Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: 8GX52goU+/Dc4pDF9MZ+YC9fQp6snoZMS1OASn9x1oI=
Subject key identifier: F0:42:1A:EC:03:B7:13:EE:4F:97:51:23:73:42:28:F8:1E:DF:F5:16
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 019755A356F527BABB8580BBA66793525752
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 0F93
Signing time: Mon 09 Jun 2025 17:00:57 +0000
Manifest this update: Mon 09 Jun 2025 17:00:57 +0000
Manifest next update: Tue 10 Jun 2025 17:00:57 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: Vo1m5jJHiur0h7wZm93Cd2v5l3XWkkC8U2K/k2848XA=)
2: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (hash: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:a3:56:f5:27:ba:bb:85:80:bb:a6:67:93:52:57:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Jun 9 17:00:57 2025 GMT
Not After : Jun 10 17:00:57 2025 GMT
Subject: CN=f0421aec03b713ee4f975123734228f81edff516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:fe:1b:d7:c5:5f:39:65:65:7f:bd:6b:a0:64:
23:38:7f:f8:87:b1:1d:40:47:de:37:4f:45:2b:3a:
c5:d6:78:af:5f:43:d2:17:48:33:8f:c2:81:ba:e4:
d4:9a:93:87:b7:b4:20:03:33:53:74:7e:f3:87:da:
65:01:ac:09:28:87:70:01:19:09:8f:20:9e:ac:d3:
01:c6:b8:e6:ce:9d:da:11:05:98:61:98:df:29:34:
3c:3a:86:20:28:a8:61:0a:ad:2a:89:90:db:11:2d:
c9:69:95:ee:93:5a:ea:7b:fb:c4:62:2a:56:6e:ce:
16:c8:c2:50:ab:03:6e:37:e9:14:f3:63:9a:76:74:
09:88:19:95:95:44:98:9a:95:98:bd:79:5a:27:39:
1a:0c:25:c8:f4:71:de:f6:99:89:8c:b2:e7:ae:5d:
38:15:ef:82:c2:9c:5a:14:8d:78:af:16:21:89:97:
61:bb:d7:30:09:2a:45:9f:2a:c9:f9:24:d6:ab:67:
ac:95:7f:e1:97:32:3f:5b:ea:47:f8:a6:e4:76:8c:
88:22:82:43:2d:3d:2d:5a:f8:c6:99:44:76:3a:7d:
93:5b:2e:1e:60:4f:1a:97:21:28:d4:95:df:5e:30:
46:e2:4a:ff:f9:9f:a8:b5:03:ac:a0:3b:98:ba:89:
e1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:42:1A:EC:03:B7:13:EE:4F:97:51:23:73:42:28:F8:1E:DF:F5:16
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:6b:c9:2b:32:91:a1:94:75:20:96:44:14:0c:23:d4:33:f7:
2f:f4:35:a3:b5:0f:fb:28:b6:6e:64:00:ad:04:ee:10:ea:2e:
6e:4a:e6:08:6c:d3:41:88:81:16:bb:36:db:91:f3:12:a9:a6:
68:2f:28:19:ce:57:d2:10:4d:02:83:11:91:55:7a:26:67:77:
33:b6:17:f8:86:fa:de:e2:07:1b:bd:10:9c:97:4a:1c:7f:30:
ec:84:87:4c:97:34:62:70:86:25:63:8c:86:8c:32:3b:8c:0e:
50:3a:62:21:f8:40:8c:6d:29:6c:50:5c:f4:c0:a0:3a:af:3d:
8f:f4:fb:b9:1e:22:45:53:c5:16:2b:b6:9a:09:ae:1f:e3:4a:
c3:14:7a:f4:b2:5f:3a:c7:be:05:76:83:f0:ea:51:c9:8a:c0:
81:f2:bd:06:b8:fe:93:bb:5a:f5:12:b9:6e:3e:9e:ae:c3:0c:
52:36:93:9d:a9:c6:7c:07:86:67:80:cc:01:85:75:ae:02:0e:
98:8b:ed:a7:fa:2f:38:77:5e:9c:16:24:6c:8d:69:8b:8f:1f:
69:fe:27:cd:37:7f:e2:04:03:24:14:db:2f:84:a3:8d:32:cb:
ec:f9:32:e4:f3:57:11:0c:2f:62:bd:98:f8:cb:f6:3e:84:e6:
b9:ae:a9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 20:59:07 2025 by rpki-client