Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: BZsxlzh/Jo5l9Be/lMNdPYiEpLHFP0KFW04/D8fYO1k=
Subject key identifier: F9:58:08:81:57:A3:E5:C2:62:5B:8C:B1:63:98:16:BE:AD:50:E4:F0
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 01974A7A828E207F9B4698A86849C4EB7ADD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 13:00:32 +0000
Manifest this update: Sat 07 Jun 2025 13:00:32 +0000
Manifest next update: Sun 08 Jun 2025 13:00:32 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: lBZrxbQ7mg8LPO5fYHW85bngrxLt39zN9FELYdeIYJg=)
2: a-zhZjuXDc_FsfQbRuaEtluPpHA.roa (hash: 5+3esVT/zzC55YQOAsi2tnDDnrmv1Y7c5U2ef5q3Qdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:82:8e:20:7f:9b:46:98:a8:68:49:c4:eb:7a:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Jun 7 13:00:32 2025 GMT
Not After : Jun 8 13:00:32 2025 GMT
Subject: CN=f958088157a3e5c2625b8cb1639816bead50e4f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:10:f6:b1:37:75:82:47:4f:73:b7:fc:9b:5d:
01:21:63:bf:07:32:4e:69:84:cd:fc:3f:08:f5:c3:
cd:71:23:09:5a:39:cd:f5:37:9a:45:c5:23:32:77:
d3:fe:a7:ef:dd:fd:0e:63:c0:a2:05:32:34:48:fe:
a3:c0:3b:ca:95:11:37:4f:0c:3f:58:3d:b4:85:eb:
6a:be:7e:62:c7:ea:1a:9d:98:0b:db:96:e2:34:16:
65:0c:6d:99:4b:42:64:90:d7:ec:6e:66:ef:e1:ee:
ce:a7:78:d8:e8:8c:cf:10:94:0f:c7:01:49:83:69:
04:76:4f:36:f5:66:3b:21:99:dd:06:ba:59:90:d2:
09:2b:b7:ae:e9:70:92:bf:8d:5b:2c:d4:c2:8e:c4:
c7:29:58:24:9d:f7:68:c4:4f:21:85:1c:71:82:64:
fe:6e:52:f0:41:14:b2:bd:bd:0b:45:10:19:17:3c:
59:f9:c4:19:06:d7:c9:3e:2b:4a:0f:02:bd:c1:89:
8a:5a:11:d2:f5:05:01:25:d2:a6:be:b0:e5:55:77:
41:22:06:e0:91:2c:00:e4:2f:92:62:d8:0b:5a:60:
80:10:3a:c1:5b:da:52:e8:7a:be:96:3f:df:b6:5f:
8b:42:8d:80:b3:32:4b:e2:02:c2:d6:e3:f2:56:57:
cc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:58:08:81:57:A3:E5:C2:62:5B:8C:B1:63:98:16:BE:AD:50:E4:F0
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:c2:f6:a2:38:7e:dc:c0:c2:ba:e4:d2:65:4a:ec:2b:37:fa:
36:03:6c:83:16:51:60:6e:19:77:b3:8a:c8:62:59:4b:00:bd:
d3:b8:82:6d:e5:49:93:c1:f6:03:e5:c7:03:59:41:7b:7a:a3:
43:57:25:e2:80:d2:a2:ff:ad:0d:90:34:09:4e:28:67:c9:f7:
a4:20:98:2f:93:96:e3:0d:e2:83:dc:30:dd:7d:8c:c8:16:f5:
42:05:91:e5:18:2d:bc:a2:97:bf:e4:13:38:8d:ea:24:70:1c:
c6:cb:98:ef:bc:ad:ee:63:2a:89:73:00:58:9c:9f:0d:1b:c6:
a5:3c:ac:43:c7:2c:3c:4c:72:71:f6:a2:c4:e5:d7:b5:f9:5a:
d8:a7:46:96:f4:c1:21:93:7c:ab:4a:b0:2f:f8:a0:33:4f:6c:
b3:e2:9d:14:41:c2:63:46:88:54:f5:e9:83:58:5b:2a:5b:64:
7d:06:eb:e9:3c:81:7b:d8:0d:a7:a6:f0:17:59:13:82:8b:cb:
96:ae:74:ce:62:7b:e4:7c:c8:3e:5c:66:ea:bd:3c:2a:72:ac:
35:7b:c5:9d:10:97:55:71:3a:41:c7:51:13:5a:e7:2e:f2:d0:
86:b2:a6:0e:4f:17:ba:6a:8f:05:7c:b1:16:ca:ba:4d:2f:b0:
a7:06:76:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:06:43 2025 by rpki-client