Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
File: k8XxCvi8tfxuNKRztKbK560C2QI.mft (raw, json)
Hash identifier: XszJUsOuGEXErha9iqGohszgpuOaKk1FN6XWwQY6QGM=
Subject key identifier: FB:88:FB:EA:B5:0C:50:93:44:3B:96:99:23:38:22:24:CF:FB:95:E2
Authority key identifier: 93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
Certificate issuer: /CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Certificate serial: 019762833AF4E10AE9B81D6CF02BD7D49166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
Manifest number: 09AC
Signing time: Thu 12 Jun 2025 05:00:56 +0000
Manifest this update: Thu 12 Jun 2025 05:00:56 +0000
Manifest next update: Fri 13 Jun 2025 05:00:56 +0000
Files and hashes: 1: k8XxCvi8tfxuNKRztKbK560C2QI.crl (hash: tQHhhe9v06fn7hIl5HwQZ/4f/o+vU6bhLQXp81DbMaI=)
2: qSlCWIoaBSlT8FJxAqdM3S_JMeY.roa (hash: Zvj6zybG7gbhDX6oesOJPa1rvAoqiKQGPqATyljkt6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:83:3a:f4:e1:0a:e9:b8:1d:6c:f0:2b:d7:d4:91:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93c5f10af8bcb5fc6e34a473b4a6cae7ad02d902
Validity
Not Before: Jun 12 05:00:56 2025 GMT
Not After : Jun 13 05:00:56 2025 GMT
Subject: CN=fb88fbeab50c5093443b969923382224cffb95e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f2:1f:5e:cc:bb:60:d9:9f:b9:ee:f0:72:4a:
9a:a3:2c:88:c2:ca:5d:46:5d:89:90:23:86:70:91:
1a:41:42:d6:91:01:2d:3f:dc:cb:74:cc:91:67:80:
9e:fc:24:40:6f:a7:ae:fe:84:64:43:2e:2b:e9:e7:
94:64:be:6a:cc:f5:eb:52:44:27:78:ff:94:2a:fe:
be:29:41:45:d4:6b:4d:29:a0:3e:3a:33:5f:ed:ff:
fd:c9:9b:26:71:d6:21:f0:05:7f:f2:8f:5d:47:da:
e2:e9:8b:3b:3b:58:42:eb:1a:5a:c6:ca:10:e0:92:
3f:47:6b:e6:a8:a3:b5:5b:eb:f4:57:9e:fa:8f:ce:
4b:f4:23:64:68:d6:e1:e8:4b:a6:dc:b0:f6:b3:ce:
45:db:e2:ed:ba:ee:7e:a5:2e:73:39:75:ad:3b:3e:
92:1b:02:7e:c1:4a:07:da:41:57:8a:34:0e:8b:c6:
df:e0:39:ec:d4:49:ba:1f:4a:8a:ad:75:b6:3f:2e:
17:04:0f:be:37:71:c6:0e:fa:7b:1e:e9:44:1b:e3:
48:a7:ee:b3:35:7a:57:e3:50:f3:3e:52:75:7c:85:
ef:4f:38:96:d2:5b:fd:49:cf:56:59:03:b8:cb:31:
60:c0:ea:5d:ed:6f:6c:23:a0:3c:86:56:17:57:d4:
84:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:88:FB:EA:B5:0C:50:93:44:3B:96:99:23:38:22:24:CF:FB:95:E2
X509v3 Authority Key Identifier:
keyid:93:C5:F1:0A:F8:BC:B5:FC:6E:34:A4:73:B4:A6:CA:E7:AD:02:D9:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k8XxCvi8tfxuNKRztKbK560C2QI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa02cb-b378-4fa7-8803-8eaad0b049a7/1/k8XxCvi8tfxuNKRztKbK560C2QI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:11:42:dd:9f:cc:e7:82:1b:06:17:84:3b:0c:13:b5:ac:84:
76:a0:d5:84:46:14:aa:36:dc:5b:d8:45:88:53:1a:c3:c6:ce:
63:6d:2f:97:aa:21:2c:b4:36:ad:25:37:92:76:18:04:c7:2b:
9f:68:fb:3d:62:bf:a4:2b:dd:f1:49:fc:85:a5:a3:50:f9:37:
50:21:82:dd:b3:89:2d:db:e0:8c:6b:b2:7d:cb:56:95:fe:b9:
00:ef:15:55:c5:66:51:1e:a6:e5:c1:38:0a:43:1e:93:be:ba:
f7:d3:b6:fb:da:ec:ad:97:0b:28:0a:41:02:b2:4b:0c:b3:82:
c9:be:b1:32:96:12:22:6d:fb:6e:ba:e6:2e:93:d9:ec:dd:c3:
21:4d:e1:b5:07:68:c2:14:c0:ed:17:12:2f:aa:77:9d:76:5a:
5c:97:d6:81:75:c5:56:23:1d:31:65:9e:2f:1d:ae:4f:7c:63:
9c:61:d8:68:e0:04:2e:f0:44:cf:64:0a:74:f2:ba:f7:71:a9:
76:32:ac:72:cf:3d:4d:53:21:c9:ea:b4:ce:15:a5:17:cc:db:
d6:34:e0:12:c7:45:52:ac:9f:3d:b2:4e:4a:28:2d:1d:5b:9a:
2b:20:11:07:b5:69:64:e5:61:2a:33:19:f5:c1:a6:b9:55:55:
d6:46:1f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 11:30:19 2025 by rpki-client