ba:41:55:52:a2:51:7b:75:a8:64:6f:33:2a:3d:a0:73:
a3:d4:bd:e5:8d:bd:bc:88:0d:8f:21:d0:8d:53:17:1d:03:38:
e4:8d:e7:39:4c:2e:66:41:a8:ae:3b:b0:32:48:38:ca:0f:20:
55:97:84:40:3c:0d:8c:af:2d:d2:7a:68:00:44:a4:50:b4:27:
e7:0f:17:38:00:a6:aa:3f:55:96:c1:11:ce:b8:99:d5:ef:28:
d2:15:a0:5b:02:41:ee:af:94:47:69:b6:c2:9d:44:7f:7b:29:
ec:cb:f7:a5:ec:dd:bc:31:a3:d9:b7:05:74:af:ab:f0:46:f2:
48:ab:ca:ad:71:ad:c2:01:f6:47:5d:26:fe:54:97:37:6b:17:
37:df:31:4f:fb:06:72:81:90:11:3f:66:33:7b:00:7c:6b:0f:
2a:59:6a:d9:e8:10:86:60:3d:2d:ee:01:f9:73:8b:f1:0e:6f:
6f:1d:d4:c8:05:c7:0e:8d:fa:13:28:b2:b7:0e:14:4d:5c:7b:
ba:47:fe:a9:b6:54:ed:3e:e8:8c:60:a5:68:66:4a:6f:f6:e3:
83:5f:e7:4d:71:10:da:8c:ac:68:f1:48:2e:be:60:b7:04:59:
c9:17:47:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 11:56:09 2025 by rpki-client