Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: Ond3Svo6vjCEh+cG8AwaCnlkJRufMmdk8jqHegH4vq0=
Subject key identifier: 5D:4F:40:BE:EE:F5:00:67:3D:A3:44:85:DB:40:BE:14:FA:E1:D3:09
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 0197474270866522BF8EB9311BA36C76AD7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 29
Signing time: Fri 06 Jun 2025 22:00:25 +0000
Manifest this update: Fri 06 Jun 2025 22:00:25 +0000
Manifest next update: Sat 07 Jun 2025 22:00:25 +0000
Files and hashes: 1: Mf_fXP2jPHVmLONdZ1xYPtuNu7Q.roa (hash: LOr2gDDIVLXiBV/jZXlGLfpc3s69N4tqrkcfM7qBuoA=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: DFsoYSP2VC26yf8Giia/h4BBgNx2WiZsVOCxCnujMic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:70:86:65:22:bf:8e:b9:31:1b:a3:6c:76:ad:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Jun 6 22:00:25 2025 GMT
Not After : Jun 7 22:00:25 2025 GMT
Subject: CN=5d4f40beeef500673da34485db40be14fae1d309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:a2:03:bc:e4:ea:09:8c:c8:1c:6c:dd:e5:30:
fb:3e:b3:2b:bb:f0:d7:fd:77:64:fc:1c:21:c5:42:
4d:3a:e7:09:fc:16:03:19:f9:07:a8:c7:bd:68:7b:
04:87:f2:cd:07:fd:a4:fe:25:58:93:32:ff:11:16:
3d:3c:7a:2d:21:64:5a:b6:51:59:ed:88:ff:c0:1e:
42:11:e4:29:b2:54:0d:9d:7a:f7:49:03:ec:ed:72:
ca:a8:4d:86:30:9f:d1:ab:8a:d4:94:84:22:88:a2:
3e:63:52:04:a6:a6:d5:96:6c:97:69:3c:f4:23:7e:
9c:c4:8f:8e:0b:bf:2c:6a:1c:9c:f7:28:4f:b8:20:
c1:c3:fa:a3:7d:83:9f:22:73:32:6f:94:f5:32:8a:
f9:c3:81:85:84:65:8f:8c:af:0d:ce:65:57:8d:1f:
b2:78:01:e1:fa:5c:bb:a7:f0:1e:14:68:f6:9f:20:
6a:53:36:85:f5:fa:ba:79:b9:ad:c6:a0:dd:0d:47:
66:ac:c0:a6:7b:df:bb:5d:8c:b0:bf:d3:34:5e:0f:
a5:5d:89:48:dc:c0:dc:43:a7:25:67:3e:e8:ff:30:
0d:5c:65:34:0e:1a:22:bf:37:70:b8:34:b1:64:8a:
90:e1:13:e3:ed:de:ab:7a:da:64:f2:d7:79:d1:45:
53:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:4F:40:BE:EE:F5:00:67:3D:A3:44:85:DB:40:BE:14:FA:E1:D3:09
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:47:35:82:f3:be:fc:d9:6b:e0:10:46:f7:64:4e:77:12:08:
60:b9:ab:99:94:a6:a0:49:83:1e:8b:9d:c9:8a:2c:3b:d1:da:
be:f5:2d:e6:18:77:47:25:0f:4c:a2:45:aa:4c:44:e7:52:9d:
1c:d2:01:26:82:9d:79:a8:40:75:d7:53:7f:06:f1:db:3b:a1:
27:eb:90:f5:1b:83:81:72:88:e9:b0:05:7f:cc:5f:a6:c3:5b:
bd:7e:49:79:09:83:02:73:54:c2:36:9c:04:d0:43:fe:94:62:
67:87:e1:16:6e:94:85:5e:1c:28:20:91:b7:86:cc:03:65:03:
eb:c0:a0:a5:07:a1:5b:b4:c5:b0:72:8f:76:72:96:a8:32:f6:
02:b0:0a:ba:36:a3:26:5e:e4:d0:d1:bd:f0:4d:cb:b7:51:22:
80:c9:d6:3b:3a:2d:73:f5:4f:26:4d:53:95:68:e0:ee:6d:6a:
eb:42:21:fb:87:f2:43:8c:f0:d5:a5:89:76:f8:08:6b:ce:a1:
c0:8e:ed:66:9f:11:5e:37:02:7f:80:74:3b:4b:cf:34:99:3c:
c0:4f:d4:25:ce:2a:ab:4e:72:ea:87:c9:9f:97:2f:87:90:7e:
2c:57:cd:35:0d:49:14:9c:21:6b:61:a2:88:a0:f4:25:41:9f:
d4:92:c3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 07:13:27 2025 by rpki-client