Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: g0vuPhR41bj/rmGnb7z332/YL9g+C2jWfnWUP5ScvGE=
Subject key identifier: 8E:60:41:98:23:19:D8:B4:5F:FF:24:56:C6:92:2D:0B:FD:58:93:7B
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 01974967E9D6C76AE01F7F744056FF04050C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 057D
Signing time: Sat 07 Jun 2025 08:00:36 +0000
Manifest this update: Sat 07 Jun 2025 08:00:36 +0000
Manifest next update: Sun 08 Jun 2025 08:00:36 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: inGe9Bmza0rM+HpECIlm75LCmCHCTsl44S1zgEHi7GM=)
2: SAkp88S54aJN6C-GCtNeqgpkjzs.roa (hash: xdHHAbJE3WiWjdXV3cBquprUR130i7lr4362iYiFT8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:e9:d6:c7:6a:e0:1f:7f:74:40:56:ff:04:05:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Jun 7 08:00:36 2025 GMT
Not After : Jun 8 08:00:36 2025 GMT
Subject: CN=8e6041982319d8b45fff2456c6922d0bfd58937b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:44:09:48:51:67:f1:51:bc:8d:3e:2f:c6:e4:
59:17:d1:38:4f:f6:b7:ec:e4:64:b9:24:6b:72:f1:
70:54:47:01:d9:10:3f:20:26:e8:23:fa:49:d1:09:
97:07:64:9b:50:8b:e5:5f:42:94:69:8a:0b:ad:c9:
ef:3b:a0:64:3b:60:3f:8d:68:25:f2:df:6d:47:22:
36:78:4c:aa:c5:22:94:17:15:09:19:3b:ef:4a:2f:
23:a5:76:87:0f:d7:1c:2f:66:b7:33:c6:10:d6:84:
52:80:21:7c:a6:6f:b6:64:01:58:a3:78:fa:1f:a3:
e6:c9:fe:f1:0d:3c:26:9a:84:d8:60:1e:cc:b6:81:
67:c7:20:10:11:a6:07:f9:6d:d9:e9:4d:7d:64:32:
31:4f:73:2a:9d:47:71:ea:f7:8a:5b:57:64:0d:c8:
5a:3b:fd:7f:4a:a5:d2:45:90:c3:3b:2b:88:a5:5c:
76:fd:d0:4e:98:ca:f8:25:76:b8:7d:f9:eb:a6:87:
00:9d:31:e8:fc:f7:b5:9b:8e:11:e2:98:f1:1e:8a:
82:1d:80:36:6a:d9:77:e4:60:d5:9b:a9:ca:ea:45:
54:70:4d:4d:87:a7:5e:5a:9e:a4:96:a6:b6:e7:b4:
85:85:1b:c4:a3:c4:a2:0b:c9:62:11:71:3a:e2:66:
8c:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:60:41:98:23:19:D8:B4:5F:FF:24:56:C6:92:2D:0B:FD:58:93:7B
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:ba:9c:4a:07:00:e2:b6:af:97:c5:5f:e5:58:02:b4:52:80:
0c:f0:d6:9d:66:26:a8:eb:a7:c4:43:59:e3:52:63:80:52:7f:
b1:e3:48:92:75:c5:e2:68:ab:0b:ea:58:b2:16:d1:7b:e2:75:
6a:43:13:9b:f9:19:47:db:33:ed:4c:94:a4:67:4f:32:0b:26:
db:a6:20:a0:8d:5e:32:a1:5d:bc:7b:65:27:5c:ee:6f:dd:36:
ba:55:ac:c4:ce:d5:dc:15:52:a1:60:6c:c9:e3:8e:87:5c:13:
c2:68:a0:77:9b:e4:3e:48:7b:d6:80:26:be:04:0e:08:e1:1e:
cc:a7:a2:d1:f0:d4:94:33:7c:78:44:1b:df:33:48:4b:bd:b5:
c1:89:ce:ee:73:83:ac:bf:18:71:4c:e6:02:2d:ef:95:ab:67:
b5:12:4c:5f:4d:22:3a:26:32:1b:28:dd:c9:0f:ad:50:36:0d:
08:09:d6:1b:01:7f:a3:30:75:05:52:a8:da:cf:de:ee:7e:eb:
11:48:29:00:e3:e6:1a:66:d1:e3:b0:c1:19:24:34:f4:39:54:
ed:ac:ea:36:f9:d5:6f:9e:e6:44:f3:43:b0:0a:11:d7:64:73:
ad:83:96:37:de:3c:e4:b2:32:e3:96:59:43:56:ec:52:83:22:
ff:1a:03:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:12:16 2025 by rpki-client