Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
File: 8uOrazEY4L3g5kiOa-1slpQeDoQ.mft (raw, json)
Hash identifier: /NQElOwvOTxa22oNvCO8/HSO5YpvMRrNjblx5lKLHYM=
Subject key identifier: 4A:D3:79:E9:B7:04:AA:33:7A:72:77:15:BE:AA:A6:FA:4B:18:34:40
Authority key identifier: F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
Certificate issuer: /CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Certificate serial: 0197628352907F752E86BDB8EAA1195D62FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
Manifest number: 0A1F
Signing time: Thu 12 Jun 2025 05:01:02 +0000
Manifest this update: Thu 12 Jun 2025 05:01:02 +0000
Manifest next update: Fri 13 Jun 2025 05:01:02 +0000
Files and hashes: 1: 8uOrazEY4L3g5kiOa-1slpQeDoQ.crl (hash: hfVP7CeQsgp04kWfTHWVoQPprfiFaE8RbTvBvquYAwI=)
2: TwUAmEwQxO2jeeE0IG7nOUuBRU8.roa (hash: 5uZF7JHC6Cu/tuWa9kusO7lA0+dh5OGQEqs1E5VZ/5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:83:52:90:7f:75:2e:86:bd:b8:ea:a1:19:5d:62:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e3ab6b3118e0bde0e6488e6bed6c96941e0e84
Validity
Not Before: Jun 12 05:01:02 2025 GMT
Not After : Jun 13 05:01:02 2025 GMT
Subject: CN=4ad379e9b704aa337a727715beaaa6fa4b183440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:cc:49:ad:f1:2a:10:1d:a1:64:88:54:b1:
9c:56:dc:bd:1b:6a:21:ea:5b:e7:62:ea:55:79:23:
f3:1c:53:d1:63:69:ed:f5:d3:1b:07:cd:a6:d3:9a:
15:df:b3:33:41:75:3d:ae:57:64:18:7c:c2:6b:3b:
64:8d:b9:5d:54:42:7b:b1:34:a8:61:b5:4f:14:ba:
64:b4:8c:64:3f:43:09:c5:0f:20:40:42:03:6b:5c:
b5:29:ba:89:82:9b:f7:c7:59:ce:30:e1:4e:11:62:
e0:99:7b:e1:e0:bc:85:23:fa:41:fd:a0:fd:fb:bb:
51:27:1b:5c:0a:6a:67:50:c1:ab:30:29:3c:cc:66:
a0:6b:6c:ce:9f:a4:bb:d0:a1:d4:06:fb:54:a3:b1:
cc:71:14:2f:3c:07:92:8f:97:86:ab:50:14:6a:9d:
ca:8d:55:57:97:bd:be:4a:1b:44:e2:78:ee:11:e5:
48:78:47:b4:fe:08:cd:61:c1:cd:6e:6d:f3:92:51:
c7:5f:18:ad:e3:37:6b:9e:ff:7a:a2:f4:49:26:56:
7d:95:91:2e:c4:f2:3d:5f:29:61:78:bb:1b:3c:81:
72:ca:08:9b:1c:59:03:73:91:77:c5:ef:c9:f5:af:
88:9e:9c:65:b3:68:b1:17:37:7c:13:9c:60:b3:29:
65:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:D3:79:E9:B7:04:AA:33:7A:72:77:15:BE:AA:A6:FA:4B:18:34:40
X509v3 Authority Key Identifier:
keyid:F2:E3:AB:6B:31:18:E0:BD:E0:E6:48:8E:6B:ED:6C:96:94:1E:0E:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uOrazEY4L3g5kiOa-1slpQeDoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/36c4a3-6e1d-4614-8f90-83b03870094d/1/8uOrazEY4L3g5kiOa-1slpQeDoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:18:d8:3b:bd:a5:d6:a1:cc:bd:9e:91:32:4b:78:80:70:e4:
fb:70:ab:c6:eb:0e:dd:2e:43:ba:73:dd:57:95:4d:3a:0d:95:
a4:82:06:5a:c6:3e:85:ab:8d:ff:f7:1d:21:86:70:2c:9a:1b:
0d:d6:3b:8d:6a:13:45:12:30:50:91:de:42:7d:7d:03:32:9e:
2a:be:49:ea:41:b1:48:c8:89:91:da:fd:30:ab:70:c6:9b:c7:
51:3a:0f:3a:e6:e0:02:ea:3e:7e:1b:22:34:ef:a7:bd:1e:6a:
6f:b0:bd:63:26:32:e9:54:30:14:72:84:30:20:fc:78:22:c5:
1e:d9:81:cd:92:5a:b7:ac:72:8d:ec:f9:a0:1e:9a:02:7b:eb:
bf:80:b5:80:17:6d:fe:79:00:e2:34:fe:85:3a:d6:37:07:a4:
2a:a4:ea:da:68:02:7b:f8:c1:ef:9b:73:b5:f3:34:a0:48:bc:
17:65:d6:06:a8:e3:a1:96:94:dc:7a:4e:6c:49:49:69:29:2b:
91:ce:0b:e1:83:c1:aa:c9:08:ef:21:54:71:65:8a:6b:17:ce:
0b:99:cf:01:8f:b9:40:6e:da:0d:9e:21:a3:b2:a9:e7:25:ce:
a3:59:69:7c:80:c4:c1:3f:41:b4:31:25:45:56:d6:56:17:59:
a6:f7:a1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 13:36:56 2025 by rpki-client