Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
File: 1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft (raw, json)
Hash identifier: Ofa+KIjGppIbHqdcusw+k8l+WN3GEV20+WNB2wXjuDs=
Subject key identifier: 85:11:C1:56:B0:AB:CF:84:A9:13:40:28:33:45:C1:1A:AF:4F:10:D1
Authority key identifier: F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F
Certificate issuer: /CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
Certificate serial: 01976A05CC63D9B511E0EB6EAE69C6F3835B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
Manifest number: 10BA
Signing time: Fri 13 Jun 2025 16:00:54 +0000
Manifest this update: Fri 13 Jun 2025 16:00:54 +0000
Manifest next update: Sat 14 Jun 2025 16:00:54 +0000
Files and hashes: 1: 1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl (hash: VTq/dYk/Z6JzYXHOvuFvidx359qBkao3/tdk/Cy7FLc=)
2: 7AjGLQsJj7KXSqBNNqiLp45yitU.roa (hash: z05Ju9vFqoh0JjoPd8SpAqwh3plkGnHfuFRv3k0ibgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:cc:63:d9:b5:11:e0:eb:6e:ae:69:c6:f3:83:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8cfdc0e5edb1cc323f9344fe2827c793e95ac6f
Validity
Not Before: Jun 13 16:00:54 2025 GMT
Not After : Jun 14 16:00:54 2025 GMT
Subject: CN=8511c156b0abcf84a91340283345c11aaf4f10d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:27:24:a1:cd:6d:fb:6d:64:8a:3d:88:c2:7b:
07:f2:16:6a:b7:43:39:87:d9:bf:5a:f2:99:86:b0:
79:d5:1b:fc:6e:eb:dc:b8:62:dc:68:be:36:06:29:
f8:25:db:63:b7:2c:58:2b:c0:f2:48:be:fb:d8:e3:
27:45:11:f6:75:20:5f:43:1f:8b:8e:ec:fb:09:85:
1a:94:bb:50:86:dc:e5:ad:28:3a:dd:cb:69:62:af:
23:5e:82:d8:b0:fb:c2:5b:0a:26:e7:45:e3:07:3d:
54:ef:e1:20:d9:00:5d:e2:e1:b7:a9:e7:40:7e:92:
23:2f:be:94:e3:81:69:8f:be:96:37:47:5b:bd:ab:
96:a9:96:fe:ec:ee:8e:6f:a4:1a:aa:39:8b:a9:c4:
5a:85:cd:69:67:d2:c3:aa:f6:fb:5d:ba:c0:a3:e0:
99:85:1d:cb:76:62:f7:7a:e5:79:e9:fe:b0:24:9c:
30:87:4c:47:da:e0:f0:af:e2:6e:b0:c3:b0:7f:89:
c6:88:90:66:69:34:75:95:5d:9f:e3:76:67:c9:a1:
24:dd:5d:b0:31:28:da:2e:f3:ba:fb:82:2c:50:9b:
84:6a:f4:ae:9c:74:85:7a:8f:a1:39:7e:30:7c:42:
20:3a:63:00:43:8b:53:65:2a:fd:aa:d0:f3:7e:07:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:11:C1:56:B0:AB:CF:84:A9:13:40:28:33:45:C1:1A:AF:4F:10:D1
X509v3 Authority Key Identifier:
keyid:F8:CF:DC:0E:5E:DB:1C:C3:23:F9:34:4F:E2:82:7C:79:3E:95:AC:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/eda8ef-36d3-45d4-911e-5fa90c13e1b7/1/1-M_cDl7bHMMj-TRP4oJ8eT6VrG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:04:a0:e7:e2:09:98:9b:4f:a3:42:58:b1:6e:dd:e1:60:c6:
d7:b5:16:ad:e9:bd:1e:e8:ca:0f:72:9a:9f:07:5d:59:e4:6d:
d9:1e:30:3e:5b:09:1e:e9:e9:a7:24:50:35:a8:b9:2a:bc:53:
e8:5a:7a:3c:97:d2:a0:97:49:28:89:d6:02:1e:27:db:8b:13:
9b:9e:73:1e:84:62:a5:5e:fc:d5:ab:77:5c:bb:46:37:37:51:
80:c8:04:36:bf:b2:2a:5a:3e:4b:b2:38:24:0f:99:23:be:99:
a0:26:fc:18:f4:7a:c7:ce:f8:5c:ac:be:6b:f8:05:39:a3:b1:
a5:db:a9:d5:47:ac:fb:a3:a6:9b:45:48:39:10:e0:4f:49:b5:
8a:fc:a1:4d:e7:c3:13:50:d8:42:30:0c:c1:d6:49:e0:97:11:
6a:bb:c2:a9:22:28:ff:9a:54:94:c4:4b:cd:0d:e6:7b:6b:c4:
9f:ee:51:ea:84:67:c3:90:9f:21:73:14:e9:11:09:4d:ab:6c:
f7:e0:84:34:8d:80:40:71:97:d4:9a:fa:d3:58:4e:58:6a:a6:
04:50:35:d1:6d:44:dc:8b:e8:5e:a5:fd:f5:2c:40:70:f3:b2:
a5:cd:07:c7:57:b1:b4:f8:e4:52:df:0f:75:c9:64:df:e9:c3:
f6:a3:50:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:59:35 2025 by rpki-client