Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: /tKA2RosLwkPGjSBRpvOU3cFSSMkkd3lBpm+8WdE+ZI=
Subject key identifier: F3:B8:94:ED:03:1C:DA:30:E4:5A:9E:6A:80:B0:6F:69:A3:19:4D:E6
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 01974B56270A1AF4CF06C5287608E767ACD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 1027
Signing time: Sat 07 Jun 2025 17:00:26 +0000
Manifest this update: Sat 07 Jun 2025 17:00:26 +0000
Manifest next update: Sun 08 Jun 2025 17:00:26 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: nJsDbf3nieQ4ey1v5mR+w8fAkOA1ob59NRIbAglS+lo=)
2: mre0Sbb8szBBX4GresgiiwdF634.roa (hash: KGpatw4GtK16xXPbD1RSTnF7RbGtyhCDwaJXsQ0f2K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:56:27:0a:1a:f4:cf:06:c5:28:76:08:e7:67:ac:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Jun 7 17:00:26 2025 GMT
Not After : Jun 8 17:00:26 2025 GMT
Subject: CN=f3b894ed031cda30e45a9e6a80b06f69a3194de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:90:2b:35:45:c6:2b:1a:f9:5e:b3:56:81:94:
41:f9:9e:99:d3:50:65:87:d4:9a:e7:8a:42:94:1d:
53:0f:28:84:f6:d7:8e:1d:97:c5:4e:c0:3e:c3:8a:
42:2d:3d:bf:ed:d1:71:3e:c9:95:83:41:f4:38:a6:
23:ad:f9:05:fa:19:ee:de:da:73:7f:02:28:98:82:
9f:7e:a2:8d:db:73:19:5d:03:39:81:7c:dc:c6:c3:
9d:ff:c0:24:f6:6d:d1:eb:3f:ad:6d:f3:a2:b5:f0:
06:b2:13:ee:4d:bd:91:22:b0:d2:79:4c:e7:5b:ec:
29:5f:56:91:17:38:20:e2:3b:07:6f:71:cd:b0:55:
56:71:da:13:25:53:8b:56:5e:6a:c6:00:53:63:84:
eb:b7:90:a3:51:68:0d:43:06:b2:f3:45:19:89:a2:
9a:a4:75:15:70:e5:21:eb:1e:28:21:f3:18:ee:a5:
47:4c:08:9f:a6:aa:16:2f:94:88:f9:0f:cb:31:e2:
3c:da:bd:02:6d:90:0e:19:8c:77:73:74:fd:43:4d:
24:6a:86:ec:6b:b1:55:6e:49:57:07:ec:d4:e7:21:
5f:6a:74:09:22:53:b4:ba:a8:b7:7c:94:e8:24:d6:
6d:87:58:0c:73:10:21:82:e9:61:cd:9f:3f:fc:72:
f2:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B8:94:ED:03:1C:DA:30:E4:5A:9E:6A:80:B0:6F:69:A3:19:4D:E6
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:08:91:59:22:d7:b7:e1:8a:a9:c9:5f:2c:2e:6f:eb:c8:ea:
14:ac:23:ef:c1:4c:da:72:a4:51:cc:e3:b9:1b:91:27:ce:9e:
03:d0:75:5e:a7:7f:74:7f:f4:ff:7c:db:ea:13:86:6f:d8:19:
39:d7:3c:e3:59:d2:5b:39:39:ab:af:26:88:60:ce:78:8a:38:
83:34:12:2a:60:98:e0:00:e8:3d:78:75:da:bf:bb:42:11:26:
8e:dd:50:a3:bf:8f:5e:d5:45:99:98:b1:24:09:29:f7:61:55:
2f:75:cf:02:ca:fa:0f:80:ec:8a:3e:d3:7a:de:2d:1e:e5:13:
e6:c6:49:5e:b8:de:04:8e:f2:93:4b:8e:93:1f:6c:35:8b:76:
76:7a:23:65:42:90:e0:6b:19:18:be:ac:54:65:3d:b5:d0:c4:
e0:60:52:6c:67:7d:26:b4:39:ae:ce:76:6d:a9:c2:46:09:47:
34:3a:b2:ac:36:71:07:58:33:81:79:c9:05:c7:7f:28:da:ac:
1c:7f:e0:2a:66:a5:75:5d:a6:2e:b9:a8:ba:dc:3c:56:5f:59:
6f:3c:f6:e6:6d:f6:c8:e5:35:ed:80:07:e4:3d:d4:56:b4:9b:
49:20:b6:56:43:85:40:c8:b4:5e:ef:b3:39:4b:64:12:87:86:
f1:c9:36:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:27 2025 by rpki-client