Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier: bv4SpZXwqLLWjIfdi7xgZFHiA1InqUrmp0enovAB9kQ=
Subject key identifier: 0D:B5:56:30:EF:6E:28:BE:1C:63:B9:EC:DB:89:36:91:36:AF:C6:89
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 0197470C534A52AF10328F023ED1CDB896CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number: 1522
Signing time: Fri 06 Jun 2025 21:01:19 +0000
Manifest this update: Fri 06 Jun 2025 21:01:19 +0000
Manifest next update: Sat 07 Jun 2025 21:01:19 +0000
Files and hashes: 1: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: hWQkJHV+9S9+LtW6p3qyve4Nr5VMmaP2RuQ1cjU8YFk=)
2: f4A325yGj48RuMfkjcKdx35IWgg.roa (hash: j8y8oC78Ayis+Zl1DL+FUWPv5N+us3D0FIOg/cZJpDI=)
3: g4Nm3zw7BZCf660L7J2wB5s2-SA.roa (hash: +YfoAh+I7x70vYXeLBN3w6ZRtj/Ii78yrIjM344/IWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0c:53:4a:52:af:10:32:8f:02:3e:d1:cd:b8:96:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Jun 6 21:01:19 2025 GMT
Not After : Jun 7 21:01:19 2025 GMT
Subject: CN=0db55630ef6e28be1c63b9ecdb89369136afc689
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:6b:3b:88:f3:e5:43:02:84:9a:98:96:34:1e:
35:ad:00:a4:30:fc:c1:13:a3:1b:75:fb:50:23:bb:
ec:5e:22:61:4b:06:b1:61:ae:b9:69:bc:bc:41:62:
69:4a:52:b0:18:80:c1:d4:a7:27:70:0f:e7:bb:14:
16:fc:91:14:47:13:ea:96:41:4c:82:c0:8d:5e:53:
1c:ce:2d:7a:f8:ec:64:cb:0f:bf:32:86:c3:d0:ff:
5a:1a:08:44:3b:6c:c5:f3:d9:5f:1d:29:57:c3:7c:
80:71:9c:6c:b1:b6:55:8b:db:20:06:79:99:fa:aa:
c5:84:e7:6f:23:54:5c:ef:7f:9c:69:45:92:66:f9:
1f:8f:af:e6:76:73:b9:e8:e3:76:bb:f7:1a:96:b9:
2e:9e:9f:b7:68:3c:6e:fa:22:59:63:bd:87:e8:56:
28:0a:e8:74:39:f6:95:3e:88:23:05:8f:0c:45:3a:
57:82:ae:46:19:14:e7:bf:57:74:4c:9c:7f:e7:98:
56:6d:4c:15:6b:a8:07:6f:d0:7c:ce:87:ce:23:34:
d9:f1:63:8e:6d:6c:cc:5d:e2:04:9d:21:e1:b4:2d:
75:b7:1a:d2:c6:46:cd:9a:24:c8:32:1e:c2:99:8b:
7f:40:bd:81:fe:26:eb:e1:2e:69:3b:f0:7b:69:6e:
d6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:B5:56:30:EF:6E:28:BE:1C:63:B9:EC:DB:89:36:91:36:AF:C6:89
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:b9:7b:15:43:fe:8a:74:10:86:71:d4:ab:b1:26:e9:f1:d7:
b1:d4:ff:ef:46:84:53:38:4c:95:b9:bf:12:60:a4:62:6c:3c:
a3:2e:95:28:99:c8:1c:9d:5a:28:8d:4d:a7:1f:24:ae:a9:d7:
ef:bf:56:4a:31:6d:15:6c:60:7e:83:66:41:ff:22:b0:e7:a1:
85:8a:43:15:0b:7a:0c:0a:68:7d:fd:31:68:62:ac:69:e6:36:
a9:34:c4:6c:82:ae:d2:43:17:92:13:6f:45:e5:e1:b0:7a:0f:
e6:6a:cc:e0:4c:2e:11:73:c7:b0:18:64:43:2c:93:4e:af:3d:
c6:c3:46:93:4a:57:ce:c8:ba:06:54:cf:6e:77:c1:40:9f:b3:
a4:43:fc:1c:90:84:ed:b1:36:8a:d5:24:e9:53:42:9e:01:f2:
f9:c8:d8:0b:01:6e:c8:47:77:e2:54:16:13:28:db:d5:ca:bd:
01:1b:1c:67:d2:e6:0d:1c:36:12:71:0e:78:7a:17:47:5b:fa:
ca:ea:32:31:04:98:47:3f:09:9c:74:16:e2:b5:9b:3d:0f:dc:
b2:07:13:c0:e0:be:a3:f2:3a:7d:d8:d9:9f:44:b4:12:b8:43:
0a:48:22:ec:5c:71:58:36:4a:a0:0d:c2:19:80:c4:52:9c:96:
f6:3a:a4:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 03:23:45 2025 by rpki-client