Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: zZhMbJP2Y7WsXjTsy6I2hiUzuexT61SPMCEQyM16dKc=
Subject key identifier: D7:67:AD:AE:FB:EC:2E:60:7B:95:1C:FC:C0:24:38:38:4E:9A:7B:62
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 01974B8DABB289ABCEDD2C219A2244325786
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 0D0B
Signing time: Sat 07 Jun 2025 18:01:05 +0000
Manifest this update: Sat 07 Jun 2025 18:01:05 +0000
Manifest next update: Sun 08 Jun 2025 18:01:05 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: aIcDdS9aznwBgDk2CgEKe9P0HBsWhmg5vwVOowy4tPo=)
2: Nh04CLMcck1XHS9AATe9hyD29NE.roa (hash: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:ab:b2:89:ab:ce:dd:2c:21:9a:22:44:32:57:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Jun 7 18:01:05 2025 GMT
Not After : Jun 8 18:01:05 2025 GMT
Subject: CN=d767adaefbec2e607b951cfcc02438384e9a7b62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:0a:87:37:73:05:1d:02:33:a1:c1:9e:36:2a:
28:e2:a6:c0:38:60:4b:77:3c:1a:e7:f1:21:e7:af:
fd:ea:30:a3:09:32:96:b3:02:84:a1:a9:f1:9c:54:
6d:72:d9:9c:34:92:c9:b9:9c:9a:ab:a8:b5:ac:59:
ba:45:22:d1:dc:af:09:ed:f5:ed:c2:c6:98:9d:e9:
1f:d6:7a:af:b5:39:a3:e1:57:46:b4:7d:fc:a4:9f:
e5:0d:bb:f9:6e:10:f2:50:2a:01:56:1d:9d:26:3a:
a6:6f:99:89:8f:bf:4b:14:7c:7b:d5:1f:99:5a:df:
0f:35:31:47:e6:f0:83:84:df:d3:49:03:8d:7e:93:
9f:ec:63:83:a2:8e:35:21:6d:35:20:9e:60:a7:9d:
f7:b1:0a:20:eb:aa:83:3c:fa:4c:1d:9a:fa:8f:de:
5e:60:92:81:00:a9:71:d0:36:78:87:e2:ac:e7:f8:
81:eb:a1:99:c9:8f:13:73:0a:1a:17:e1:86:a0:c9:
1e:ca:96:77:b9:63:0e:8e:4d:5d:98:4d:a8:02:b7:
86:70:eb:ba:b8:5b:f6:c0:df:4b:85:8f:0b:c7:0f:
43:de:0b:09:39:0f:62:3e:ee:5c:05:8c:be:58:1f:
d3:96:e2:a3:f0:05:5c:73:4e:6c:e9:a6:e4:82:6c:
d9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:67:AD:AE:FB:EC:2E:60:7B:95:1C:FC:C0:24:38:38:4E:9A:7B:62
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:fe:e3:df:42:80:11:4d:cc:09:05:4c:c1:4f:06:5e:af:79:
5d:90:04:58:98:0b:e6:72:6e:f0:3b:b3:21:55:40:b4:31:08:
95:ba:20:47:4c:a6:9e:ef:21:b2:cc:6e:8b:7d:71:37:d6:f3:
9b:59:64:88:16:38:ac:86:14:d5:e6:4c:c8:41:e9:3c:6c:e8:
9e:41:93:51:48:63:ad:41:71:4f:d8:0b:02:17:c1:8d:27:15:
20:11:f7:b9:2c:a0:f1:9d:26:1e:b7:94:1a:ee:bf:96:40:aa:
54:28:17:68:ce:53:86:de:aa:a8:e5:2b:09:ea:61:28:d1:54:
11:a0:59:d6:c4:d1:d5:31:2b:bf:96:74:f1:b7:a5:88:f9:4e:
24:de:6d:df:62:87:cf:e7:54:86:89:06:22:db:df:c4:36:c1:
ee:21:ce:30:f5:b3:78:25:be:a7:c1:6a:55:2d:62:ba:bd:1b:
e4:3f:0a:87:d6:93:10:1d:a5:73:fe:82:6a:85:f2:8e:33:bf:
6b:14:9d:78:30:69:f8:1f:de:68:1b:84:ee:ba:28:86:7a:6c:
fd:d0:92:56:2f:4a:cc:65:dd:6f:08:66:62:d4:97:49:2d:65:
34:3a:b2:93:43:c5:2f:d0:b4:5c:c9:c3:3c:88:c0:90:db:9a:
a6:b7:0a:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:14:48 2025 by rpki-client