Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: Rl10P6xO77LnmM4VE1gmulK0WCRgQWL4aD7hdW07vxQ=
Subject key identifier: 5E:91:CB:FF:68:BB:19:D0:DD:8E:31:3E:34:06:0F:B7:AD:09:A6:B0
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 019748C3608E507CB7F93C029B555BE44B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0C73
Signing time: Sat 07 Jun 2025 05:00:53 +0000
Manifest this update: Sat 07 Jun 2025 05:00:53 +0000
Manifest next update: Sun 08 Jun 2025 05:00:53 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: wrpVBIjYEehcl7mv57l22D1R4tLvOlp9CdzZvgcPTrA=)
2: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (hash: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:c3:60:8e:50:7c:b7:f9:3c:02:9b:55:5b:e4:4b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Jun 7 05:00:53 2025 GMT
Not After : Jun 8 05:00:53 2025 GMT
Subject: CN=5e91cbff68bb19d0dd8e313e34060fb7ad09a6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:39:ba:a2:5b:9c:8c:2b:48:87:3c:00:37:7f:
01:78:85:70:a9:9b:76:ab:bf:39:49:ff:e4:2a:04:
51:0a:ca:fa:c3:2d:3a:06:65:49:e8:8b:dc:06:e4:
fd:b6:31:ca:59:b4:b9:18:3d:d4:8c:2a:2b:5e:ac:
34:a5:14:1c:1d:63:b1:70:de:c6:27:ec:14:af:8e:
73:41:44:dc:7c:bd:d8:19:b8:d1:6d:99:83:5e:18:
17:ca:01:b0:75:33:9d:f3:25:74:58:a5:85:51:94:
3b:26:14:50:f7:06:92:d4:65:46:64:5b:90:fd:7b:
ea:34:d7:9f:4b:04:3d:a3:fc:f3:64:b8:2c:bf:df:
fa:c9:aa:6e:18:86:2a:9f:d3:9e:8f:01:6f:9e:19:
fa:a2:fa:bd:e5:6f:86:13:af:3f:89:76:de:7c:b9:
ef:ac:0d:44:68:ed:65:7a:bb:5a:1c:f5:5b:e5:ed:
f0:1f:f6:e6:1e:35:f3:2b:8c:ac:48:0b:a0:fe:ab:
1b:f0:b9:40:94:4b:42:80:1e:bf:28:70:d2:33:0b:
08:ec:9d:71:7a:01:d4:ab:e2:53:e5:db:c6:e7:13:
dc:58:c5:b3:9a:4d:37:32:d2:6c:f8:d8:14:bf:98:
92:57:43:f3:32:45:c1:19:6a:37:b5:78:b6:92:ee:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:91:CB:FF:68:BB:19:D0:DD:8E:31:3E:34:06:0F:B7:AD:09:A6:B0
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:8c:08:b2:19:3a:03:b3:db:65:48:c9:e5:45:c7:5f:57:20:
e5:8c:49:7b:bf:31:02:1a:a9:88:92:bf:28:ae:cf:1f:19:98:
df:1d:82:f9:65:cf:bc:eb:0b:8e:71:97:ce:6a:48:92:64:b9:
2b:f2:2c:6e:3e:f4:2e:f7:8a:fa:b1:f4:3f:a0:c1:78:47:6c:
00:23:80:48:cf:d7:3c:54:13:bb:1c:cc:d5:f7:55:36:59:7e:
f4:39:51:3b:98:8b:87:77:63:ae:f2:19:86:fd:24:83:66:16:
6f:d9:d0:7e:95:ef:95:0b:b7:95:fc:51:56:cd:f3:c0:0a:12:
2d:74:66:8e:5c:0d:a1:8f:85:f7:0a:fd:6e:49:6a:45:ae:29:
82:81:dc:43:2b:1b:ca:fc:2c:e6:43:74:4e:f7:d4:38:45:61:
ca:db:27:b0:fd:4e:00:6d:ef:23:23:bb:06:36:81:8d:af:d5:
e4:a7:e9:54:ef:11:53:35:32:fd:c2:df:3d:0e:34:de:67:20:
61:4d:07:76:f7:ad:98:6b:c9:86:17:44:9b:4c:55:34:bc:29:
60:1f:4b:ac:06:b8:a6:b4:1a:df:3e:05:3f:9a:82:85:b7:47:
24:ba:97:4c:6d:b2:18:d5:67:0e:1b:e5:5a:d9:e8:0d:ae:87:
5d:79:cb:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:08:12 2025 by rpki-client