Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
File: isRzGj7jlC0ljQZjVwuJTo4akjM.mft (raw, json)
Hash identifier: qHdnAp4wkwFsDIYTN72jKEwrbw2MsNhgWofFSe+q4ZM=
Subject key identifier: BE:A0:34:8E:41:6D:AC:55:C3:71:68:47:A1:DC:18:46:8C:09:9A:CF
Authority key identifier: 8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
Certificate issuer: /CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Certificate serial: 01974CA0111118F57C15ED974BF560EE896C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
Manifest number: 08A8
Signing time: Sat 07 Jun 2025 23:00:47 +0000
Manifest this update: Sat 07 Jun 2025 23:00:47 +0000
Manifest next update: Sun 08 Jun 2025 23:00:47 +0000
Files and hashes: 1: HdoRWbIURzhfnaDDK7ySYFVN2ik.roa (hash: HVbpXptfvhv4ApWMw5QWNQjQp3Pw35JC0KFrZynPEas=)
2: isRzGj7jlC0ljQZjVwuJTo4akjM.crl (hash: N+HZQ8LiYAN3WqmYYx/EswwWSeCy2z91ZP1NkRDBwqk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:a0:11:11:18:f5:7c:15:ed:97:4b:f5:60:ee:89:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ac4731a3ee3942d258d0663570b894e8e1a9233
Validity
Not Before: Jun 7 23:00:47 2025 GMT
Not After : Jun 8 23:00:47 2025 GMT
Subject: CN=bea0348e416dac55c3716847a1dc18468c099acf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:0c:c8:8c:20:65:17:ff:36:05:08:5d:13:c8:
ab:0d:1c:0b:ba:b3:4f:4a:76:92:cb:ea:72:8f:af:
96:73:ad:ba:17:1d:bb:2d:aa:b9:74:91:a8:e7:ae:
86:74:6f:24:84:a9:08:0c:6a:fc:f9:61:50:00:55:
fb:fd:f3:bd:cd:1b:b7:9f:2d:15:8d:67:3f:2a:1d:
7e:40:f4:90:5c:19:07:ff:1c:59:fd:61:4b:b6:c5:
9f:88:2b:87:9d:c8:24:5d:15:48:a3:5a:7e:8b:94:
ce:a1:54:d4:54:28:2e:52:0f:66:02:69:d6:8b:7a:
5b:2e:f2:cb:cc:3c:13:6e:76:22:ac:b4:89:f7:7a:
5e:51:92:d9:43:e5:10:4b:b5:dc:ed:b3:12:e0:fb:
ac:7e:f4:34:31:4c:dd:ad:2b:e2:83:b2:53:ad:b5:
de:cb:80:06:62:5e:e1:1f:17:cb:70:69:5e:15:1e:
58:09:7b:07:a1:dc:bc:75:26:8a:a1:b4:ed:a3:e0:
43:d5:21:1e:9e:a4:92:51:c8:b0:45:39:4c:f2:05:
68:bb:c5:9f:b7:8e:42:e0:93:aa:e0:71:52:49:41:
11:3e:1e:40:58:6a:93:7a:af:aa:13:c6:2d:13:b7:
91:ba:79:ba:f6:b2:04:34:d9:33:06:81:ba:58:6c:
ee:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:A0:34:8E:41:6D:AC:55:C3:71:68:47:A1:DC:18:46:8C:09:9A:CF
X509v3 Authority Key Identifier:
keyid:8A:C4:73:1A:3E:E3:94:2D:25:8D:06:63:57:0B:89:4E:8E:1A:92:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/isRzGj7jlC0ljQZjVwuJTo4akjM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f0805f-334e-4704-8b28-5adfe30ffda5/1/isRzGj7jlC0ljQZjVwuJTo4akjM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:ae:d4:7a:87:2c:d1:74:c2:68:0d:d4:e1:15:8d:10:e5:7c:
06:f6:4c:2a:cd:78:1d:46:52:53:1f:3c:63:3f:59:c9:32:98:
27:bb:c6:fa:53:1e:18:b8:38:5c:8a:ad:38:24:a1:8b:49:da:
bd:ad:5f:9d:61:00:5b:ca:fc:b2:dd:24:98:8b:d9:ee:43:57:
af:c4:01:58:11:08:e6:ee:30:c6:9a:a7:df:a2:f7:e4:6a:8a:
5d:ed:89:9a:94:3f:96:bc:71:25:03:28:5e:b1:4d:d5:32:1e:
ff:06:e2:cb:42:9c:6b:6f:d3:50:22:30:12:72:79:b8:8a:49:
11:15:3a:4c:e0:84:5e:9d:74:10:cc:0a:fc:40:aa:1e:66:59:
fd:aa:e3:42:d4:4c:cd:b9:0f:c4:d5:a3:1d:08:7f:3a:b0:16:
5a:28:f9:21:98:c0:61:92:22:fc:3f:2b:48:59:22:5a:22:76:
4e:0a:7c:7f:74:ef:da:4b:3a:63:ec:13:59:59:8a:f2:ec:ee:
a5:a5:ae:4d:62:92:c0:31:69:7b:28:6a:a6:41:bd:79:a9:ae:
a2:80:83:6f:53:35:d6:5c:d2:3a:d5:67:34:e6:5b:e0:f8:0c:
3e:34:04:da:f7:ab:c4:70:1c:cb:9d:33:d8:60:4f:12:05:d7:
6b:f5:69:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 07:27:33 2025 by rpki-client