Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
File: i42FmAZNtajts6YIQGTNKhrYxuM.mft (raw, json)
Hash identifier: FoC4x395NtPy5c8+7/ne8gW4zBk6v32AvV0dfPNHFaQ=
Subject key identifier: 31:A0:D0:E6:B1:47:8B:3A:BE:4A:BA:1E:8A:E5:A2:89:E7:F6:57:04
Authority key identifier: 8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
Certificate issuer: /CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Certificate serial: 019756ECA050A6CB136AEA28941935745BBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
Manifest number: 0AF0
Signing time: Mon 09 Jun 2025 23:00:37 +0000
Manifest this update: Mon 09 Jun 2025 23:00:37 +0000
Manifest next update: Tue 10 Jun 2025 23:00:37 +0000
Files and hashes: 1: 18pU9OUJZfEjtQtM3d6KCEE-wf4.roa (hash: g9Yx6RdVIwFFC/gP3XLwi8dipV0AyWlMkba67EAqwI4=)
2: f2nWyu3vigJSlBOetOrjZwH1G1A.roa (hash: UMryrqtW8NDhWGWT0rJw80JqEFYALJXz4j6oSIXBhd4=)
3: i42FmAZNtajts6YIQGTNKhrYxuM.crl (hash: Rod8sOM8Hy/XzoZmZOopwwgqnFUZ5jmTfV6GRMnX1wc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 19:25:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:56:ec:a0:50:a6:cb:13:6a:ea:28:94:19:35:74:5b:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b8d8598064db5a8edb3a6084064cd2a1ad8c6e3
Validity
Not Before: Jun 9 23:00:37 2025 GMT
Not After : Jun 10 23:00:37 2025 GMT
Subject: CN=31a0d0e6b1478b3abe4aba1e8ae5a289e7f65704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:4b:61:2c:01:eb:a8:fe:9e:10:53:23:bc:82:
ca:fb:bb:39:c2:49:6a:35:48:75:cb:66:55:ef:3f:
b2:aa:d9:82:e7:0d:e7:10:26:0b:71:20:38:86:f3:
60:cc:30:15:f4:e0:bd:f7:79:8a:05:e2:c7:e4:c2:
77:1c:da:5c:20:04:61:4d:ee:60:79:a4:53:11:5f:
20:8f:47:2f:f9:0c:03:cf:9f:d2:25:bc:85:4d:2f:
f2:51:39:52:56:9e:a2:37:73:29:c1:4b:5e:7c:13:
84:44:aa:5a:85:4b:38:e6:3c:37:3e:90:a7:64:77:
00:e8:25:c3:4c:40:24:d1:9c:97:e5:c8:06:ab:0a:
b8:b3:07:cc:f9:de:88:1f:cb:6a:79:6a:11:9d:19:
0f:d0:99:61:53:64:67:4a:bb:90:57:b4:92:e8:f1:
31:bf:67:4e:6c:81:9a:6d:29:1e:5e:d7:d4:34:60:
13:72:63:7f:ce:e5:66:e7:12:b3:6d:e6:e4:a3:07:
93:d5:10:7d:c3:76:f0:47:88:ec:0e:f1:06:89:81:
a9:9c:bd:c9:50:db:df:b7:77:31:10:32:5b:1e:46:
bb:9d:85:df:6a:e3:65:fe:26:2b:36:7f:3a:3e:13:
0c:ba:d4:69:e5:c4:4c:bb:e5:23:20:81:8e:c2:55:
5b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:A0:D0:E6:B1:47:8B:3A:BE:4A:BA:1E:8A:E5:A2:89:E7:F6:57:04
X509v3 Authority Key Identifier:
keyid:8B:8D:85:98:06:4D:B5:A8:ED:B3:A6:08:40:64:CD:2A:1A:D8:C6:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i42FmAZNtajts6YIQGTNKhrYxuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/423e9c-4425-496e-b237-6b0ef9108688/1/i42FmAZNtajts6YIQGTNKhrYxuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:d9:37:ae:43:4f:8d:94:bf:aa:b3:67:dd:97:b6:6d:08:73:
4c:b1:9b:ac:c1:df:ff:90:70:db:d4:8b:20:e3:6f:d8:68:f9:
96:10:5f:37:2b:70:0f:26:83:92:37:8f:4a:14:a8:5b:e5:85:
d5:c4:8a:e9:33:3c:d7:a9:67:79:c8:99:7d:b9:ca:31:58:b9:
50:88:a1:24:c5:67:ac:78:01:9e:b3:2f:5d:d3:c1:ff:3c:a2:
85:65:52:71:3c:d7:c2:87:db:24:d1:20:72:d0:67:1e:88:67:
2b:80:62:ed:86:6d:8a:47:e3:ac:8f:6b:3a:fe:00:bb:af:03:
84:85:88:0a:c1:cd:b1:dc:0c:36:01:74:83:fb:a5:88:51:90:
6f:1a:80:8c:b0:84:c4:46:5d:ab:21:0c:21:50:04:28:d6:71:
81:c8:68:ad:c8:96:55:e2:52:b5:ca:9b:52:b7:39:9f:da:ea:
7a:06:38:38:ef:25:c8:f8:be:80:75:f8:58:4e:3f:15:77:a7:
0e:47:52:a5:d5:b1:a8:25:52:f7:26:38:14:c9:a3:2a:b9:d6:
5d:3c:c7:39:68:e2:30:55:c5:21:5d:a0:b1:3a:dc:22:62:6f:
89:db:d4:a4:9b:02:5b:7c:de:c4:93:ef:38:d3:05:24:92:ac:
b2:7f:0d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 05:30:59 2025 by rpki-client