Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: /e4eRW35nHzmlwhCuZCY24/ug8ixjNODGlwGJmqgePg=
Subject key identifier: 71:75:71:40:E3:95:A7:1E:0D:0A:BA:6D:9F:59:E3:AA:3F:56:84:B8
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 0197665FAF65D6D9C4107EF753201FAD087E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0AF8
Signing time: Thu 12 Jun 2025 23:00:36 +0000
Manifest this update: Thu 12 Jun 2025 23:00:36 +0000
Manifest next update: Fri 13 Jun 2025 23:00:36 +0000
Files and hashes: 1: 18pU9OUJZfEjtQtM3d6KCEE-wf4.roa (hash: g9Yx6RdVIwFFC/gP3XLwi8dipV0AyWlMkba67EAqwI4=)
2: f2nWyu3vigJSlBOetOrjZwH1G1A.roa (hash: UMryrqtW8NDhWGWT0rJw80JqEFYALJXz4j6oSIXBhd4=)
3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: XscNtMuxv/s3zNjvv1Km/yen2GLzWIQ61wT5W2k8oh0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:5f:af:65:d6:d9:c4:10:7e:f7:53:20:1f:ad:08:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Jun 12 23:00:36 2025 GMT
Not After : Jun 13 23:00:36 2025 GMT
Subject: CN=71757140e395a71e0d0aba6d9f59e3aa3f5684b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:60:68:12:19:24:ef:66:ad:66:bb:2e:ba:9f:
86:d3:5b:54:08:a8:ec:58:84:a2:a9:c9:69:72:f4:
2e:aa:c8:5b:86:9f:cb:31:97:88:29:7f:07:08:05:
bf:da:c1:b9:82:80:1d:a5:39:74:55:b4:3d:ba:26:
22:db:02:18:60:af:e3:4c:9c:26:7e:e5:ab:a5:0a:
e0:81:b2:cb:b5:db:1a:b6:43:1a:20:c0:64:91:d7:
46:91:5b:d6:19:c8:96:f3:92:be:9f:a8:12:7f:62:
35:e4:45:6f:39:9e:c4:ba:af:e5:d9:f8:f2:eb:1e:
e8:14:18:47:8e:47:22:54:ac:18:fc:8c:b2:8c:21:
26:c0:33:b4:51:a6:36:20:ed:4b:12:22:64:62:90:
29:78:af:7d:f4:98:68:58:b6:a6:bc:a6:5d:48:32:
50:28:74:cd:73:82:c0:00:06:ff:a9:d2:ce:a7:a4:
10:31:54:79:50:7c:7d:ec:71:93:37:cb:68:1a:27:
97:86:5c:81:9b:6c:6b:7b:6b:23:c5:ae:30:24:60:
82:cc:94:f6:e9:13:56:b8:97:f0:0e:fd:b1:a8:36:
d7:e7:5a:3a:60:ea:32:46:13:49:a4:cd:7b:29:81:
18:18:48:a1:98:f1:45:a7:27:24:d8:b2:f3:a2:70:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:75:71:40:E3:95:A7:1E:0D:0A:BA:6D:9F:59:E3:AA:3F:56:84:B8
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:da:3c:58:81:fe:36:0a:bd:39:08:24:d7:20:16:f0:3e:06:
22:c7:bf:a1:15:17:9e:c0:3c:b0:f0:59:f0:b3:5c:13:8e:f4:
1d:32:6e:90:29:a3:9f:4a:dd:66:c2:6e:b1:82:f3:e7:e4:57:
0c:4a:11:08:99:52:75:8b:d2:18:cb:b3:10:69:11:37:85:97:
30:ba:1b:cd:f7:d3:23:fa:3f:5b:d4:ec:40:ad:ec:d4:c6:76:
c9:a7:39:8b:6c:61:a6:cc:2f:1c:71:73:2d:44:f9:89:6e:eb:
26:45:33:21:e0:f3:6a:2d:72:1b:66:bc:16:3e:99:a3:d7:9d:
81:e5:7b:5b:76:72:9c:71:97:9d:84:11:19:99:77:4f:49:de:
f4:8d:43:64:f3:eb:77:dc:1a:fa:37:b5:6f:84:4f:f2:3d:74:
38:c3:2d:af:31:a3:bc:e3:f2:f3:55:01:28:e1:64:e9:82:df:
0c:9c:fc:3e:a8:fc:7d:79:84:b8:ba:eb:f4:55:31:8a:0b:46:
4b:54:4f:5a:a1:3e:c0:ec:64:da:b3:6d:87:9d:28:f2:8e:7f:
46:ac:8d:15:7d:1d:61:93:9c:05:72:e0:cb:7e:64:66:cb:99:
0a:58:f7:17:8e:17:6e:3f:cd:37:29:7f:d0:66:8e:bf:e4:41:
b6:22:2e:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 09:33:45 2025 by rpki-client