Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
File: j8Yziy6SHZEmxTYwPweMnruah1I.mft (raw, json)
Hash identifier: 1mcAQvEwP+E24ekuvXdoDOI3achkqIOmMKa4o2LlG1o=
Subject key identifier: A4:CB:64:DA:24:D7:E6:70:F9:F6:E7:A0:1C:72:A0:A6:B1:1B:BB:91
Authority key identifier: 8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
Certificate issuer: /CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Certificate serial: 01974DB2F383728D831516AAD45364A12D4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 04:01:02 +0000
Manifest this update: Sun 08 Jun 2025 04:01:02 +0000
Manifest next update: Mon 09 Jun 2025 04:01:02 +0000
Files and hashes: 1: E9E2NhUKJP_3TXPCgDM1hcFl3-A.roa (hash: aBze8FprGa3p4/CGvI/TFD3mAyVwA/i5ic5RvbopQHs=)
2: j8Yziy6SHZEmxTYwPweMnruah1I.crl (hash: OKrljce6ZIwNyhhwROV3niPpQ83zmyCgHuzCChMcQCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:f3:83:72:8d:83:15:16:aa:d4:53:64:a1:2d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc6338b2e921d9126c536303f078c9ebb9a8752
Validity
Not Before: Jun 8 04:01:02 2025 GMT
Not After : Jun 9 04:01:02 2025 GMT
Subject: CN=a4cb64da24d7e670f9f6e7a01c72a0a6b11bbb91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:05:cc:7a:64:04:a0:e7:f4:1c:f6:93:df:51:
c5:be:30:d7:fd:7d:07:eb:4b:74:1e:c3:25:e1:44:
3c:ed:2d:83:05:a9:e7:8c:66:3a:f8:da:f8:0c:37:
10:0b:cb:a9:8c:5a:ef:86:c8:85:60:b7:be:1f:d8:
02:9a:71:10:e0:05:ba:8b:3a:2f:c7:65:e5:6d:65:
07:3b:40:e5:6f:9c:75:5c:67:f6:98:a6:64:30:16:
41:06:c4:5b:51:96:50:5a:3d:2b:62:d7:83:ae:19:
8c:d0:b5:ea:9f:d0:e4:0e:83:8a:77:ef:aa:40:77:
33:d5:07:0b:6a:0a:05:d6:35:70:2c:1a:79:4f:7b:
d0:81:f1:26:a5:11:d8:01:b3:f9:ec:d0:27:71:e3:
1c:03:5a:ee:27:44:37:52:8f:a9:c6:86:aa:09:58:
e7:64:a9:84:6c:31:cd:38:ce:90:53:3f:cd:3c:7c:
77:b3:fd:35:be:c1:8c:e7:2b:68:73:55:48:a1:7c:
08:58:59:a7:88:1b:b2:13:a1:7a:d2:b0:ce:0b:15:
36:4e:17:09:20:98:01:80:f0:dc:c9:8c:f7:a0:f3:
a1:ac:f4:7a:89:ea:03:6c:f3:6e:47:93:34:67:19:
c1:2d:12:26:c7:bb:96:19:47:09:66:3b:a8:97:87:
7d:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:CB:64:DA:24:D7:E6:70:F9:F6:E7:A0:1C:72:A0:A6:B1:1B:BB:91
X509v3 Authority Key Identifier:
keyid:8F:C6:33:8B:2E:92:1D:91:26:C5:36:30:3F:07:8C:9E:BB:9A:87:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8Yziy6SHZEmxTYwPweMnruah1I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/cfcb93-d8f4-469a-90f9-8f34df304927/1/j8Yziy6SHZEmxTYwPweMnruah1I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:e7:35:7c:9c:59:e9:2d:d5:3b:aa:69:f5:e7:20:1b:be:ed:
c4:37:f9:41:d7:09:2a:9d:ee:00:fc:77:ee:d0:e2:28:93:a7:
94:5e:3f:32:86:86:af:19:80:84:12:8b:8d:00:12:b2:0f:66:
0e:31:93:51:6e:56:f4:cc:2d:cb:11:36:b5:62:a5:9d:18:88:
20:a8:28:3c:e4:2a:16:c8:bc:93:3d:4f:c5:1c:ef:e3:df:e8:
f6:2c:8d:c3:97:21:90:61:2c:24:1c:5b:a6:9e:46:e9:7a:d9:
cc:37:6c:bc:74:1c:df:39:e5:c6:08:d5:13:b3:3f:af:1a:c4:
08:16:4a:8e:0e:88:cc:3c:20:36:76:a9:42:55:11:d0:09:ba:
52:95:d1:04:7c:9e:43:5b:c2:3b:49:d8:7c:54:e1:90:88:3a:
7c:62:21:a1:e9:0f:7b:c1:6f:ab:02:7c:4e:1d:be:b1:24:7f:
55:ec:8f:e8:f0:1f:9f:c8:2f:67:21:10:ac:4e:26:5d:7a:da:
f7:83:c7:16:06:92:74:26:60:0c:df:f2:6b:62:af:58:83:30:
31:3a:88:5d:09:c5:26:c0:28:bb:84:e8:36:70:30:9f:d5:5c:
ea:a0:ff:c9:5b:53:40:7d:53:62:c1:c7:16:3a:b6:b5:72:a4:
89:eb:d1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 09:18:10 2025 by rpki-client