Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
File: 8jWG8iDMsNHFLArt9edm7KGhHHQ.mft (raw, json)
Hash identifier: cvAtXqVQWZlHzadtEILfLs6F8jF0IRhMOtlA+kYSyaA=
Subject key identifier: 08:61:F5:FE:8D:6A:8B:77:87:05:C5:0F:2F:24:0B:1E:74:D7:2A:30
Authority key identifier: F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
Certificate issuer: /CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Certificate serial: 0197500F1B2190EB10F26CA56DF9C48862B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
Manifest number: 03DE
Signing time: Sun 08 Jun 2025 15:00:56 +0000
Manifest this update: Sun 08 Jun 2025 15:00:56 +0000
Manifest next update: Mon 09 Jun 2025 15:00:56 +0000
Files and hashes: 1: 8jWG8iDMsNHFLArt9edm7KGhHHQ.crl (hash: 7Vk/NlQQkdjh1EOpKcnPLGn/4iom6EhbNVlNeO5Nr50=)
2: v9SdGCEbNFlSuDgWgo1kf6nL3As.roa (hash: qiXG0Rmw4yiW0AhRjg9/OTIgPd0soD+OwXQ8XH+CjYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0f:1b:21:90:eb:10:f2:6c:a5:6d:f9:c4:88:62:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Validity
Not Before: Jun 8 15:00:56 2025 GMT
Not After : Jun 9 15:00:56 2025 GMT
Subject: CN=0861f5fe8d6a8b778705c50f2f240b1e74d72a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:0a:98:e6:14:18:59:11:1b:11:f1:b7:b2:ca:
63:93:f0:97:e2:4d:33:b7:a9:b2:37:54:e6:7d:86:
8c:89:5b:33:49:31:15:44:e2:59:29:cd:c3:44:1a:
ea:05:89:df:ba:0d:25:5d:0a:e6:8e:4c:2f:9c:66:
a9:e7:d9:83:9b:8f:85:bf:fa:04:54:93:53:8e:fb:
60:71:31:5a:a9:a9:69:c8:3a:fd:d5:79:ee:6d:7e:
fb:8d:d5:b0:66:fc:f2:69:7c:11:19:4e:78:90:f0:
ce:6d:be:b7:40:af:5b:50:d6:6a:e1:99:ca:1f:18:
dc:29:57:fd:75:40:a9:4c:f4:0f:7d:2c:46:44:5c:
4b:1f:dc:d9:cc:f3:b2:b3:84:2a:a9:eb:b1:38:a7:
b0:01:0a:05:a7:42:f5:dd:7b:f0:5c:c8:c6:22:b9:
a4:8d:28:c9:68:03:cc:87:13:39:ea:d6:e4:69:f7:
4a:81:e3:67:1a:43:0b:fd:96:ca:0f:4c:42:00:b8:
34:b9:12:cb:d2:f5:61:13:8b:74:50:89:3d:2d:9a:
ca:2c:3f:24:3b:4e:62:c2:e0:0c:58:27:95:7d:cc:
6b:68:f1:bf:b5:c0:25:18:fd:40:c0:05:0c:f4:53:
7d:3f:fb:6b:7a:29:fb:dd:8d:15:68:6c:5c:27:31:
94:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:61:F5:FE:8D:6A:8B:77:87:05:C5:0F:2F:24:0B:1E:74:D7:2A:30
X509v3 Authority Key Identifier:
keyid:F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:0d:d5:0b:79:ee:48:32:ad:e8:82:d8:0c:7c:dd:cb:92:0a:
34:e8:e6:3c:21:16:f6:34:8d:4a:67:cd:b4:c7:22:67:38:3d:
72:5d:7a:fe:f2:d7:27:da:0a:a0:84:76:98:d4:44:6e:27:0e:
e2:48:b6:fe:88:20:8b:86:33:e9:e5:36:dc:91:25:77:b6:d3:
6c:39:41:b5:79:c3:7c:4b:fc:d6:5e:c1:f3:bf:42:19:92:d0:
63:e1:4a:97:cd:18:9e:d7:b5:b2:f3:3e:92:13:75:74:5f:03:
a9:f0:88:09:30:ee:25:3c:5b:cd:6c:ab:eb:ec:59:74:24:86:
a0:ec:24:60:99:0f:0f:6a:47:1c:6b:cf:59:4f:57:2f:50:48:
ef:98:b6:10:fe:1f:52:59:d6:71:50:1d:be:ab:e6:0c:0d:a4:
3f:a2:88:d2:b6:2a:cd:11:03:2b:be:19:e1:ec:a3:02:3d:6e:
36:76:00:b9:38:dc:3b:18:20:02:57:03:c9:c0:e7:98:2b:80:
b3:ef:07:9b:95:a3:f9:79:cd:f8:7f:e6:b0:87:32:8a:aa:16:
c9:28:21:57:41:25:bf:ad:6b:0b:53:f4:f7:4c:11:b4:3b:d5:
c2:c1:01:84:69:37:79:e2:ee:09:07:04:12:83:9c:f2:6a:20:
f2:ae:e1:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:42:50 2025 by rpki-client