Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
File: t8jfPaM5OL8bJF8cRHn9JN2flPA.mft (raw, json)
Hash identifier: amNUnN4amdDOcRGyJNnoHBqudnX8mv+vyzWN/EkLE64=
Subject key identifier: 8B:5D:B4:E0:1D:1D:D9:DC:C9:E6:D6:2B:55:C0:42:74:6B:24:21:B8
Authority key identifier: B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
Certificate issuer: /CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Certificate serial: 01975346EC3BA3192E7D0444664B724A027E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
Manifest number: 154E
Signing time: Mon 09 Jun 2025 06:00:46 +0000
Manifest this update: Mon 09 Jun 2025 06:00:46 +0000
Manifest next update: Tue 10 Jun 2025 06:00:46 +0000
Files and hashes: 1: rnBvIUiPG215g2G4TvJ3vJPLCJg.roa (hash: QymikogB0QXOb1awGtB0gQkLWC08JbHRqFZVMECKiDM=)
2: t8jfPaM5OL8bJF8cRHn9JN2flPA.crl (hash: 0qXHVsXmWqg5QkOJrHSgt4HUhR/ZMJ5jox82KReE/7o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:46:ec:3b:a3:19:2e:7d:04:44:66:4b:72:4a:02:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Validity
Not Before: Jun 9 06:00:46 2025 GMT
Not After : Jun 10 06:00:46 2025 GMT
Subject: CN=8b5db4e01d1dd9dcc9e6d62b55c042746b2421b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:41:68:e8:bb:41:30:5d:47:4d:f8:cc:1b:08:
68:14:a8:81:e2:38:c0:fa:ce:13:04:fc:82:51:78:
03:d9:fc:59:f6:f3:3a:8c:6a:e3:b2:ee:23:9b:6d:
08:7c:d5:da:e7:ec:e1:57:22:71:43:1c:54:7b:44:
39:eb:bb:66:fb:a5:8d:9a:41:38:fb:da:2d:2c:bf:
99:c1:1f:5f:24:6a:f7:91:80:b9:d0:b9:43:69:6e:
a7:f4:09:11:47:cb:08:57:ca:a0:b5:8e:92:86:6e:
87:17:00:f0:93:06:64:16:c5:da:83:f8:9c:b4:98:
7d:ec:08:51:52:73:80:96:55:ae:dd:a7:24:0a:d8:
69:25:98:00:87:e3:62:47:5e:c1:11:e6:3e:78:a4:
12:46:4d:99:e6:44:b5:86:5a:71:82:04:ec:b7:d8:
de:50:24:2a:f5:32:22:ae:49:f5:c6:ca:85:fd:62:
ed:2b:ab:7d:53:1e:c6:65:27:48:0b:f4:17:1f:81:
94:29:e3:ca:83:28:a3:0d:fd:3e:0e:18:39:b4:a5:
2c:fb:af:4a:46:19:c0:8b:94:28:02:89:e4:69:14:
b0:8b:57:9e:f3:06:9c:42:e6:f5:d3:14:04:7e:ea:
d2:57:dc:30:7c:9e:3e:7b:7a:dd:8b:ae:d9:79:b6:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5D:B4:E0:1D:1D:D9:DC:C9:E6:D6:2B:55:C0:42:74:6B:24:21:B8
X509v3 Authority Key Identifier:
keyid:B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e2:c2:b9:96:25:42:f6:41:93:71:03:72:db:bb:aa:45:fd:
f0:63:e9:cc:45:10:6f:9f:b2:50:72:ca:5f:c2:e6:93:30:1a:
3e:63:62:13:ad:73:b1:e2:f3:18:b6:de:c9:1a:06:30:cd:af:
08:34:fe:81:3b:1c:86:17:fc:99:69:10:bc:77:97:c7:ec:dc:
69:51:61:f6:03:aa:89:d9:1a:59:2c:72:49:51:a1:ca:39:5a:
b4:98:d1:b0:c7:5a:0f:c7:69:8f:75:38:d7:57:d3:7a:0f:d5:
c7:61:df:e6:73:c2:9b:42:8d:95:0e:34:94:78:0d:e7:ed:6b:
08:76:eb:ad:93:c7:0d:a2:cb:d7:ea:60:c4:b3:ea:1d:60:09:
ce:7d:14:e3:b7:2f:f7:cd:24:76:77:05:82:c6:e6:d7:2d:2d:
65:c4:ab:13:49:1a:17:97:a9:fc:85:f1:08:67:15:12:81:6b:
74:ed:b1:5a:36:87:7b:a5:69:58:a0:57:f3:2a:0b:77:a4:e4:
72:f9:3a:5f:65:f5:69:92:cd:d8:a8:4f:fc:be:e0:76:df:d8:
62:76:b7:32:63:11:6b:9e:64:a0:0b:dd:f3:1e:3e:0f:15:3d:
be:1f:24:78:72:d5:49:92:83:ce:92:94:f0:ba:65:06:ec:c6:
21:0e:8e:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 15:45:53 2025 by rpki-client