Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
File: D_z8NFoGRqfPIlkFR34hg1dIhuA.mft (raw, json)
Hash identifier: RFlnAoj7i+X8e4jOlFrBAwQySMsWJN/3+4sOBOZZm5Q=
Subject key identifier: 98:2E:4B:23:9F:F6:7C:A9:2B:6E:6E:F6:9A:36:2B:FB:CB:EB:D4:39
Authority key identifier: 0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
Certificate issuer: /CN=0ffcfc345a0646a7cf225905477e2183574886e0
Certificate serial: 019750467E4B85D69A8FB3DB62331AF4C102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
Manifest number: 12BF
Signing time: Sun 08 Jun 2025 16:01:26 +0000
Manifest this update: Sun 08 Jun 2025 16:01:26 +0000
Manifest next update: Mon 09 Jun 2025 16:01:26 +0000
Files and hashes: 1: D_z8NFoGRqfPIlkFR34hg1dIhuA.crl (hash: ko9lR9uQHJAgntS4wV9V6eco1fM+47fogU9t+Uqj1ds=)
2: Md8iGia1MbUzqtIWwDExWkmRVgM.roa (hash: 9TNv7T0YESkDbmJU8WmVBlvb3hJYh8sZp0R9zt0P83g=)
3: zzfWrdnIm-Z-w7o1PR68Qstk9VY.roa (hash: kTwVtQXhrNaWPZylIvh+tacEo9MdRsMxrNowU5p51wY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:7e:4b:85:d6:9a:8f:b3:db:62:33:1a:f4:c1:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ffcfc345a0646a7cf225905477e2183574886e0
Validity
Not Before: Jun 8 16:01:26 2025 GMT
Not After : Jun 9 16:01:26 2025 GMT
Subject: CN=982e4b239ff67ca92b6e6ef69a362bfbcbebd439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:f0:3f:8d:99:0c:ca:b0:00:48:34:8e:fd:35:
bd:a3:33:2c:79:46:a8:b5:fb:92:e5:b4:68:85:8e:
42:fb:ae:ad:ad:2e:a1:ed:b5:7f:20:c8:80:b6:75:
67:d6:e8:53:25:c0:cd:97:01:1f:eb:72:0d:fd:45:
01:14:3e:95:e2:c7:f4:8e:48:e0:e2:d9:02:f0:0f:
0e:21:8a:00:d9:d8:fa:29:46:93:d4:ba:fb:d8:09:
22:62:3b:5d:d2:67:5f:df:ce:fd:74:ac:c2:d2:74:
8f:97:9a:b9:eb:60:9b:f8:dc:3b:a5:58:6a:ae:e3:
aa:af:ff:51:59:0d:2f:b1:58:52:8c:d5:71:ae:b6:
6e:be:35:ab:5b:c2:20:fb:21:c5:fc:52:b2:18:ae:
64:08:82:f8:9d:5d:cc:ec:20:0c:5c:94:2a:ee:73:
dd:b2:14:52:7b:e1:35:f8:81:a3:ae:c1:6d:31:ac:
3a:02:04:61:36:f9:aa:f8:14:2d:e5:6d:47:1c:28:
bf:39:40:3e:3a:c4:b6:29:c4:e9:be:21:5d:97:5a:
59:de:c4:b2:26:50:f8:88:39:f1:eb:da:94:ba:25:
18:28:86:5c:b4:79:1b:1c:29:c9:4c:0b:58:00:31:
16:dc:81:be:e1:bc:7a:59:a3:c9:aa:f3:0d:7b:18:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:2E:4B:23:9F:F6:7C:A9:2B:6E:6E:F6:9A:36:2B:FB:CB:EB:D4:39
X509v3 Authority Key Identifier:
keyid:0F:FC:FC:34:5A:06:46:A7:CF:22:59:05:47:7E:21:83:57:48:86:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_z8NFoGRqfPIlkFR34hg1dIhuA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/af282b-f597-407a-bef5-132f99cfaa53/1/D_z8NFoGRqfPIlkFR34hg1dIhuA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:f3:87:40:bf:9f:32:71:63:d5:3c:54:49:4d:80:d9:20:38:
3e:8d:73:33:0b:79:36:75:f0:a4:f4:51:60:c7:cc:42:fd:08:
d4:55:5c:86:fb:2b:57:1c:d0:a4:82:c4:9b:e0:4d:13:59:8d:
2b:02:3d:f2:ee:df:a4:96:26:81:b2:fc:5b:94:25:e0:b3:c1:
62:4c:35:eb:25:07:79:59:d4:d2:03:e3:e6:ce:22:05:80:3b:
49:95:c4:79:46:82:cc:5e:9e:d4:bd:96:08:de:cc:4b:ac:d4:
30:14:49:58:6f:ec:44:0c:d5:77:9c:4c:0b:40:3b:33:e8:14:
89:77:e9:b5:b7:50:98:1c:59:0a:61:6f:5d:75:34:c7:9c:0d:
d8:9c:74:34:b2:49:03:15:6a:08:21:9a:da:20:18:ec:f9:2e:
68:fe:7e:f9:8d:a8:3a:00:9e:8e:0a:6f:d7:da:b9:74:66:99:
33:33:44:cd:fe:6f:c9:8f:be:6a:a7:38:7a:d8:5d:f0:85:f1:
e7:55:bc:ff:dc:d5:21:82:61:8a:ab:24:49:23:d3:94:54:50:
81:5e:fc:61:b1:ac:c1:0c:aa:fa:76:d2:b0:83:ff:51:a3:3d:
a4:f9:f8:25:8d:28:f7:3d:e5:9e:58:85:6c:f4:cf:e3:fd:8b:
f0:f5:3b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 19:30:18 2025 by rpki-client