Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
File: 8oxp2pTIXt1I2cH9jjMq477mYAQ.mft (raw, json)
Hash identifier: 15+Uw9AYwHNTNF4aS1eV1emTNXxFY0rH0NN1x4OpZ/0=
Subject key identifier: 51:1B:DB:8E:D9:18:8F:EE:77:D0:D5:F4:F4:31:73:89:3B:08:AE:35
Authority key identifier: F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
Certificate issuer: /CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Certificate serial: 01976BF46C79BF68D12621EC69AB34BD6A70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
Manifest number: 0E59
Signing time: Sat 14 Jun 2025 01:01:09 +0000
Manifest this update: Sat 14 Jun 2025 01:01:09 +0000
Manifest next update: Sun 15 Jun 2025 01:01:09 +0000
Files and hashes: 1: 8oxp2pTIXt1I2cH9jjMq477mYAQ.crl (hash: Ec+0B0XKVZD4pbrHGG0UGcxK23Uha3x4oiuPuaQxdKo=)
2: m7fQ-cMMDdeyLl0RJP3A0VDHgVE.roa (hash: rB/+iXy3MWnMmudzmSTexHxDroAo7zhjaO5iq26LcWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:6c:79:bf:68:d1:26:21:ec:69:ab:34:bd:6a:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28c69da94c85edd48d9c1fd8e332ae3bee66004
Validity
Not Before: Jun 14 01:01:09 2025 GMT
Not After : Jun 15 01:01:09 2025 GMT
Subject: CN=511bdb8ed9188fee77d0d5f4f43173893b08ae35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:18:4b:01:91:e7:e5:db:c9:81:75:5f:66:17:
63:c3:03:a0:32:bf:ba:0b:ff:53:3b:47:4c:61:7c:
b6:14:2c:fe:07:6e:45:d9:2f:cb:7e:16:4e:a7:4d:
13:0c:86:5d:b3:c7:b4:3e:be:05:7e:c2:d5:29:09:
27:84:63:8b:f9:1c:ae:02:93:2d:a2:70:45:df:64:
85:34:ce:51:16:0a:4a:02:b0:06:87:6f:b8:fb:cf:
25:8e:49:6d:34:b4:5c:c2:e5:a4:00:8a:df:75:14:
61:99:3a:1b:54:15:66:4e:ef:35:f5:90:45:73:33:
fd:4d:93:d3:f6:f4:94:36:c0:49:2c:99:9a:bf:17:
60:b7:7a:18:e4:c8:0e:eb:6b:5f:f2:a0:47:7f:26:
93:ca:ea:3e:45:83:f2:cd:93:25:6a:68:dc:0e:20:
21:9d:71:e2:9d:c1:87:22:fc:d1:03:0e:9c:33:ed:
92:cd:0f:dc:cc:8d:72:0d:2a:fd:55:60:21:4f:0d:
ff:28:2f:e3:a9:92:1b:67:91:e9:cd:c6:f6:bf:7a:
35:02:5a:06:5e:b4:77:6a:07:9b:84:fa:90:1a:af:
3c:52:2c:7a:65:0d:32:15:6a:c7:db:60:8e:db:07:
64:52:bb:68:70:19:27:88:c8:12:e3:e3:35:91:78:
d9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1B:DB:8E:D9:18:8F:EE:77:D0:D5:F4:F4:31:73:89:3B:08:AE:35
X509v3 Authority Key Identifier:
keyid:F2:8C:69:DA:94:C8:5E:DD:48:D9:C1:FD:8E:33:2A:E3:BE:E6:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oxp2pTIXt1I2cH9jjMq477mYAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0dcd96-0ae3-4f5c-8d21-a902b0096b99/1/8oxp2pTIXt1I2cH9jjMq477mYAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:c8:f8:29:f5:06:81:93:7b:16:88:76:ac:5a:fb:9b:36:d2:
35:c1:df:e3:17:f6:cb:dc:2d:ce:89:47:8b:a8:4d:c9:d0:5e:
46:71:94:2d:6c:b5:f5:82:a9:e3:c5:46:27:17:9c:30:f4:84:
b5:70:8b:31:43:ce:bc:b5:b7:2c:bb:1e:62:07:e7:a4:ce:cd:
93:90:9f:69:b0:32:1d:ee:d8:bf:cf:d6:44:ef:b1:a1:9a:fb:
03:52:a3:32:e2:f8:52:8c:bd:e0:96:69:32:b8:43:cc:38:21:
6d:12:7c:50:8a:0f:76:88:df:a6:15:56:cf:dc:fc:87:0e:d7:
87:c7:4b:e2:00:33:92:98:7f:e3:64:d4:bd:3d:cb:23:bc:b8:
8a:28:bb:1f:81:64:bd:01:53:7a:a2:eb:23:c4:38:d7:fe:98:
b4:44:c8:7a:5f:0c:da:cd:b5:a9:f7:94:66:dc:fb:be:31:61:
cb:a8:cd:00:62:6c:bd:b3:0e:a9:fa:cf:05:b0:a3:8c:a4:12:
9b:22:43:d4:f7:1e:c2:78:e9:0c:9c:26:ce:48:f9:40:73:2a:
e9:3c:ec:d8:a5:ca:4c:43:b1:9e:55:52:77:46:8d:92:f5:cf:
a6:65:fa:91:32:75:af:ad:7e:33:37:11:03:c4:95:4d:a1:8c:
b0:d1:4f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:10:56 2025 by rpki-client