Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
File: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json)
Hash identifier: UqcNbAETt89FSFmwwhW3gzbHdzlXu7VQWQFIBUj3EnE=
Subject key identifier: 2A:D9:5A:14:05:0F:08:A4:7A:0A:89:7E:6E:35:AE:DE:DD:13:1A:6A
Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
Certificate issuer: /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Certificate serial: 01975158D6D665297191008C980A03C42912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
Manifest number: 0351
Signing time: Sun 08 Jun 2025 21:01:06 +0000
Manifest this update: Sun 08 Jun 2025 21:01:06 +0000
Manifest next update: Mon 09 Jun 2025 21:01:06 +0000
Files and hashes: 1: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: DIrrux6PK25p7YojE+aChiiy65OzM52vMsrk5sJ0zfg=)
2: _MwQhKVnR_aG2vdLhL9GNdGXvOU.roa (hash: L7braIyd07lwFhqp60fjEjjTIhLctM+CjmNa1wVvJFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:58:d6:d6:65:29:71:91:00:8c:98:0a:03:c4:29:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Validity
Not Before: Jun 8 21:01:06 2025 GMT
Not After : Jun 9 21:01:06 2025 GMT
Subject: CN=2ad95a14050f08a47a0a897e6e35aededd131a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:de:ec:04:1d:65:ce:4d:b4:ac:0e:da:1c:be:
a3:63:6f:e5:95:9c:2e:85:c8:c3:04:f0:7d:15:8a:
02:8e:0a:51:c0:2a:28:de:f9:1b:c2:04:d4:e9:93:
83:08:56:d1:ca:6b:a2:0c:f7:79:cf:1e:51:57:1f:
73:f6:65:e1:94:dd:55:b8:09:f9:14:6e:ee:02:9a:
b9:3f:80:4b:2d:a6:5f:83:5c:2e:0d:d4:c4:7f:85:
e6:a2:65:6a:ce:e9:c3:33:bd:5c:c5:ae:f2:59:a4:
e9:a0:84:1c:1e:c5:1f:cf:c9:6f:be:87:26:b4:e5:
fd:a3:db:45:fd:af:70:61:bc:ed:52:f0:37:13:0f:
5f:88:68:23:94:6a:e4:53:b3:7c:93:88:a2:07:8d:
c0:41:75:5c:33:cc:38:5c:c0:c7:30:81:da:2f:a9:
06:fa:f5:e7:74:53:f6:07:31:01:04:0f:0f:d7:72:
9d:e8:ae:93:82:e7:35:58:f7:6f:31:02:02:53:64:
e5:06:7f:72:df:cf:ac:aa:3e:90:dc:7d:db:af:04:
a2:4e:3f:b4:4f:2c:d7:0c:2f:af:22:a4:b8:59:0c:
16:11:6c:41:e0:d2:7b:c9:d0:e1:eb:7b:90:7f:ae:
23:c9:5b:90:2a:73:77:70:aa:6f:5a:5e:e5:67:71:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D9:5A:14:05:0F:08:A4:7A:0A:89:7E:6E:35:AE:DE:DD:13:1A:6A
X509v3 Authority Key Identifier:
keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:4a:e7:89:da:9c:c8:d4:e9:48:5d:2b:b4:1f:14:2e:0a:d3:
5b:6b:7c:1a:2b:b9:3d:ae:be:b4:fd:bf:85:8a:1f:60:87:af:
6a:41:65:aa:6a:f5:12:13:0e:fa:f7:94:49:7d:34:a3:31:91:
8a:d0:13:37:ba:c7:25:c4:05:59:35:ca:cb:45:11:ab:4d:6c:
5a:f2:72:f7:ab:5b:e3:3b:31:72:d0:dc:01:1d:00:4e:0c:da:
83:0e:41:c7:e9:e1:ce:8b:23:8b:f8:97:51:ab:60:eb:79:87:
7b:af:6b:ca:75:e7:75:71:d1:81:e7:aa:51:f6:52:22:c8:79:
4a:f6:2f:57:32:41:e7:0c:88:cc:76:4d:09:6e:51:da:68:c3:
d3:ed:bf:e1:af:c2:c3:4f:c4:1d:03:62:55:c0:2f:8d:d1:73:
51:de:74:a9:5e:c8:6e:0d:77:b4:d7:8a:d6:c1:d1:fd:e2:07:
fa:ad:be:08:b6:36:43:8a:70:16:e3:3b:16:fc:82:95:b1:db:
a0:d8:14:94:53:af:f2:aa:25:95:bd:00:03:a9:de:41:af:b2:
6a:03:ce:c0:c8:75:9e:34:9a:28:af:16:c2:6c:23:bd:34:55:
ac:d2:49:e7:e3:5d:aa:a4:97:e3:83:fb:ca:5d:0e:4e:51:ce:
a7:f4:62:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 07:24:34 2025 by rpki-client