Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: 1dZ2/KZVNZ+Qok2Dy/4FPrva81pcmsroxSFlJk5dtjU=
Subject key identifier: 16:77:09:AC:22:69:36:E9:A3:51:9E:28:2F:A4:55:D7:FD:D2:11:91
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 01976F63007211BA3FE27C827D5D63B231B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 17:00:48 +0000
Manifest this update: Sat 14 Jun 2025 17:00:48 +0000
Manifest next update: Sun 15 Jun 2025 17:00:48 +0000
Files and hashes: 1: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: qoKUMQmOnGBla3/cCdyq23D9MXfk+lIvgib0ZAi5olo=)
2: tZdMpKDB98hJ9pZj681_6AcpB6s.roa (hash: i6o9Pghma18l7gMu2eMNZU5hQVcsb4HmVOsk/64sqkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 17:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:00:72:11:ba:3f:e2:7c:82:7d:5d:63:b2:31:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Jun 14 17:00:48 2025 GMT
Not After : Jun 15 17:00:48 2025 GMT
Subject: CN=167709ac226936e9a3519e282fa455d7fdd21191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:75:f1:fe:8c:2b:6d:23:d6:a3:6d:19:9a:63:
11:3e:91:b2:20:c0:d1:1d:d2:76:ac:8f:12:86:7c:
ab:9a:62:f6:2f:25:d8:8f:40:7f:8b:1a:91:02:d1:
8e:36:4c:d5:63:2a:96:1e:a8:fd:e3:50:4c:c5:e0:
2c:b1:56:69:49:d2:7d:7c:57:f2:58:b9:5b:87:8d:
b6:89:2a:eb:d9:a9:32:47:e0:b2:d0:c8:61:73:90:
8c:fb:0f:77:3d:91:e2:0f:7e:6e:2d:7f:98:0f:b7:
b3:4d:c6:9c:81:2a:31:81:da:10:b1:26:19:ff:df:
e4:ec:ee:54:3b:e1:8e:d3:32:ab:87:58:51:b3:48:
54:c4:91:7f:90:0b:4a:c1:a2:57:3d:46:48:30:0c:
08:eb:16:85:74:94:31:d3:55:93:f3:fe:e5:2f:91:
2c:61:6f:58:db:a7:e8:2f:d8:3a:24:94:6a:01:8b:
24:3a:37:ef:cd:09:2b:ef:36:53:c7:5b:e4:4e:3d:
d9:0e:d2:ca:a6:0d:db:03:3e:d0:d0:8e:30:86:47:
51:a0:d5:37:ca:cb:79:b4:e5:3a:c3:71:78:94:46:
51:b2:c7:e7:45:b9:3d:11:99:46:3e:54:82:27:f1:
21:fe:59:ce:84:63:4b:b8:04:8c:90:74:08:56:7d:
3d:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:77:09:AC:22:69:36:E9:A3:51:9E:28:2F:A4:55:D7:FD:D2:11:91
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:c4:14:58:6c:a9:d8:35:08:65:23:2f:a0:ce:2d:e2:e3:97:
2e:87:85:4a:24:d7:76:d6:38:74:ce:e2:a8:24:ca:23:47:50:
80:c6:fd:15:c8:c5:b8:2a:e2:b5:35:0b:1f:df:c3:4d:e3:43:
b8:ad:fe:9b:27:1d:6b:a3:f8:58:a6:8c:cf:30:e9:58:32:03:
19:3c:9a:2a:46:fb:e1:18:9f:06:b4:f9:69:e2:9a:8d:fe:5f:
a7:7e:35:e2:45:91:c8:5f:cc:f9:e3:d9:ad:73:07:c8:6b:d1:
81:08:18:c2:a7:5b:61:84:a8:62:94:01:e2:5d:a1:81:01:4a:
af:f7:a6:8b:fe:6f:3d:64:86:cb:cd:3e:60:75:63:ba:ea:57:
68:aa:c5:be:7e:15:3e:6d:db:5e:2a:af:ff:78:f7:7f:9e:4e:
f7:92:97:5c:7f:65:db:39:87:3e:6e:39:8e:2d:05:05:5e:45:
0f:f2:26:08:97:85:fb:35:ee:9f:3b:88:b3:71:e5:0a:6c:7a:
5f:a7:f6:95:79:0e:f5:a9:bf:b5:17:a2:0d:3d:f5:30:ca:b7:
40:08:88:30:2c:17:82:d8:5e:1b:7f:77:7d:aa:5c:89:86:97:
ed:3a:b2:72:68:d7:04:a9:fe:15:f8:99:ae:b0:27:e4:96:df:
82:11:ba:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 02:55:25 2025 by rpki-client