Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
File: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft (raw, json)
Hash identifier: K27hl96spvs+A7KXBoV8G3H2FiGWaajT5XdtZpFFomA=
Subject key identifier: 77:E4:55:7E:D1:76:92:73:8D:CB:61:27:E2:2F:58:4E:E0:50:0B:11
Authority key identifier: F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
Certificate issuer: /CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Certificate serial: 01974BC4A5BF8D06BAC157FF97652AAC2BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 19:01:07 +0000
Manifest this update: Sat 07 Jun 2025 19:01:07 +0000
Manifest next update: Sun 08 Jun 2025 19:01:07 +0000
Files and hashes: 1: 8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl (hash: l65WZYxzxiXDZNaOsj8V6yzjqtEY9iydcaq4PtEQD+E=)
2: eGF4PY_wgfKdtXUANezmT92NTGM.roa (hash: 05Pk1BDJWHJV0SJRPVmkmFIh7w5FFlCRro3lX7bPWNQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 19:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c4:a5:bf:8d:06:ba:c1:57:ff:97:65:2a:ac:2b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1af8bb98e405539ea983384fafa82b2b4b71724
Validity
Not Before: Jun 7 19:01:07 2025 GMT
Not After : Jun 8 19:01:07 2025 GMT
Subject: CN=77e4557ed17692738dcb6127e22f584ee0500b11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:b9:bc:ba:be:90:f9:51:3c:40:e6:24:d0:
62:75:df:e9:ab:47:ee:01:96:b7:66:4e:59:66:da:
17:91:7a:fe:c1:72:af:08:75:3c:db:35:ae:f3:31:
13:ed:3f:20:66:fe:1b:f2:79:84:6a:37:1a:17:79:
46:5f:f8:24:76:62:74:5b:37:5c:d4:f3:b2:7a:2e:
aa:40:e5:77:6c:8e:4b:83:5e:64:e5:13:6a:b3:36:
2f:70:39:7c:7a:83:3c:6e:3d:18:ef:31:8f:d8:63:
7a:62:1c:0a:1a:f1:bb:8e:66:42:89:0a:97:ae:c7:
a1:7c:d8:f5:dd:7b:af:5d:f4:ee:8d:ea:01:82:2d:
4d:54:47:1f:c2:cf:3a:a3:0d:5e:c8:08:f8:21:1d:
8d:9e:9a:9b:9c:a2:6e:37:db:30:24:cb:c2:90:0a:
cd:fc:e4:a7:34:54:e9:0c:7a:1f:0a:0d:3b:c4:f4:
c4:41:44:6a:21:d4:f7:e2:d0:b5:1b:d1:ce:6b:dc:
ec:f4:ab:c7:07:c3:22:c3:b7:95:e1:2f:e0:1a:4a:
f3:13:25:cf:f1:ad:16:37:11:d9:1d:f4:3b:2b:e2:
e0:c7:df:62:8a:c1:ab:06:21:a6:70:e2:d3:5c:99:
00:71:75:9b:b5:a8:88:f1:b6:5e:d1:7b:3d:7c:f2:
42:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E4:55:7E:D1:76:92:73:8D:CB:61:27:E2:2F:58:4E:E0:50:0B:11
X509v3 Authority Key Identifier:
keyid:F1:AF:8B:B9:8E:40:55:39:EA:98:33:84:FA:FA:82:B2:B4:B7:17:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/2ec4b3-e65d-4612-9304-a39303d85066/1/8a-LuY5AVTnqmDOE-vqCsrS3FyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:93:2f:31:53:34:c7:67:af:b5:83:a1:eb:c0:e2:e2:2f:80:
6d:a6:c5:64:65:b8:a7:4d:8f:61:14:1a:79:ce:23:06:30:1c:
8a:c9:f4:eb:a7:ec:d4:4a:67:58:e2:e5:b5:67:7e:b0:a0:1e:
8a:c2:10:5d:aa:6c:ca:c1:49:d8:67:83:cb:61:27:1f:30:62:
16:32:09:2f:1e:a3:6b:68:13:5f:c5:c3:18:05:11:2d:4b:a9:
5e:16:1d:e5:98:ce:23:26:1d:c8:a3:b3:85:b1:6d:b7:42:92:
f9:a8:4c:1f:3f:bf:3b:8e:88:06:df:7a:5d:6c:1f:97:9c:89:
4d:0a:b4:a7:37:0c:42:5d:d1:61:e6:98:89:7a:c1:21:97:8c:
0a:7b:a3:57:d7:63:03:cd:78:2a:fa:36:6a:02:04:85:52:1b:
8a:a3:5e:e7:de:9c:33:ff:6f:16:00:e3:35:6e:2d:f5:ac:9c:
12:bf:c9:39:b5:dc:ef:66:40:af:36:3f:a0:b7:d8:89:42:c5:
94:cf:c3:45:0d:49:47:7d:aa:0b:ae:c1:7a:e6:b4:05:07:f4:
8e:53:7a:aa:57:a3:c8:f0:c8:14:68:56:3f:6b:24:68:e9:9d:
f8:e7:74:1a:d8:de:72:93:c6:67:9a:30:08:e1:17:f3:59:01:
5b:41:e5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:08:41 2025 by rpki-client