Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
File: 8jgjdZZpSOIWiOi6E4OkowngVi8.mft (raw, json)
Hash identifier: LajNrisNzWehwFS3UuxfpDRalOBCbk93S77h6tF0IsI=
Subject key identifier: 8B:74:ED:ED:BF:BC:AE:EB:EE:09:AD:74:A6:0B:EE:B0:F6:D9:97:63
Authority key identifier: F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
Certificate issuer: /CN=f2382375966948e21688e8ba1383a4a309e0562f
Certificate serial: 0197500EA01E43D538267769D5690F8A4ED1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
Manifest number: 1580
Signing time: Sun 08 Jun 2025 15:00:25 +0000
Manifest this update: Sun 08 Jun 2025 15:00:25 +0000
Manifest next update: Mon 09 Jun 2025 15:00:25 +0000
Files and hashes: 1: 8jgjdZZpSOIWiOi6E4OkowngVi8.crl (hash: LcyPxzxv8kf2P8JyQlS3ajlqHi0Q6n8J5I8KE/PcRIw=)
2: K1nEMmqR-bv_HJOMVOAQTlZLbDU.roa (hash: W5Jwdvi7etvP6GxGLNbBoK0ap2sodrYQoCXcswND0as=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:a0:1e:43:d5:38:26:77:69:d5:69:0f:8a:4e:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2382375966948e21688e8ba1383a4a309e0562f
Validity
Not Before: Jun 8 15:00:25 2025 GMT
Not After : Jun 9 15:00:25 2025 GMT
Subject: CN=8b74ededbfbcaeebee09ad74a60beeb0f6d99763
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:8d:31:e7:89:be:84:eb:ca:73:66:31:81:
c9:8b:4c:65:c2:3b:2f:69:68:d0:24:60:f2:63:71:
25:68:ae:f2:46:10:9f:5a:51:59:98:d3:bb:cf:6d:
4c:b2:0a:12:62:5a:31:e0:c0:e7:85:4e:b1:8b:e6:
0e:34:43:79:d9:79:a3:4c:ac:f7:2d:60:8a:0b:01:
3b:7e:bc:71:87:04:fa:c7:cd:84:88:63:6a:d5:61:
ad:60:ef:15:95:9b:a6:b7:47:d7:57:19:cc:7c:04:
64:fa:a4:cb:aa:a5:a0:80:f7:2c:1b:d0:a4:e6:41:
be:75:4e:f4:d8:dc:e6:b8:ab:4b:bb:c8:79:df:97:
99:53:e6:32:f8:e5:67:1f:a9:6b:8e:6b:d9:64:1e:
e2:60:b5:75:a1:54:50:4f:55:64:1f:60:10:4d:9c:
a0:ad:6d:32:87:a0:3f:dc:e4:5e:86:ab:1c:cb:bc:
a4:45:c9:3e:81:12:f9:2c:3b:59:c7:c6:24:e5:65:
3f:b3:07:1e:1f:be:41:14:1d:90:b5:66:d0:c6:c5:
e8:01:b3:74:d1:4e:32:e4:d8:2e:a0:8c:38:78:8a:
b5:2b:00:e9:d2:bf:26:50:f7:53:4d:b3:36:f4:23:
70:e6:be:40:16:70:76:05:db:a8:c4:a7:5b:e4:86:
16:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:74:ED:ED:BF:BC:AE:EB:EE:09:AD:74:A6:0B:EE:B0:F6:D9:97:63
X509v3 Authority Key Identifier:
keyid:F2:38:23:75:96:69:48:E2:16:88:E8:BA:13:83:A4:A3:09:E0:56:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jgjdZZpSOIWiOi6E4OkowngVi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ad0f1a-6b94-4e0d-8a4a-d2fd9ffc31bf/1/8jgjdZZpSOIWiOi6E4OkowngVi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:4a:1d:70:9b:a3:f0:ab:ce:32:3c:84:a7:dd:29:4c:c7:a3:
79:49:94:aa:15:dc:d1:8c:91:49:6f:da:49:65:7d:f0:70:0e:
59:4b:c5:b3:4a:df:8f:6e:f3:5d:5e:21:a4:b5:07:ad:75:51:
29:1a:2f:c5:e9:76:37:15:9f:92:e2:f3:8b:81:7a:5c:77:e8:
5c:08:07:e4:d1:4a:76:29:b6:85:c9:83:3c:aa:9f:04:a0:3e:
71:4c:aa:27:a6:64:c8:f7:dd:f7:78:5e:da:e1:f9:28:62:2b:
34:f2:71:52:b6:40:87:68:ce:6b:17:a8:a4:53:82:09:01:3c:
04:e7:b9:e9:b8:da:b7:cb:9b:20:e3:c9:87:d1:fc:9d:4f:52:
d2:9d:aa:9c:20:9d:ec:7b:46:ba:6a:17:e3:76:d0:37:0a:55:
43:8b:9b:8e:c0:54:9f:bc:58:47:86:b2:14:30:16:33:11:b9:
89:b4:50:2a:65:79:6c:c5:82:80:7f:74:34:92:e6:dc:62:35:
c6:33:4d:e9:e5:8e:da:c2:5b:21:3f:e3:dd:d8:a0:1b:51:a5:
ea:49:f8:e0:46:3b:86:27:70:48:6f:c5:a1:1f:73:4f:58:ab:
73:f5:40:8f:ba:ab:27:7d:3e:ca:fe:39:3b:db:ea:a4:b2:ec:
01:fd:01:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:51:09 2025 by rpki-client