Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: mzMenJbeZpdqpFD45lXxCq4gouHg4L7ektCLOdjww3Y=
Subject key identifier: 63:FF:17:43:64:EF:42:AF:EC:72:F6:38:CB:01:17:96:93:20:9F:7D
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 01975D5CC7A6470ED2EFA43ED60448372221
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 0E7A
Signing time: Wed 11 Jun 2025 05:00:50 +0000
Manifest this update: Wed 11 Jun 2025 05:00:50 +0000
Manifest next update: Thu 12 Jun 2025 05:00:50 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: sJvU76z8gwUF9kvT75nyPmHcs/pcS3loHV14LLxG4Qw=)
2: alsuRe4zIZd9zoPDISZt1Bveg70.roa (hash: EWpeZ5riJCjW/KG77BSV/gky0WcGkW9H+LHjXXYnpDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:5c:c7:a6:47:0e:d2:ef:a4:3e:d6:04:48:37:22:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Jun 11 05:00:50 2025 GMT
Not After : Jun 12 05:00:50 2025 GMT
Subject: CN=63ff174364ef42afec72f638cb01179693209f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b4:4f:59:f0:f7:e3:aa:1a:63:ad:03:ae:ca:
a2:c9:a0:66:b9:8f:6e:81:36:9c:ec:97:b3:72:8d:
eb:9e:32:d6:db:d6:a3:01:73:83:e4:41:e0:e9:fd:
e5:32:26:a0:2a:72:05:2e:59:0c:3f:6a:be:e5:4f:
cb:07:f5:e3:b4:13:52:bd:3a:78:10:b7:98:63:fb:
e6:f6:9b:72:23:d2:00:49:de:f7:8c:66:df:a9:b6:
76:3e:f4:0d:e9:00:de:77:40:b2:e4:8c:e7:62:a0:
27:8f:cf:b3:97:be:1b:fb:da:8f:1f:4e:bf:3a:ef:
4f:b6:84:cd:de:7f:6f:bf:f7:a2:4b:91:64:a6:0d:
64:7e:7f:43:e8:4a:87:25:55:4f:31:6b:d5:a7:5c:
55:32:31:ea:b0:76:ea:81:21:bf:4c:7c:8b:10:00:
37:2c:86:a2:7f:a4:d1:da:28:43:a4:10:19:d0:1d:
cb:06:a4:d6:ef:28:ba:35:e9:7e:31:82:a5:9b:1b:
34:61:17:97:fa:9a:29:ae:bc:c0:69:b1:d0:ec:69:
ba:9a:3f:4b:b9:86:19:ae:73:1f:58:95:48:63:f8:
6b:6d:df:13:83:14:4f:da:39:6b:b5:fb:3f:1b:9c:
2a:f3:8f:c3:5c:f9:9e:d5:bd:a9:10:8d:8b:47:26:
27:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:FF:17:43:64:EF:42:AF:EC:72:F6:38:CB:01:17:96:93:20:9F:7D
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:bd:cf:9e:d1:18:7c:b7:ca:ec:aa:a5:f1:39:7b:fd:57:4d:
31:79:9d:fd:ee:f1:6a:c7:2b:7d:43:0c:c0:0d:bf:03:0e:97:
24:02:c1:a7:bf:d7:f6:6f:d2:89:ed:18:f0:73:23:2e:7d:fc:
95:aa:74:24:f9:e8:b6:1c:21:d1:c7:22:2a:58:1b:73:de:b1:
ef:01:ff:69:23:ff:35:b0:9a:ad:08:75:b5:e3:c2:24:b9:22:
84:7d:16:fc:a9:2b:3e:e8:00:fc:5a:08:e7:36:0e:cb:5c:84:
a8:97:fe:b8:c7:f0:40:c7:84:ad:25:1c:de:b4:06:d3:26:26:
d0:46:1f:32:30:ed:48:e5:5f:ef:ce:82:9a:a8:73:b1:4b:f4:
8d:56:69:e3:ad:50:70:2e:14:9f:56:de:c8:fc:4c:aa:eb:1a:
62:6c:73:d6:fa:94:7e:aa:b6:a7:ed:03:9f:71:72:d4:0f:58:
e9:cd:14:13:27:61:9a:19:8d:fe:1d:02:b5:e5:61:5f:89:7c:
fa:c1:8e:e4:d7:2a:c8:f3:d0:69:4b:52:e7:2a:a7:e3:d8:53:
b2:86:59:b1:d6:c5:24:a1:59:94:5b:e3:d4:95:3c:a8:cc:a3:
05:78:a5:28:f4:7f:03:ae:9c:9c:e3:4d:b4:69:ef:64:e5:06:
6b:35:f4:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 11:02:41 2025 by rpki-client