Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: cJ+1+KyyU0XS/Zh8QnPdrcm+rh0sUEi2KO0q9MUru3o=
Subject key identifier: 36:D4:80:05:83:AC:C7:1F:5D:89:12:A9:86:BF:68:C8:02:81:BB:06
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 019747B0B4F8C9522E5FF72C31058E55F81A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 00:00:52 +0000
Manifest this update: Sat 07 Jun 2025 00:00:52 +0000
Manifest next update: Sun 08 Jun 2025 00:00:52 +0000
Files and hashes: 1: 3-RywYSjpl9yuamrGaiHfk5Mz6o.roa (hash: khi3zX71hfk8spUUIwuIJwDTfe1y2tzgOMplAgujSag=)
2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: /6D/Fie3UxEIRkL7zyNUBs7KIuxBWsL/c/HX5G3/+/I=)
3: qmufYg21c7b0gdjuY1ziryDKce0.roa (hash: cPNs19EWQmBAO/qKhHL4tQL9v8RMF/40vmmVOD5n7Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:b4:f8:c9:52:2e:5f:f7:2c:31:05:8e:55:f8:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Jun 7 00:00:52 2025 GMT
Not After : Jun 8 00:00:52 2025 GMT
Subject: CN=36d4800583acc71f5d8912a986bf68c80281bb06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:45:fe:36:5b:57:7f:11:b5:28:a1:28:e4:c5:
56:0c:e5:a7:00:7d:86:3b:d0:c1:23:62:67:ca:a3:
3b:a5:70:f1:c9:1a:b5:3d:fd:14:4e:51:b2:e6:27:
53:d7:4f:ee:e7:df:d3:36:ab:6f:ea:f6:24:66:e8:
34:ec:57:3e:80:9f:b9:2d:83:25:75:f1:46:92:49:
57:f4:17:a3:c1:cb:d8:d3:6f:19:1a:6d:31:0b:9d:
ac:cf:25:3f:22:e1:67:46:14:65:45:a4:a1:40:0a:
a7:3f:b8:90:0c:b1:08:0f:b4:c8:20:cb:91:29:49:
e0:de:79:c4:ed:3c:1f:cf:c2:58:b3:15:b5:33:7b:
f5:3f:19:24:68:64:40:df:d6:86:c0:97:4a:f5:6c:
23:57:76:16:16:1b:85:4e:fe:da:85:a7:73:3e:a5:
ed:86:67:f2:5f:cd:e8:35:a3:b6:b7:90:20:ea:3a:
75:c9:2b:5b:8f:a7:38:93:d8:ba:57:9e:4c:9e:64:
93:de:9c:b2:79:e2:03:b4:17:7e:7d:54:31:0a:4e:
c9:dc:b5:75:65:01:ab:60:15:98:4b:ca:df:62:f6:
30:c2:0e:9b:c1:5c:f0:05:62:fd:4a:c3:bf:d4:2c:
ec:99:f5:a4:b2:69:23:2c:f0:ca:93:e5:4f:04:5a:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:D4:80:05:83:AC:C7:1F:5D:89:12:A9:86:BF:68:C8:02:81:BB:06
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f3:f0:33:df:d7:37:49:1e:65:0b:2a:09:71:ba:b2:bb:1d:
c5:ca:0f:4b:54:54:73:5b:f5:2f:95:2e:8b:99:33:e4:f2:57:
1b:10:36:77:f2:ea:6c:02:bd:94:c2:22:0c:33:ec:bb:d8:b5:
a0:3b:50:48:a8:f3:67:cb:26:ab:3d:d2:67:77:42:ba:1d:2f:
e0:ac:49:e5:88:81:9e:28:ea:99:a3:44:29:05:e2:2e:4c:bd:
fe:dd:85:3a:0d:13:64:1a:27:9f:31:cd:da:d3:0d:7e:53:ea:
41:98:5d:88:3c:69:d5:c0:fc:f7:52:7a:a3:59:eb:ff:31:82:
7a:c8:2b:0c:53:69:18:f4:3e:e0:8d:3b:01:c5:0b:0f:c0:2b:
98:fb:98:b7:6d:41:0b:ab:55:2d:7c:fe:d9:95:7f:8d:50:c9:
aa:f2:12:5b:20:12:da:e1:c5:23:6d:25:11:86:a2:42:3a:48:
31:36:f5:e8:d3:fa:e2:b8:6c:53:63:45:23:4c:40:3e:02:0c:
ba:0d:f6:d5:ca:11:34:f7:8a:f5:d7:7c:8f:ab:8f:97:72:4d:
99:be:15:c5:78:16:9f:2b:71:a6:53:e7:1c:20:4b:16:5c:74:
f0:6c:28:64:99:91:c4:ba:01:c8:42:78:4e:25:f6:29:e2:0f:
b1:68:34:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:16 2025 by rpki-client