Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
File: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft (raw, json)
Hash identifier: RYL4Tanu9LxCEzgJM1F1jXHEh8Pbhlny91TPpcqn2dA=
Subject key identifier: 6E:2B:B8:F2:35:08:EE:6A:FE:31:E9:CB:A0:C9:CD:CD:91:5A:9E:21
Authority key identifier: F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
Certificate issuer: /CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Certificate serial: 01975C133382736C56404DB8EE75299F0C86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
Manifest number: 070F
Signing time: Tue 10 Jun 2025 23:00:51 +0000
Manifest this update: Tue 10 Jun 2025 23:00:51 +0000
Manifest next update: Wed 11 Jun 2025 23:00:51 +0000
Files and hashes: 1: 8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl (hash: +BltpT2Fx/dSizlrXDDVkRZYnO7LE5bjRcfeuulqooU=)
2: X6C0LQtGVvRd2CeSFuWYh98x4Js.roa (hash: EUGlTVUrEwtvjyoLAcB1cjNBUrDvFi8aL2LwEWKJh7U=)
3: o4RLvNlxcTjRoMHQG0NwWxkUYb4.roa (hash: B+fFcwV95+as9F86sHUOjXkwuPQBko5Sfhe+H4+0kBg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:13:33:82:73:6c:56:40:4d:b8:ee:75:29:9f:0c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c113413d0df5b8fa069011eeb109f067b5579a
Validity
Not Before: Jun 10 23:00:51 2025 GMT
Not After : Jun 11 23:00:51 2025 GMT
Subject: CN=6e2bb8f23508ee6afe31e9cba0c9cdcd915a9e21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a9:0e:bc:1f:10:ee:af:e8:33:01:32:46:44:
87:44:30:1a:b1:c2:8d:a3:5c:9f:43:df:3b:71:fc:
f2:c1:87:ee:cc:a5:4f:2b:60:46:05:f6:c3:71:0b:
47:74:c8:71:41:f1:4e:21:74:1d:18:19:e6:00:c8:
d7:47:03:8e:22:6f:f7:c3:05:c3:b7:87:2b:16:e6:
fa:31:22:fd:60:d2:0a:68:94:74:07:40:75:dc:d4:
07:03:a8:68:09:ae:f9:2a:10:4e:f6:08:13:68:8d:
7d:57:2b:ab:3a:0d:63:cf:74:a7:7e:ca:5c:0b:00:
f3:02:2a:c2:ae:01:51:84:05:2c:a2:c1:f3:59:76:
8b:02:33:89:05:18:61:94:a2:29:ef:af:97:bd:84:
80:58:c9:2e:89:e6:9d:6a:9e:3d:59:c1:8b:7b:6a:
12:18:01:1d:25:ea:da:94:69:88:5e:e7:2e:d0:c3:
0a:f6:bf:fd:b6:bc:9f:9a:d8:d1:f8:ca:22:26:b4:
f7:78:62:e2:29:59:5c:08:bf:d2:13:69:2d:02:cd:
49:3d:46:f9:d3:97:e2:81:e8:46:29:ee:14:54:4e:
d1:e2:68:4d:5f:f8:29:06:80:ab:ef:e9:c6:71:37:
7f:c2:a0:40:38:3e:c0:68:0c:dc:c5:6e:c3:d4:ce:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2B:B8:F2:35:08:EE:6A:FE:31:E9:CB:A0:C9:CD:CD:91:5A:9E:21
X509v3 Authority Key Identifier:
keyid:F0:C1:13:41:3D:0D:F5:B8:FA:06:90:11:EE:B1:09:F0:67:B5:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8METQT0N9bj6BpAR7rEJ8Ge1V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/c104c6-9b65-4d46-9e45-50261b11916b/1/8METQT0N9bj6BpAR7rEJ8Ge1V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:27:ad:60:7c:48:c4:d0:d8:87:03:dd:80:cb:d7:a4:da:b8:
b6:fe:f8:fa:c0:46:56:05:c0:e2:17:4e:60:d5:83:ee:f1:9b:
19:c0:d9:08:62:8f:a4:ac:26:eb:91:69:da:b3:9b:6d:54:f9:
19:3f:c6:ea:75:45:cf:a5:00:41:9d:6b:eb:83:d1:cb:a6:87:
c1:df:2c:83:e1:ed:d9:e5:a9:b7:21:ac:a3:3a:d9:a9:2f:a8:
13:c8:89:60:a3:88:24:99:c1:6f:a0:dc:2a:ec:39:39:29:5d:
59:65:ca:98:30:b4:89:8f:a6:b2:29:eb:1c:59:09:b3:95:e3:
a4:e7:0f:31:64:43:69:67:53:0f:8f:35:22:a5:d3:47:cb:96:
f7:a8:e8:af:d5:f3:dd:ac:8d:dd:82:38:fa:42:cb:6c:c1:80:
31:13:a5:af:9b:93:b9:8a:9d:95:76:a7:87:e1:be:66:0a:92:
0a:e8:5f:a1:50:60:f1:86:81:91:96:df:8b:ad:76:b3:63:c5:
1e:6b:56:6e:ab:08:b5:ae:7f:b2:37:fd:65:c9:15:28:dc:de:
5b:8a:12:36:c6:3e:a6:3c:89:0c:26:36:b6:6c:34:82:d6:d6:
cc:53:c3:ad:44:c1:bb:fb:0b:04:c8:60:51:7b:ca:00:62:62:
8d:ab:51:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 07:28:41 2025 by rpki-client