Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: oyidaHemq3FfvNK+Telbtd8czb85w9+sZE3rk1XjV8E=
Subject key identifier: 80:B3:2C:74:2B:3F:76:8E:D4:66:3F:D3:54:56:D0:3A:39:16:BB:BE
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 01975AC95DF1747E36B0857FDDDD3C625EA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0AF2
Signing time: Tue 10 Jun 2025 17:00:35 +0000
Manifest this update: Tue 10 Jun 2025 17:00:35 +0000
Manifest next update: Wed 11 Jun 2025 17:00:35 +0000
Files and hashes: 1: 18pU9OUJZfEjtQtM3d6KCEE-wf4.roa (hash: g9Yx6RdVIwFFC/gP3XLwi8dipV0AyWlMkba67EAqwI4=)
2: f2nWyu3vigJSlBOetOrjZwH1G1A.roa (hash: UMryrqtW8NDhWGWT0rJw80JqEFYALJXz4j6oSIXBhd4=)
3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: 1m/HYMzPLxWW/qQ/5vMHx8HP2wHXp8dhezsewKIb3Bo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 14:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5a:c9:5d:f1:74:7e:36:b0:85:7f:dd:dd:3c:62:5e:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Jun 10 17:00:35 2025 GMT
Not After : Jun 11 17:00:35 2025 GMT
Subject: CN=80b32c742b3f768ed4663fd35456d03a3916bbbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ba:53:22:90:d1:b7:ef:38:76:66:86:75:15:
34:47:57:56:2b:e8:cb:d1:5b:c7:87:5e:e2:99:99:
42:f4:4b:ec:f4:4f:eb:ce:15:24:de:2a:24:49:e1:
75:46:57:75:87:eb:f1:fb:c5:1b:90:73:6f:95:b6:
c0:83:e9:50:57:df:5c:90:dc:5e:b5:b7:95:d8:f4:
76:27:cf:e5:02:2d:6c:9f:4e:39:54:73:dc:c7:ef:
e5:d1:83:db:54:bb:07:12:87:f1:91:46:39:35:50:
d9:ec:95:c5:69:02:05:d5:75:a5:9f:c1:a4:19:f4:
37:e0:95:ff:92:46:e2:2b:1c:9a:b9:30:d8:e6:02:
1e:4a:aa:9e:1a:27:09:e7:de:cd:79:9b:19:d1:4c:
db:e4:57:7c:85:c0:5b:02:67:c9:ec:32:38:51:30:
20:8a:1a:e9:33:86:ec:47:78:10:72:23:35:2f:1d:
e7:20:cf:67:7c:75:88:64:ad:98:b2:24:c6:20:6e:
34:e4:7d:f4:0a:a6:f4:b8:3c:ff:56:a6:d1:34:bb:
19:10:a4:99:fa:31:b7:c8:fe:a0:fe:36:c5:91:6b:
42:32:8d:f4:a0:f6:d5:68:6f:bc:9d:b6:7c:62:38:
a4:18:c2:0f:b1:a0:3c:6d:3f:86:bf:81:32:d8:fa:
83:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:B3:2C:74:2B:3F:76:8E:D4:66:3F:D3:54:56:D0:3A:39:16:BB:BE
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:bb:cf:0a:76:a4:ab:5b:38:0c:be:64:82:08:87:96:29:72:
d7:1c:5a:32:e3:61:3f:3b:2a:f1:cb:0c:d1:cb:fa:a0:3c:7d:
de:1f:19:3d:a4:62:e3:25:cd:15:72:35:b4:7c:9e:80:2b:df:
41:36:4a:5f:5d:1d:9a:e4:02:1a:80:92:34:03:63:32:31:02:
dd:27:07:02:29:d2:33:f5:4c:e8:aa:30:48:4a:ab:59:bf:96:
4f:ff:d7:c2:f0:5a:78:11:05:0c:db:23:08:22:24:3b:8f:8d:
c9:4e:2d:da:55:46:fe:3e:74:f5:ae:8e:8f:cb:58:66:00:c7:
73:75:89:b9:3a:0b:f3:e3:7e:4c:f1:b6:95:84:6c:81:12:01:
88:8a:33:04:32:26:d6:db:1d:6f:49:13:e8:70:40:05:d5:1d:
0e:10:ea:c5:ce:f4:07:80:2f:51:4a:32:83:35:e4:aa:47:e1:
44:f7:36:28:df:bd:99:1c:86:f1:dc:ab:6b:15:3c:ca:5f:85:
00:71:6f:2d:5e:c9:95:f6:72:9c:fb:15:e5:f2:3e:ef:50:db:
ef:b6:db:38:02:c0:9f:4c:47:47:5f:6c:33:82:e5:70:4e:82:
b7:25:7f:33:85:7c:7e:59:8a:c3:01:3d:46:cb:23:56:4f:41:
4b:c6:fe:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 20:15:10 2025 by rpki-client