Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File: 8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier: ktTmEOiwEOxE6WvZFmiDT5Xm14eyqkcerb9O1vVIw+Q=
Subject key identifier: 6A:EB:22:74:A8:E6:4B:81:97:0E:87:83:E8:98:D4:75:CB:5B:E8:D6
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 01974E577DC662E98058A30D8B35E145C569
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number: 146B
Signing time: Sun 08 Jun 2025 07:00:46 +0000
Manifest this update: Sun 08 Jun 2025 07:00:46 +0000
Manifest next update: Mon 09 Jun 2025 07:00:46 +0000
Files and hashes: 1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: nbuhSOnCYAdhyMNePnQtz5r8tm2Yeqh6BQNa4icvdBs=)
2: bKPhCw0mFqwfHuOY5bTkew_cDWA.roa (hash: GZO9dwOguzhoWcajFIoo6bMBVjK4nlEVTDqTZEZzar4=)
3: u_s4QKsF9p1kSN0KedlqNHJpJkI.roa (hash: 8YDGRlWAcN7f5DRHYPeywi/SAyIqYgv/xJQxk+e27Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:7d:c6:62:e9:80:58:a3:0d:8b:35:e1:45:c5:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: Jun 8 07:00:46 2025 GMT
Not After : Jun 9 07:00:46 2025 GMT
Subject: CN=6aeb2274a8e64b81970e8783e898d475cb5be8d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b4:1c:eb:50:b0:d8:9f:df:47:96:aa:db:b2:
7f:43:10:f8:57:8a:49:30:07:35:b8:d9:64:1b:6f:
58:bd:d5:83:fb:0f:e8:b6:8b:66:f1:ad:dd:56:cb:
03:11:71:1d:2e:2f:3d:61:cf:db:d3:a5:98:a7:90:
18:1b:0a:c8:29:b9:fd:ae:75:fa:53:fa:fc:29:df:
13:f4:2e:2d:57:86:a9:9d:12:14:30:44:fa:33:d2:
8f:2b:91:d4:51:5a:a4:8d:23:32:71:24:11:b7:bb:
d2:83:87:df:d8:0f:bc:01:5c:83:6d:e1:4c:8e:a0:
76:64:ba:fc:ed:e6:c1:35:8d:40:98:d4:ff:08:ae:
da:ae:20:bc:8b:e8:5f:cc:3f:a9:0c:6d:b2:3d:72:
d1:51:d1:f3:ed:cb:18:29:a3:15:89:6d:b4:d3:1f:
6e:59:ac:3d:b4:f7:e5:eb:ed:a0:8b:84:e3:73:48:
ac:ae:19:04:3c:5d:02:bf:d8:91:26:69:89:3b:02:
98:25:ce:bd:ae:d0:b3:bb:5a:06:b0:62:a2:80:d5:
6b:71:e8:98:72:3b:4b:51:74:46:ba:51:76:e0:29:
8e:9c:32:d3:56:ef:41:1f:71:48:32:39:71:c0:2f:
de:a0:9f:5c:63:89:7e:c8:0e:3d:7a:b8:ed:bc:41:
c7:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:EB:22:74:A8:E6:4B:81:97:0E:87:83:E8:98:D4:75:CB:5B:E8:D6
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:ba:ba:01:8b:6a:a6:84:85:83:80:b2:26:1c:48:7d:4e:51:
4f:39:e1:0c:86:3e:d8:f5:e5:6f:07:0a:fc:ab:85:fe:c4:22:
89:1c:e8:5e:6a:79:28:5e:e8:89:98:d6:ff:d6:21:98:f2:65:
ed:e1:d9:80:5c:43:31:c3:44:31:18:4c:37:0b:8b:dc:ff:f4:
e6:2e:bb:9f:e5:c9:ce:65:d5:82:b3:ec:bc:e5:97:62:ea:25:
4f:69:96:0e:02:92:4a:fe:5e:38:ac:d4:6f:0c:da:11:40:11:
12:c7:e4:d4:67:f0:77:d7:a2:09:78:b7:94:b3:fc:23:40:59:
57:de:fa:1f:20:db:b1:92:8d:a0:4d:3c:f7:2d:ba:30:1e:cf:
66:87:05:1e:75:96:30:e1:67:f4:58:71:6d:0e:1e:8e:da:07:
99:03:4e:f5:b1:38:7f:c7:49:83:87:64:4d:cf:a2:29:1a:d6:
c8:b4:b2:e2:4a:52:9c:a0:b8:5d:10:fe:5f:04:fb:62:aa:d8:
bc:51:fa:fc:ba:00:24:ea:62:54:36:22:89:c6:69:32:ac:3c:
9e:35:fd:4d:b2:9c:f6:b2:49:e4:b9:b0:ba:59:d7:e9:62:2a:
7c:3a:44:0b:34:82:20:b3:5f:11:98:23:c0:59:a6:97:5f:7b:
8c:98:51:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 12:49:41 2025 by rpki-client