Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
File: 8QtzTfT6au4S6pkGV7A1oWK0qeY.mft (raw, json)
Hash identifier: 8ohsbbc+A9sY4EPOL31HcVTdUUOmMIZL0U7o6dKunfY=
Subject key identifier: C1:64:61:F3:87:58:0B:0A:22:61:75:3A:2C:5F:51:82:58:6E:41:9F
Authority key identifier: F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
Certificate issuer: /CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Certificate serial: 0197542308BA6DA6560DDEC8E393745CEBE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
Manifest number: 7D
Signing time: Mon 09 Jun 2025 10:01:11 +0000
Manifest this update: Mon 09 Jun 2025 10:01:11 +0000
Manifest next update: Tue 10 Jun 2025 10:01:11 +0000
Files and hashes: 1: 8QtzTfT6au4S6pkGV7A1oWK0qeY.crl (hash: eh9OEFdfQWmvX4Kx52BQWc6/X/GOPK6HLVRUIL2XQIk=)
2: c13kxnbsyODzPHyzkeCp6V26ajY.roa (hash: 5unbD6+O2W5c+EmMfdgbVE1U7HYHEYdfAi2loQA1vSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:08:ba:6d:a6:56:0d:de:c8:e3:93:74:5c:eb:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f10b734df4fa6aee12ea990657b035a162b4a9e6
Validity
Not Before: Jun 9 10:01:11 2025 GMT
Not After : Jun 10 10:01:11 2025 GMT
Subject: CN=c16461f387580b0a2261753a2c5f5182586e419f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4e:20:3f:d4:ca:58:db:a2:cd:82:b0:31:b4:
2d:b2:96:9d:b7:94:e8:f7:fc:94:bc:23:17:ee:3b:
85:e7:05:eb:f7:e6:52:51:af:d8:85:18:d4:b0:72:
42:ec:cd:cb:24:f0:d7:e3:8a:7b:29:cb:01:cc:35:
f8:68:fd:bc:3a:f7:cd:45:08:c4:66:79:5b:67:56:
08:44:1b:d0:7f:56:ae:45:23:94:52:3f:5a:15:58:
d2:f0:f6:2f:60:3e:19:1d:17:5f:96:a3:5d:cb:aa:
84:38:68:c7:1a:1b:0f:32:2c:b6:05:65:ef:b9:6e:
1f:0d:41:41:bf:fc:ac:10:19:1e:e6:1b:6f:83:46:
a9:aa:0d:4a:5f:7c:c0:74:c0:6a:e2:b0:c2:aa:9d:
81:4b:04:c5:d2:b4:97:af:9c:eb:76:fc:f0:4c:d6:
61:b2:c6:06:40:fd:88:1c:d5:f0:d0:f0:90:2f:89:
6f:6b:89:b1:1d:46:ea:b9:85:0b:f1:54:49:88:b1:
81:61:d1:88:c4:48:92:10:f0:c7:28:48:c8:ff:74:
2b:53:44:91:c7:78:af:30:37:d2:c7:49:9c:1b:89:
f3:48:fd:10:02:42:44:67:8e:df:0a:26:54:ee:36:
36:c4:fe:b5:78:f7:2c:aa:71:63:4f:f9:cd:2b:1d:
b3:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:64:61:F3:87:58:0B:0A:22:61:75:3A:2C:5F:51:82:58:6E:41:9F
X509v3 Authority Key Identifier:
keyid:F1:0B:73:4D:F4:FA:6A:EE:12:EA:99:06:57:B0:35:A1:62:B4:A9:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QtzTfT6au4S6pkGV7A1oWK0qeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/02bd8e-2eb8-4515-956b-e15250392887/1/8QtzTfT6au4S6pkGV7A1oWK0qeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a4:e9:bc:9d:2b:0b:13:11:aa:df:9d:df:04:18:a6:60:cd:
8a:23:06:09:77:63:45:b5:ae:d7:9d:3d:b3:78:bc:41:0c:c2:
be:57:c2:5e:2e:9f:64:11:a4:b5:b1:86:4d:c7:3a:3c:96:99:
f5:ff:22:0e:42:72:1f:70:b9:b1:fc:07:a9:de:9a:83:62:d9:
f3:ef:28:ae:f3:e3:d7:88:d0:6e:bf:ee:f0:74:f6:e0:a1:01:
fe:d7:d7:7c:40:d5:35:03:8e:a2:2e:d9:67:22:2c:87:08:ae:
48:ca:fe:5f:b5:b5:a1:3a:ab:80:92:ea:e2:87:2b:53:6d:20:
d7:53:d6:18:f2:eb:d3:47:df:85:96:57:24:98:d7:89:28:11:
2f:71:d3:8c:71:b4:70:25:6f:ce:62:1b:74:40:b5:79:8f:3e:
41:75:a5:2e:c3:43:14:aa:39:fb:e2:21:e4:e3:67:e3:16:55:
b5:f4:da:a6:1a:9a:92:bc:78:8e:33:16:88:d3:19:52:47:04:
5e:fd:d1:f1:b9:29:fa:3c:de:12:0e:af:bd:80:7c:14:46:54:
1f:16:90:48:ff:1f:3e:46:0b:54:e8:7a:59:13:4d:4b:ee:1e:
6b:7a:06:ca:16:2a:a6:73:b9:a8:59:69:2d:34:c8:7e:b2:c3:
6a:e7:15:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 12:00:37 2025 by rpki-client