Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
File: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft (raw, json)
Hash identifier: rdNsk+GAOcyMVXHKUypynj7lPan0bZAGs+RUnhuo2SU=
Subject key identifier: 5D:B5:FC:F7:C0:93:EE:47:D1:27:43:23:31:36:48:0B:87:88:2A:C4
Authority key identifier: F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
Certificate issuer: /CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Certificate serial: 019748FA1B01F3DD05637212A6DB0A7F82A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
Manifest number: 0C8A
Signing time: Sat 07 Jun 2025 06:00:39 +0000
Manifest this update: Sat 07 Jun 2025 06:00:39 +0000
Manifest next update: Sun 08 Jun 2025 06:00:39 +0000
Files and hashes: 1: 8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl (hash: woOsIN4H8zvcdYLm+sMj5H5KDg0khCdGS2W5Y2sv/wg=)
2: otWydKJIblYoFDAZjlf3bz3XaMM.roa (hash: xwlrdUyrXAa6g8e84xQqVsN9ku3EVyiSX1A/Nu5VNrY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:1b:01:f3:dd:05:63:72:12:a6:db:0a:7f:82:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0150b3a9419627fdbcdb6580e878a1c9fa0cc58
Validity
Not Before: Jun 7 06:00:39 2025 GMT
Not After : Jun 8 06:00:39 2025 GMT
Subject: CN=5db5fcf7c093ee47d12743233136480b87882ac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:ae:c5:b6:f9:c5:ac:82:2f:d1:46:c8:d9:
c1:8d:f4:3f:c6:61:ae:8f:33:21:6d:ae:48:9a:c0:
28:57:d4:2a:77:8c:5c:c5:56:65:68:f7:db:d2:3b:
c7:0c:a2:21:87:3f:a5:f2:52:8e:c4:da:61:98:3d:
78:7e:ba:22:8c:c5:05:f7:99:5c:31:23:35:cf:e6:
21:a2:40:5f:29:fc:c5:88:19:94:85:bd:25:0e:9f:
69:13:d7:ac:53:e9:5e:61:e7:ad:23:ed:ba:44:09:
38:61:f8:e5:db:2c:a1:b1:37:fc:15:5b:e5:8c:4a:
f1:93:59:45:10:d4:26:d5:99:72:e3:4f:d8:b9:40:
d8:d7:c1:77:c1:65:98:e4:15:77:59:19:a6:79:f5:
c4:2b:68:6e:87:b6:a2:ab:e5:51:22:40:af:5f:8f:
76:ce:10:6c:67:93:69:d3:9b:c7:55:39:03:08:41:
f7:86:7a:9c:f9:bc:d0:c1:2c:36:c8:2a:a7:5b:02:
82:a3:ca:70:d9:e6:66:cc:4e:4e:42:96:07:36:4e:
f7:ab:c9:87:c9:fb:ab:8d:d9:7a:69:34:83:f3:86:
bd:d2:e8:21:cf:59:f8:cd:4a:ff:b0:70:27:5f:aa:
c6:27:74:48:ed:03:3a:dc:ba:ad:13:b5:73:ce:bd:
19:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:B5:FC:F7:C0:93:EE:47:D1:27:43:23:31:36:48:0B:87:88:2A:C4
X509v3 Authority Key Identifier:
keyid:F0:15:0B:3A:94:19:62:7F:DB:CD:B6:58:0E:87:8A:1C:9F:A0:CC:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8BULOpQZYn_bzbZYDoeKHJ-gzFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/575172-f7a2-4e43-962c-edc5ab995dbf/1/8BULOpQZYn_bzbZYDoeKHJ-gzFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8d:dc:cd:e1:d5:85:1d:93:cd:bd:30:7a:1e:07:f7:aa:57:
b0:b6:c9:b2:33:62:6f:1b:79:28:c1:24:2b:86:a3:fd:89:f3:
73:74:04:04:95:5b:80:82:fd:9a:3f:96:8b:a7:05:f3:57:36:
18:df:38:d6:bf:f9:90:00:3e:21:ff:b2:f5:87:93:68:46:aa:
82:6b:62:dc:8d:c1:e4:b2:ab:d8:d3:26:f3:f7:b1:5b:89:02:
65:c9:7c:48:91:23:0a:97:a6:ec:4c:4f:11:e5:4f:3e:cb:48:
68:56:2b:87:2c:a0:fe:01:81:64:9a:db:31:3e:b0:5c:ff:77:
77:67:11:3d:b4:88:c7:b9:9b:c4:e2:43:fa:59:fe:0d:64:11:
c0:d5:63:9e:24:8b:03:62:37:04:8c:2d:52:1f:5a:74:5a:57:
a4:a6:8e:83:b0:8e:4b:d3:74:a8:37:c7:0f:1a:88:3b:b2:c9:
d2:1b:97:6b:30:9e:ad:17:dc:7e:fc:04:85:80:3e:82:f4:bf:
53:c5:da:1c:f9:c6:f0:87:1e:4c:64:61:21:fb:08:fc:d5:30:
11:2f:5a:e1:31:82:a0:ec:40:3c:55:e5:85:c1:24:99:55:45:
7e:ff:9a:f6:d1:6f:93:a8:dc:9a:da:7c:d2:b1:c4:de:2a:40:
97:bb:31:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:10:17 2025 by rpki-client