Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
File: 8x6drOnnIGMJy2yeW4YX6YWd3IU.mft (raw, json)
Hash identifier: hZ0XEK50Nd446M73Rig2rK9s4e4ggsWJFu/3LU+0AGk=
Subject key identifier: 88:9B:74:86:A2:99:B6:25:FD:2F:E7:5A:CB:58:52:13:D3:DD:57:E4
Authority key identifier: F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
Certificate issuer: /CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Certificate serial: 019748FA21847A0F2A6F3A960C173F243A8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
Manifest number: 3C
Signing time: Sat 07 Jun 2025 06:00:41 +0000
Manifest this update: Sat 07 Jun 2025 06:00:41 +0000
Manifest next update: Sun 08 Jun 2025 06:00:41 +0000
Files and hashes: 1: 8x6drOnnIGMJy2yeW4YX6YWd3IU.crl (hash: xiBP4Lu0GsjqLabTffftOp47XfQfRcboNHZoaipiVQE=)
2: Y_V2AX-hKmiZJha1bvfVKTCTgXI.roa (hash: D45qS/LlK8mwdIW6eNsRENlHm2CkkbRz9HSr40lXt7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:21:84:7a:0f:2a:6f:3a:96:0c:17:3f:24:3a:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Validity
Not Before: Jun 7 06:00:41 2025 GMT
Not After : Jun 8 06:00:41 2025 GMT
Subject: CN=889b7486a299b625fd2fe75acb585213d3dd57e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a1:51:b3:74:db:8b:59:fd:5e:4a:28:66:24:
45:d2:60:8b:22:f3:95:59:08:fd:37:e4:02:51:68:
c6:a6:db:63:c9:9b:74:fc:2d:0a:8d:ed:36:5a:dc:
9d:32:7f:24:be:5e:6b:c6:f0:2b:a9:10:82:71:26:
dd:0b:cd:8f:7e:8d:4e:cb:fe:e8:23:76:9a:0d:3f:
9e:49:db:e3:12:17:78:d1:42:aa:85:e8:8c:f6:cf:
99:e1:8e:27:6e:c3:7b:78:a0:48:41:4b:e6:14:c7:
37:ad:75:1b:45:3b:83:16:90:1f:2b:f9:2c:a6:fd:
88:65:86:45:ad:f8:9c:1e:2d:1f:23:75:0a:cf:7b:
94:15:47:bf:8f:74:b8:ba:e7:82:d3:d6:44:10:2d:
90:5a:2f:02:5c:cd:2e:7f:81:26:0d:a7:64:2a:2c:
63:03:44:34:3b:d1:6b:1f:0c:93:7b:0a:13:a0:87:
e0:0c:ac:fa:7d:a8:c2:a3:4c:7d:02:0f:5d:8f:8e:
b2:dd:76:af:51:80:1a:4b:16:bf:89:31:81:97:91:
5d:56:5a:6a:3a:3f:7b:9c:d8:29:f1:2e:e1:1b:6d:
54:c9:79:f0:51:8b:ca:fd:3b:6c:6d:e8:be:85:82:
fc:eb:7b:89:bf:c4:eb:e6:ce:2a:7a:59:17:87:fb:
a3:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:9B:74:86:A2:99:B6:25:FD:2F:E7:5A:CB:58:52:13:D3:DD:57:E4
X509v3 Authority Key Identifier:
keyid:F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:9a:48:12:98:f9:05:0c:08:73:16:42:57:cb:cb:ad:2b:dc:
dc:80:cc:16:e9:48:c2:ab:47:d5:01:df:a0:9a:50:04:2e:7a:
5d:48:6c:4e:2b:a3:9e:d2:fa:19:a6:05:c6:50:86:13:1d:27:
d2:49:b4:0b:44:91:92:3b:9f:c5:f6:ba:5c:59:1f:45:59:f1:
43:fe:47:63:99:1c:72:30:9a:42:98:ae:44:7b:fd:0a:b2:1e:
dd:1c:d8:72:9b:3c:39:71:2a:e1:86:58:c9:4d:bd:d5:90:f0:
02:cf:82:00:9d:19:30:a8:dc:cb:72:b5:37:ea:1d:56:bc:f5:
76:2c:aa:83:0f:13:96:76:63:df:1d:d4:a4:e7:b7:22:c6:06:
7a:82:0c:31:a1:16:b4:62:c0:f6:e3:c9:f9:17:3d:cd:1e:93:
b2:3b:83:16:f3:7f:c3:61:7f:35:8f:8b:c0:70:d0:c0:13:32:
86:ba:a5:eb:15:8b:86:31:8f:6b:a8:04:49:dd:62:cf:dd:c7:
81:6d:10:ff:3a:b7:8d:13:19:69:d1:aa:9d:1e:23:77:51:15:
30:92:69:8b:80:85:63:4e:ba:09:92:97:a4:46:77:e7:6a:98:
f3:21:1d:04:52:ad:41:b8:1b:fb:74:6f:41:24:ad:b3:b7:3e:
5a:2e:74:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 08:55:56 2025 by rpki-client