Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: 5tXC0BUv2N5bMlIQzVK8nkPqPN//6FZCfZ0tpNw9h/M=
Subject key identifier: A0:EB:02:06:DE:EE:B9:20:D1:D9:3B:4C:5C:F2:D6:44:1B:92:D7:28
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 01974FA0DA3980C03715BD7F619E1AA150BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 06F1
Signing time: Sun 08 Jun 2025 13:00:30 +0000
Manifest this update: Sun 08 Jun 2025 13:00:30 +0000
Manifest next update: Mon 09 Jun 2025 13:00:30 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: 84wMGgiI9aD7PBi+ZWOnUPREbiWd6CJMpen8twyvlJI=)
2: nJ3bZDTF3klediLdsGzrGEizejI.roa (hash: XOv5pl5Y0ikBc3XP047Nh+8GGnppEmfe5vg+dWr14YI=)
3: qnlY-2XHeoB5T91L-eAv--psw3s.roa (hash: GlcTsLYuOrrcX+rD96Cshdq9OCpUu7GdPBcBG+rwyLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:a0:da:39:80:c0:37:15:bd:7f:61:9e:1a:a1:50:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Jun 8 13:00:30 2025 GMT
Not After : Jun 9 13:00:30 2025 GMT
Subject: CN=a0eb0206deeeb920d1d93b4c5cf2d6441b92d728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f5:0d:88:ac:0d:47:64:ff:b3:50:81:36:bf:
d6:a4:92:d5:95:88:f4:e4:df:2b:62:8b:82:c9:ba:
20:c8:ff:4c:b4:60:bf:8c:7d:aa:cf:fb:7c:8a:5d:
16:68:79:33:cf:06:15:1a:bf:bc:39:14:ab:ec:71:
49:f1:a2:52:48:3f:57:f4:01:a3:0f:f2:d7:ea:66:
9d:aa:14:5f:5b:8c:3b:2e:4d:33:17:f2:67:b9:0a:
33:47:96:bd:5a:e3:a3:42:6f:6f:6b:c9:89:19:d8:
84:87:08:6d:3d:4d:7a:be:6f:57:21:8f:5c:ea:32:
b4:92:90:0b:77:d3:5f:c1:f7:8b:ed:09:1d:98:51:
69:96:0a:8c:f6:b3:08:0b:de:b9:ec:3f:ac:6f:00:
fc:74:3c:69:6c:8f:f4:90:82:62:df:25:34:c4:31:
de:0c:4b:d3:1c:21:81:94:cd:4b:ec:0a:ab:a3:99:
b4:4c:e8:e7:df:f7:f2:ab:ac:4f:14:37:b9:06:3d:
e4:11:4b:33:b5:65:44:58:f2:0d:3c:c6:c3:2c:0e:
82:48:5e:c6:6a:ee:d4:bc:22:eb:5a:fe:89:59:9a:
85:dd:a1:ec:e1:d6:5c:82:6b:b4:de:43:50:45:fd:
29:c6:79:de:2f:45:1f:24:ed:2f:e1:ac:16:5b:ab:
0c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:EB:02:06:DE:EE:B9:20:D1:D9:3B:4C:5C:F2:D6:44:1B:92:D7:28
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:a8:84:5d:6d:3a:d4:a5:08:4f:39:c1:02:5b:18:10:14:92:
7d:e5:87:84:a7:51:db:c5:6c:b6:9b:67:d9:d6:b9:6d:49:1a:
7b:7a:0b:1c:9c:84:9f:17:01:6f:cd:80:90:9a:19:09:de:3b:
1f:08:0d:d2:88:04:fa:4b:bd:cd:72:a5:7d:e3:19:52:49:8d:
82:78:f1:73:5f:21:7f:b8:3f:a7:93:92:72:2a:39:ed:7f:17:
80:78:da:2c:6a:6e:23:67:c8:ad:69:1b:d6:09:0a:c9:ec:b9:
27:12:d8:2f:45:a7:40:c2:7c:11:31:25:04:b1:48:9d:e9:55:
91:fd:97:70:e8:b9:26:1a:f6:4e:24:d2:5a:f0:32:ed:79:fd:
ba:7d:8f:23:ac:85:ea:c7:f6:47:69:a2:17:a1:c4:37:c7:de:
7b:89:70:32:8c:69:e7:9a:1b:a0:67:01:87:dd:84:fd:59:98:
03:84:b6:ef:b9:35:43:aa:c1:7b:5d:78:76:a8:6c:4a:82:14:
45:42:79:3b:98:4c:41:c0:26:2e:b8:9d:26:e3:b2:f7:1b:11:
ee:09:b3:c0:7b:c4:e7:dd:af:7e:80:24:61:15:ff:c7:94:42:
51:1a:8d:a3:e9:4c:66:e6:dd:f6:e5:f2:ef:59:7b:ec:e4:3d:
60:73:c3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 23:30:17 2025 by rpki-client