Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
File: 8aqhbd2NihLf0OUyEXA62VLjshQ.mft (raw, json)
Hash identifier: j+SDwdpC2svAW/kBaXkuZ0oAOYGabvo94YNMXsVBRPI=
Subject key identifier: 33:9A:D0:70:41:C2:A0:D9:DD:C1:5F:22:04:41:FD:B6:ED:E6:47:B7
Authority key identifier: F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
Certificate issuer: /CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Certificate serial: 019788EB8ACFF7FED772268214D6507120BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
Manifest number: 0BEB
Signing time: Thu 19 Jun 2025 16:00:27 +0000
Manifest this update: Thu 19 Jun 2025 16:00:27 +0000
Manifest next update: Fri 20 Jun 2025 16:00:27 +0000
Files and hashes: 1: 8aqhbd2NihLf0OUyEXA62VLjshQ.crl (hash: bzHrW23StwMO/QHLwztNYdyJcqLEYQfMSd9gp/4W/lo=)
2: lU08unvCcfUmoq9nA8rwwc_EGrY.roa (hash: r4fF+/jooZGKRffBCLRbLiandhCNSPTtKJ/Y1slqur8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:88:eb:8a:cf:f7:fe:d7:72:26:82:14:d6:50:71:20:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1aaa16ddd8d8a12dfd0e53211703ad952e3b214
Validity
Not Before: Jun 19 16:00:27 2025 GMT
Not After : Jun 20 16:00:27 2025 GMT
Subject: CN=339ad07041c2a0d9ddc15f220441fdb6ede647b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:67:80:82:e5:bb:2d:b9:3d:d0:8b:7b:59:5c:
bb:a9:a2:e6:15:24:db:32:84:46:c5:3a:7a:72:78:
82:ad:9c:d5:60:f5:e6:70:0e:3b:a3:41:d1:18:2b:
1b:8c:a6:7f:cf:b2:0b:b8:08:7a:cc:31:1d:08:ba:
8a:a1:f3:bb:25:e5:a2:e0:20:ed:99:85:6f:c4:50:
95:c1:50:01:ee:71:3a:30:4c:ba:26:80:c6:50:b7:
dc:48:96:94:24:61:7d:50:5b:68:85:af:1a:b6:a7:
6f:cb:28:51:59:a9:57:5a:88:81:46:e6:1b:5f:5e:
13:b7:eb:38:3b:87:38:88:2d:10:97:2f:25:84:77:
11:c5:ca:5f:38:cc:fc:df:ba:7b:d8:cf:0e:26:96:
86:fa:b7:9d:78:77:65:49:3a:cc:94:07:ae:b6:c7:
7f:08:34:6a:43:83:65:25:12:f5:05:31:27:ef:26:
7c:e7:8c:1e:e4:5f:6e:3c:c9:55:36:40:fb:18:78:
42:2c:49:4b:ab:af:05:e2:78:80:9e:9f:86:6e:39:
ea:8c:89:90:f5:39:1a:cd:de:58:c7:34:ad:7f:a1:
3b:57:72:0d:06:c9:47:69:68:89:c1:e5:ed:7a:c4:
7c:0e:1d:12:45:cf:64:3f:d6:6a:47:76:7f:7e:e4:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:9A:D0:70:41:C2:A0:D9:DD:C1:5F:22:04:41:FD:B6:ED:E6:47:B7
X509v3 Authority Key Identifier:
keyid:F1:AA:A1:6D:DD:8D:8A:12:DF:D0:E5:32:11:70:3A:D9:52:E3:B2:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8aqhbd2NihLf0OUyEXA62VLjshQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/4eaca0-8db9-4d0a-ba22-8a9935da0588/1/8aqhbd2NihLf0OUyEXA62VLjshQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:00:b9:52:55:9e:77:b8:0b:48:3c:5b:34:50:40:c4:0c:a7:
e0:57:35:22:20:8a:36:e8:b5:79:34:0e:13:22:dc:14:ec:3d:
f6:1a:ff:f8:03:36:2b:43:90:cd:31:1d:d5:b3:28:4d:6b:0e:
0a:39:d9:8e:05:96:68:aa:19:65:00:5f:6a:8a:6f:60:6f:d8:
fb:67:bf:40:27:0d:6f:8c:51:a7:63:4c:ea:d3:47:77:be:b9:
8c:56:de:8e:b9:d9:32:d3:dd:54:83:33:9c:ae:6d:91:a0:5e:
7e:9d:57:1e:2e:af:38:28:79:34:96:57:1b:7d:c8:b9:4e:29:
21:71:bf:68:1d:74:37:15:1a:b2:32:f6:9f:66:0b:bc:31:24:
25:ca:00:c3:b7:e9:1b:9e:43:e6:95:dc:5a:dd:f9:53:9e:fd:
7d:95:d8:e2:88:0c:7c:40:89:85:4f:e2:98:a8:4d:db:a7:c7:
48:10:ea:50:a8:2b:69:6b:44:72:2b:fe:7b:43:57:0d:d1:f1:
b2:f2:c6:7a:14:fd:33:da:16:0f:bf:56:6e:10:66:c4:34:5a:
bc:8a:db:34:30:4d:f9:52:c2:60:35:ce:0b:16:5a:6d:11:1d:
d9:ee:32:14:e8:9c:90:90:2f:ea:7b:c3:a8:ed:de:05:db:a0:
8b:93:c3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 17:47:00 2025 by rpki-client