Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
File: 8WmQKta3v0YB7qpecj7yPXD6dxQ.mft (raw, json)
Hash identifier: 7VbeFFr+S7IgOaf2rTK4AKMhz1czT0yvQwGraPjoxzo=
Subject key identifier: 07:83:65:94:DA:83:E5:F5:D0:01:BC:A3:E6:99:84:78:09:EC:B0:D9
Authority key identifier: F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
Certificate issuer: /CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Certificate serial: 01974C6999A7D7E1966E7A073EC511E98563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 22:01:18 +0000
Manifest this update: Sat 07 Jun 2025 22:01:18 +0000
Manifest next update: Sun 08 Jun 2025 22:01:18 +0000
Files and hashes: 1: 8WmQKta3v0YB7qpecj7yPXD6dxQ.crl (hash: y8kBq3CsPWge1qkLhHg88MoxY8KasvjB6CYSJFWQLAI=)
2: f0RuL1swXlvp41CLCru-Mt1TNyc.roa (hash: rkjC9/AqAR3AXAOW7ubyDoWQhwKzvm+Iu5S5RZdguhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:99:a7:d7:e1:96:6e:7a:07:3e:c5:11:e9:85:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Validity
Not Before: Jun 7 22:01:18 2025 GMT
Not After : Jun 8 22:01:18 2025 GMT
Subject: CN=07836594da83e5f5d001bca3e699847809ecb0d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:eb:2e:22:d5:89:32:8f:5b:47:51:f0:e7:
82:da:39:17:d6:03:3f:2b:1e:3c:cb:2f:e8:f5:5c:
fc:bc:53:93:25:58:ba:9e:52:20:4c:13:b4:b8:69:
55:86:63:e8:c4:f3:6f:b0:da:09:38:5d:83:b2:13:
01:a8:cc:79:c8:89:e9:a7:b8:4b:69:57:9f:b6:02:
cc:b4:63:e8:05:2b:fe:e5:d2:2a:61:ea:46:bf:3d:
79:75:9e:8b:e2:9e:5e:1e:47:dd:0c:ab:19:12:85:
93:d1:fc:89:cb:49:c4:12:c8:77:14:b7:6a:30:6b:
ba:bb:fc:76:e8:aa:a3:ce:54:45:52:89:7d:a4:e2:
28:70:44:98:a8:92:a2:34:f7:3f:5c:d7:db:29:06:
44:84:f3:91:73:17:da:fb:88:3a:67:54:83:0a:33:
a5:3a:4c:02:f7:4f:7a:41:85:ef:a4:4c:01:24:88:
53:38:7a:2c:a9:d8:fa:05:46:78:2a:e1:4f:9e:1a:
31:9b:25:5c:cf:8e:2e:68:0a:d2:25:e6:94:35:3e:
b8:fc:05:fe:37:e6:5f:f8:1e:69:e2:7e:92:c3:1a:
67:a9:e7:c2:b0:ab:f2:b4:a7:f7:08:d2:cb:6b:62:
50:10:ee:81:b1:52:91:86:e7:ef:29:27:99:2e:62:
5e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:83:65:94:DA:83:E5:F5:D0:01:BC:A3:E6:99:84:78:09:EC:B0:D9
X509v3 Authority Key Identifier:
keyid:F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:03:7b:b2:e8:d4:85:30:fc:9d:55:89:5f:a5:71:64:83:a5:
fc:74:0f:c1:95:55:fc:89:62:8b:fa:fe:98:c0:25:f8:a1:b6:
0f:52:e4:f0:89:cb:eb:cd:9b:e8:6b:fd:eb:6d:37:b8:a8:66:
6e:9f:8a:46:6d:a3:ac:b4:52:14:da:11:50:cc:7f:e9:a7:88:
15:bf:36:77:4e:56:be:37:0a:34:ce:05:9f:ff:35:5d:1e:11:
23:48:aa:91:97:7b:7f:fb:7e:7d:67:b7:21:51:d9:ab:48:b0:
49:8f:1f:8c:17:39:34:cf:ca:cc:21:7f:c6:5c:d8:21:de:6d:
9c:71:5c:c0:82:15:86:cc:14:56:0a:1f:93:7d:0b:f4:13:c4:
b4:36:b7:bd:58:b4:88:a9:6d:35:c4:8c:1e:cc:06:d3:78:62:
9a:5c:73:33:a9:aa:05:ba:f2:7a:40:8e:fe:2b:00:f1:b2:54:
58:d9:25:28:e8:2b:59:b0:2a:9e:a4:ec:5c:7a:cd:71:46:41:
53:b4:49:4c:c7:b2:c0:6b:59:55:81:e4:51:39:3f:e6:e1:b7:
14:ba:65:53:c8:a1:ed:a8:2e:8d:2e:ea:fa:15:b1:14:9b:d7:
58:25:db:7d:de:99:82:ad:b3:40:1d:e2:a1:66:06:d7:3e:42:
dc:df:7a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 05:46:17 2025 by rpki-client