Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: q8HNIw7CnJuDLgrazn4XEWCeswXKHwHLYEi80aUSz9U=
Subject key identifier: C6:0A:FE:A9:11:D5:16:70:12:D6:D2:7D:69:B5:83:A5:C6:70:8A:22
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 01974AE909E517C9AAF6D5E110A16D43CA05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 0F42
Signing time: Sat 07 Jun 2025 15:01:15 +0000
Manifest this update: Sat 07 Jun 2025 15:01:15 +0000
Manifest next update: Sun 08 Jun 2025 15:01:15 +0000
Files and hashes: 1: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: tCJI5uGYz/+Qj8ZmZY3VdqFC8XCLnQZLAJ6T0djjFtM=)
2: Mkl44sEh_I1NJhSRpZogcHN-KpQ.roa (hash: UFBdvkUQHMElnZ7pMex1cDJSyxO3mce2NK6vzaKBwPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e9:09:e5:17:c9:aa:f6:d5:e1:10:a1:6d:43:ca:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Jun 7 15:01:15 2025 GMT
Not After : Jun 8 15:01:15 2025 GMT
Subject: CN=c60afea911d5167012d6d27d69b583a5c6708a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:bd:bc:70:cd:d5:2d:8b:18:55:3d:7f:85:85:
5e:36:3d:54:b6:0b:e8:96:92:20:f5:7a:83:91:82:
59:07:3a:ca:8b:31:a1:b8:9c:0f:1d:4d:8f:29:9d:
c9:39:7f:ac:4a:09:e7:97:88:9f:5a:ad:28:7f:b9:
9a:38:71:75:61:9d:81:73:66:89:72:81:25:8c:35:
41:d2:e8:a9:a2:68:49:56:e1:d2:89:02:7f:c6:5c:
50:05:21:ff:9b:aa:ab:42:03:9d:4c:80:67:8a:ea:
40:b8:c8:fe:d1:95:8b:5c:ab:19:f8:40:7b:bf:f2:
93:f5:a9:45:0b:6d:0b:02:4d:d3:dd:45:2c:1b:1b:
0a:d5:b1:74:c7:60:fa:ba:2b:47:1a:f0:6d:70:1c:
6a:cc:e9:30:11:b4:18:5b:0f:df:ae:76:80:03:83:
f6:f0:8f:12:73:5f:35:2f:27:9f:b8:c7:1a:49:e8:
98:75:2e:37:a8:13:8c:3b:03:28:d0:7c:a7:5f:df:
19:85:40:5a:e5:fb:bd:16:c1:81:cf:9c:43:37:3b:
c1:df:3f:ac:62:bb:99:e4:96:ee:21:f4:45:b4:0e:
8d:be:61:f9:a6:67:36:78:95:b5:6a:b2:05:2b:4b:
bf:e6:01:74:68:fd:9b:15:bd:d2:9b:df:f6:3b:e5:
c5:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0A:FE:A9:11:D5:16:70:12:D6:D2:7D:69:B5:83:A5:C6:70:8A:22
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:75:54:5e:b4:0c:a8:74:57:fe:21:61:83:69:e0:44:15:86:
9d:de:0a:4f:cc:ae:c9:a3:69:da:61:7e:c8:f9:c3:da:ac:fd:
21:ac:46:87:1b:97:97:25:51:4d:1f:61:ba:17:07:07:5f:21:
e9:0f:38:0a:89:4c:ff:15:9c:2c:63:e2:b8:50:ae:1e:f4:01:
1c:c6:29:a9:32:07:9c:94:22:72:25:4d:14:13:ae:d0:97:21:
a3:73:29:9a:75:65:87:51:05:f9:25:c6:79:15:7c:ed:bf:2a:
af:9b:c4:df:53:73:07:df:c8:f0:cf:70:11:35:03:0c:d9:71:
a2:4f:c0:42:d2:12:5a:04:89:a9:6b:1f:c9:cb:be:ea:66:09:
0d:2d:82:cf:5f:38:83:87:5d:98:41:a8:67:ca:e1:d8:c5:bd:
7e:e4:9d:44:68:02:ab:ad:61:81:88:b8:ca:7c:06:50:3d:26:
df:58:e4:51:90:cd:aa:17:f9:8d:50:b5:da:3d:c6:01:0c:f8:
24:cc:39:e3:a9:87:80:83:9b:77:5f:20:f9:0c:5c:d1:e7:1e:
50:1b:d1:84:7e:68:b8:96:8a:08:0e:bf:44:5a:3e:9a:91:6b:
e5:cc:a2:7b:3f:68:d1:af:c9:cb:0e:d7:b6:36:9d:6f:0f:50:
55:98:bd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:23:53 2025 by rpki-client