Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
File: 8hVRewsgMJ6RZAW54e0hoEaaaJU.mft (raw, json)
Hash identifier: Ddwx9Q8U3Ae3WmrZLkDGL9BtmUZupPYxM1gOO4Fog2M=
Subject key identifier: 8B:5D:E8:57:73:29:2E:50:D2:37:2C:EA:C8:05:3F:57:88:E9:24:A1
Authority key identifier: F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
Certificate issuer: /CN=f215517b0b20309e916405b9e1ed21a0469a6895
Certificate serial: 019747797FE4AC7719DE51522751EDD9124D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
Manifest number: 01A9
Signing time: Fri 06 Jun 2025 23:00:34 +0000
Manifest this update: Fri 06 Jun 2025 23:00:34 +0000
Manifest next update: Sat 07 Jun 2025 23:00:34 +0000
Files and hashes: 1: 8hVRewsgMJ6RZAW54e0hoEaaaJU.crl (hash: lpzxjtSQXhFnxvywrsDJIufXrn1uyzktG1UooOYRTg0=)
2: qCeXwVNQp66WQ27Det0b9KrkJEc.roa (hash: WoKc3ldX5sHKUSOKMyS/VBt9xUxQrJ5xCbXpuIjQb48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:7f:e4:ac:77:19:de:51:52:27:51:ed:d9:12:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215517b0b20309e916405b9e1ed21a0469a6895
Validity
Not Before: Jun 6 23:00:34 2025 GMT
Not After : Jun 7 23:00:34 2025 GMT
Subject: CN=8b5de85773292e50d2372ceac8053f5788e924a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:1b:db:6d:6a:d2:0e:ad:ed:94:3b:54:81:
70:ec:09:fd:2e:d4:4b:5e:59:ee:94:0c:65:2e:4f:
fb:32:68:8f:f0:f6:50:40:29:e1:f8:11:54:74:5c:
5f:0d:f7:93:44:77:35:08:1f:db:71:db:63:a0:07:
3d:45:8c:ca:0d:2e:3a:a4:ad:0e:8b:99:dd:04:e7:
9b:f7:7b:84:bb:cc:79:f4:68:30:88:cd:f2:46:65:
cf:c5:14:9a:3a:d2:96:ec:b9:31:99:d0:41:e0:5b:
18:d0:71:34:f8:a3:69:0c:8c:d6:bf:fc:18:b1:ac:
33:4b:08:0b:4d:e9:f6:2b:4f:57:61:c9:a0:ff:7b:
b6:01:f2:76:51:01:20:a8:ca:9f:4e:e9:b0:ca:46:
26:80:c3:0f:74:5b:80:73:51:6a:15:55:5f:e1:02:
9a:ac:06:e7:03:6d:2b:12:a8:2c:14:5f:47:b4:ba:
f6:4b:1d:d2:9f:31:3e:3f:d4:83:83:8f:1c:ea:5e:
60:f2:8a:b5:c0:be:05:5a:08:73:c6:4e:a1:df:c7:
99:e5:5b:7c:4e:b5:4c:71:92:11:5f:60:44:ed:c3:
cc:d9:19:a1:e9:68:35:04:93:84:65:0d:71:b0:e4:
4c:47:68:fa:5e:92:9c:e4:56:21:40:07:47:2f:f1:
8e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:5D:E8:57:73:29:2E:50:D2:37:2C:EA:C8:05:3F:57:88:E9:24:A1
X509v3 Authority Key Identifier:
keyid:F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:52:45:ef:e5:60:66:49:9f:3c:58:e2:5e:66:96:4c:61:d2:
8b:b0:9f:d6:1b:02:9a:6c:ff:27:53:23:34:9b:65:ae:43:83:
e0:4f:5c:f2:62:54:df:8b:a7:a7:1d:87:83:86:5a:e9:8f:c2:
8b:64:60:67:7f:c8:95:e0:6c:d8:ea:f8:1d:a5:be:6a:5d:cc:
d1:02:b1:78:0c:7c:e6:54:63:38:3a:7b:55:15:12:32:70:49:
01:0b:bc:2e:47:87:2e:8a:69:81:ba:5b:9b:40:60:6a:31:6b:
c2:08:5d:36:52:90:87:34:2a:f4:8f:36:ea:fb:b9:2f:fd:e5:
f1:04:9c:9b:6e:21:6b:4f:ea:56:e2:7a:a8:72:ac:57:e4:fb:
c6:65:02:41:21:38:0d:f7:12:81:c4:63:22:a3:87:b3:06:ed:
23:c4:35:66:d3:c7:a7:3b:f3:c4:fa:ba:42:1e:8e:f5:69:39:
c0:bc:1d:93:ba:9c:cf:b7:2c:74:44:54:f5:bf:bc:e0:43:84:
0f:ef:d5:a2:7f:19:33:04:6c:c8:de:73:f0:28:45:7c:9f:0d:
6f:c0:87:7a:9a:22:8f:fa:2a:6a:85:df:dc:77:99:a9:69:a6:
18:41:76:73:7a:fb:a1:af:20:3d:dc:a7:f9:dd:fb:9d:09:c3:
79:2f:93:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:27:48 2025 by rpki-client