Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
File: 8L-tMcFMk9qlNEugT0tSNUaW368.mft (raw, json)
Hash identifier: e7d7JE2/Y5zPcezSKWWlZRo0AnCVHMJ0g+h0lkuy0x0=
Subject key identifier: A7:B6:A6:CC:83:89:68:4B:E6:8C:6E:4E:4D:C9:C7:E3:CC:64:B0:08
Authority key identifier: F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
Certificate issuer: /CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Certificate serial: 01974D7BE1180BF4C63EFDE283E44BE063AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 03:00:53 +0000
Manifest this update: Sun 08 Jun 2025 03:00:53 +0000
Manifest next update: Mon 09 Jun 2025 03:00:53 +0000
Files and hashes: 1: 8L-tMcFMk9qlNEugT0tSNUaW368.crl (hash: x3EGrIASfCF7gh61f2za2+JYukUs41uKxdDLVEQ4gUQ=)
2: UW4EyDU9bcfR_a5RruA-KGiV3Uw.roa (hash: yNneGYRFbH3ZhAuncPonvd3a6cecW1xrZDzoeBjGnHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7b:e1:18:0b:f4:c6:3e:fd:e2:83:e4:4b:e0:63:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0bfad31c14c93daa5344ba04f4b52354696dfaf
Validity
Not Before: Jun 8 03:00:53 2025 GMT
Not After : Jun 9 03:00:53 2025 GMT
Subject: CN=a7b6a6cc8389684be68c6e4e4dc9c7e3cc64b008
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b8:a0:62:c0:23:96:b2:a0:94:f7:09:c9:09:
3d:42:d3:eb:83:00:ec:93:33:82:80:35:24:d0:21:
12:aa:75:7e:88:3f:71:ca:39:76:62:4d:94:bf:70:
fc:66:cf:8f:f2:56:76:4c:fa:c8:18:ca:bf:b5:0b:
bf:7c:eb:5b:ae:2a:cf:90:2c:57:1c:c6:1d:fe:02:
2b:b6:6c:b6:5a:a9:5e:4b:c0:df:57:be:9a:65:30:
eb:25:22:43:19:83:5d:44:5d:c2:08:3c:00:e6:08:
92:bd:6b:e9:6f:77:af:df:99:18:00:16:c4:e5:cb:
f9:75:65:8b:52:24:bc:68:cc:7b:06:67:a8:ea:52:
11:0a:95:54:d2:94:a0:ba:fd:99:63:a8:6e:2e:ce:
80:bb:1f:5b:8c:80:18:78:54:26:0b:5d:9f:67:20:
d9:d3:39:6e:a7:0a:26:b2:4c:06:49:07:98:64:6e:
56:81:e8:78:cb:e1:1d:05:a2:68:31:eb:50:c9:87:
09:71:64:79:e4:26:dc:23:e0:f1:7c:40:31:76:6b:
5d:f6:b0:e6:82:89:16:38:69:82:d9:99:5b:b9:87:
82:96:03:12:97:e4:bd:d3:7a:20:65:c0:07:cc:23:
c1:2d:9d:fe:ef:ec:c1:bf:4e:49:19:e7:3d:b2:f3:
34:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:B6:A6:CC:83:89:68:4B:E6:8C:6E:4E:4D:C9:C7:E3:CC:64:B0:08
X509v3 Authority Key Identifier:
keyid:F0:BF:AD:31:C1:4C:93:DA:A5:34:4B:A0:4F:4B:52:35:46:96:DF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8L-tMcFMk9qlNEugT0tSNUaW368.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/dc35eb-6ecf-4452-8599-70d59cc4f7cc/1/8L-tMcFMk9qlNEugT0tSNUaW368.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ff:c6:94:a7:ef:a9:92:20:8c:fe:3c:d9:00:20:51:7d:ac:
a6:ea:54:b4:5b:89:b7:52:83:28:63:00:03:29:5d:3c:1b:4b:
40:95:c5:ac:35:70:a5:9c:ae:82:7a:fc:5d:c1:b8:26:f9:bc:
64:c2:93:7f:26:d8:e8:bd:28:3c:82:57:75:eb:48:52:3a:bb:
a9:4c:84:09:c7:82:53:09:3a:b3:6d:2f:ca:b6:c7:a7:99:e1:
0d:c2:02:19:dc:09:c5:e7:c3:43:fa:a0:99:19:6b:95:a3:b7:
5f:53:2b:e1:f6:32:dd:bb:74:1a:2e:51:52:24:4c:a5:4b:69:
d8:23:fd:00:64:fa:0d:bb:dd:26:75:48:56:e6:97:eb:c3:c7:
a1:96:d1:ec:b4:cb:4e:ad:a1:e2:ca:3f:8e:22:29:22:ef:59:
dd:0e:6f:a0:f1:be:b4:26:de:f9:82:ee:ba:58:66:d2:5f:10:
5a:96:51:cb:24:53:e2:bb:c7:fb:3f:e9:30:6e:da:d1:f3:20:
43:1a:cf:0e:e2:92:54:dd:00:e0:35:9c:cf:58:6d:2d:43:40:
d3:9b:2c:de:79:22:8b:0b:4a:61:08:92:f2:c2:82:9c:d9:dc:
9e:fb:44:9a:c2:68:a6:67:cf:c9:57:3a:ee:a1:a7:0b:35:e0:
ee:25:89:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 13:31:48 2025 by rpki-client