Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
File: fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft (raw, json)
Hash identifier: Dy041h8VHwxdjeSVtsEhyHAgrAMVcrTeP9haUncXKqM=
Subject key identifier: 8E:EC:11:B1:29:56:B8:B1:22:0C:6E:CD:9E:EC:6A:E1:D2:9A:6D:F4
Authority key identifier: 7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
Certificate issuer: /CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Certificate serial: 01974B1F6CCA3017D0980FE630405AFDADBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 16:00:40 +0000
Manifest this update: Sat 07 Jun 2025 16:00:40 +0000
Manifest next update: Sun 08 Jun 2025 16:00:40 +0000
Files and hashes: 1: fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl (hash: l3fC7SDq4XmKZUlXtI1UtO8AzBBwrdQz5g/Ly65blys=)
2: tHSVKsBybW50BumwXnQO5sar17g.roa (hash: OnfbBFIXdIfqw6rK0o3+Fsa9mu/VebiT8548wWdX1dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:6c:ca:30:17:d0:98:0f:e6:30:40:5a:fd:ad:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cd8473e3d9ed423c41e7a858f4c0f0fb80c07ba
Validity
Not Before: Jun 7 16:00:40 2025 GMT
Not After : Jun 8 16:00:40 2025 GMT
Subject: CN=8eec11b12956b8b1220c6ecd9eec6ae1d29a6df4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ec:c1:32:49:76:40:30:a4:66:0b:04:4a:7e:
09:80:86:7f:0b:6b:67:b5:54:5f:4b:4b:65:f5:66:
e5:40:17:c8:d3:10:4d:57:65:ff:25:d0:eb:1c:37:
54:b7:57:13:d5:27:6c:ed:c7:ad:b2:9e:9c:18:02:
28:b2:6a:ec:56:90:e8:ca:0b:7e:cd:a1:c3:99:99:
04:d2:a9:34:0f:45:f6:47:89:40:fe:69:9e:33:e6:
b7:91:3f:29:54:28:3f:b4:ce:89:34:93:ae:e6:c2:
34:9c:26:53:48:e4:db:3f:35:e3:d6:5d:ae:aa:49:
b7:0b:fe:9a:10:ed:80:ef:62:1f:6c:1d:3c:41:03:
30:8f:7f:35:c6:ed:a3:45:8d:0f:36:11:4d:54:1c:
d9:bc:d5:97:04:36:22:88:d5:4a:97:c0:9f:42:72:
4d:b0:55:5c:e4:18:28:7e:75:c9:27:6c:4a:71:57:
0d:6f:15:cb:cb:62:0a:21:87:4a:da:71:90:32:71:
50:4e:32:01:20:47:8c:59:fa:07:7a:01:35:1f:1e:
44:eb:f5:0b:68:71:96:7a:0b:01:fe:13:8f:f3:95:
41:07:59:a8:7d:05:3c:6c:a9:74:3d:3a:a5:a8:78:
6d:f2:13:d1:05:54:a5:d3:fa:80:e3:e3:6a:1f:a2:
81:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:EC:11:B1:29:56:B8:B1:22:0C:6E:CD:9E:EC:6A:E1:D2:9A:6D:F4
X509v3 Authority Key Identifier:
keyid:7C:D8:47:3E:3D:9E:D4:23:C4:1E:7A:85:8F:4C:0F:0F:B8:0C:07:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fNhHPj2e1CPEHnqFj0wPD7gMB7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/8efc2e-9d96-41a0-b287-9757694d291d/1/fNhHPj2e1CPEHnqFj0wPD7gMB7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f8:67:0a:9f:c1:e1:aa:92:f1:0b:fa:ed:61:01:51:76:a7:
05:73:d5:e8:cb:ca:67:3c:50:8d:6a:40:87:53:48:69:96:66:
2b:3c:ee:76:1a:0e:09:89:4f:54:41:68:91:4e:54:94:13:cf:
50:c7:d9:6f:94:89:e7:56:ba:c2:2d:7a:36:94:0a:e8:55:02:
67:96:22:6d:b3:e6:11:81:90:b3:3a:8a:68:18:7a:e6:a9:f5:
0d:9b:7f:f3:10:2a:41:6e:7f:9b:e0:c0:33:32:d9:28:2e:31:
a8:bc:b0:87:c8:b4:f8:38:d3:1f:2a:6d:18:c0:63:f9:ed:4c:
37:68:4e:d3:1c:ae:88:b5:98:72:0c:06:6c:f1:12:b9:0f:e5:
6d:23:fc:1b:15:47:63:ca:bc:fa:f2:9a:ab:b7:99:7e:c3:42:
eb:80:12:93:08:ad:66:4d:70:e9:94:39:f5:b8:05:23:96:f6:
f5:8c:77:5b:ec:f8:a6:27:55:61:99:4f:fe:75:91:75:4f:92:
92:c1:5b:e9:e3:b0:5a:db:31:6f:4a:82:50:8f:67:ce:14:87:
a0:ca:a1:db:1c:62:e8:28:75:7e:64:5d:09:75:45:0d:86:97:
4f:e7:0c:fc:d2:0c:81:ef:39:79:b0:8e:bc:b2:14:95:5a:da:
e7:be:dc:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 22:56:20 2025 by rpki-client