Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: 13QvldJCrYsDopQNiQgzEp1MOeUzQJqjKLIEzKn3rs0=
Subject key identifier: 23:29:F2:AE:E7:C1:AD:67:F8:E5:8D:E0:98:3F:86:FF:92:32:E1:A5
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 019747E74C1E25C53DF15E8B642534E4A0D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 09B6
Signing time: Sat 07 Jun 2025 01:00:30 +0000
Manifest this update: Sat 07 Jun 2025 01:00:30 +0000
Manifest next update: Sun 08 Jun 2025 01:00:30 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: XOpLOnnsvLdYYlXuAwoFN3edaomoPxq6CCLp2Mt2IKA=)
2: fN8SYZ83oc_gHjiIm2H8fBBsylM.roa (hash: ITxtpDSVYxcGXneNxnFdZuRlc/rmrmnyY6/WYXyAU60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:e7:4c:1e:25:c5:3d:f1:5e:8b:64:25:34:e4:a0:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Jun 7 01:00:30 2025 GMT
Not After : Jun 8 01:00:30 2025 GMT
Subject: CN=2329f2aee7c1ad67f8e58de0983f86ff9232e1a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:07:0c:84:86:29:91:fa:5d:6c:31:b6:b5:
3d:9a:92:54:70:52:3e:b8:d6:7b:fc:ee:3a:d9:59:
4c:3b:21:93:51:8a:82:14:ca:37:10:a1:5b:b4:c2:
23:2f:98:e0:01:2a:30:f0:ac:ea:70:ef:29:f2:f5:
42:b4:d3:8d:5b:a6:7f:d1:ab:39:01:67:c8:b0:81:
11:72:6d:8e:2f:ef:0e:aa:78:47:5d:2e:24:4a:8d:
d3:7f:1f:6a:9f:f2:9d:31:69:ea:36:07:96:e8:58:
da:79:ed:c5:c0:ec:58:62:d8:14:d8:33:5d:ce:6a:
1a:34:f7:67:01:fc:81:f9:4c:7e:d0:d5:10:a6:e2:
1c:0d:1d:8a:37:41:4f:9e:41:3d:e7:52:4d:6d:08:
9a:60:42:39:ae:0e:8f:b4:86:0d:76:4d:ef:19:db:
49:c7:f0:e5:fc:38:60:67:2f:27:0e:a9:32:a4:26:
a1:52:97:6d:82:21:c7:68:3e:d6:4f:0d:ac:df:bf:
29:59:27:18:07:fd:a7:53:6b:af:03:76:81:f4:9a:
3e:52:c2:d1:1e:f3:b7:0a:46:8e:80:fa:95:56:f0:
40:7b:c1:60:40:71:a2:0b:99:17:a8:0d:1e:ab:1e:
42:8b:60:74:26:fa:a8:a2:22:9d:91:cd:f1:2d:28:
1d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:29:F2:AE:E7:C1:AD:67:F8:E5:8D:E0:98:3F:86:FF:92:32:E1:A5
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:64:a5:e0:1c:91:d0:e4:73:3c:c5:85:b3:8e:83:5d:f9:ce:
61:cb:8b:ff:31:1d:2f:41:5b:36:5c:49:1a:58:42:e4:ae:e8:
65:cf:16:fe:53:7d:b0:f7:f7:11:a8:0c:e6:83:31:c2:19:11:
b0:33:15:d2:d5:4f:17:7f:45:c3:0a:3d:ca:c3:a6:2d:97:bf:
ac:ec:c5:dd:29:a9:96:9a:13:0b:7f:31:51:f5:35:10:5b:83:
9b:96:51:33:13:51:dc:91:ab:da:9b:d1:e0:ec:af:e3:04:ba:
f2:e4:41:e2:6c:d3:ad:23:d8:a3:97:09:56:17:56:ec:5d:1e:
94:0d:f5:32:d8:8c:8d:7b:85:a5:73:b8:a6:9f:47:52:61:f8:
a2:92:cd:f8:d0:84:67:b9:dd:29:0c:57:88:e4:e7:25:27:16:
61:84:37:85:cb:fb:96:d9:48:eb:fb:1d:79:5a:39:ff:3a:9b:
f9:84:0d:81:77:4d:8a:76:33:0e:d2:b0:58:e4:2a:d0:ac:18:
df:8a:82:6d:5a:39:33:64:d9:6b:41:08:a1:3e:d3:fb:1b:69:
34:60:05:df:bf:60:52:32:52:07:15:a7:96:12:83:c4:93:90:
f5:3b:b1:93:7b:72:5d:5f:8b:6e:d0:47:43:19:92:dc:32:9b:
6a:32:93:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 09:14:20 2025 by rpki-client