Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: gO4WLBMkgcbBqVa73ldXanNs5KtEXlksEY670S4zNeo=
Subject key identifier: 72:98:5A:58:C6:20:82:38:4C:D5:C3:48:4F:63:72:D9:9F:76:BE:00
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 019770AC5C5F0C87A038C48CAAADCA81D5D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0A10
Signing time: Sat 14 Jun 2025 23:00:33 +0000
Manifest this update: Sat 14 Jun 2025 23:00:33 +0000
Manifest next update: Sun 15 Jun 2025 23:00:33 +0000
Files and hashes: 1: 2Utz6EvNmTYHORm-GQMKm69p8WI.roa (hash: j7FVQ06WFgxEJj//G5Co8Dizh+fdctkzSaSmR5/2mVM=)
2: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: t/qmdoX32F6mL1Ga6OzPH2F/P1T71PQAS2K/Ur8JcMI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:ac:5c:5f:0c:87:a0:38:c4:8c:aa:ad:ca:81:d5:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Jun 14 23:00:33 2025 GMT
Not After : Jun 15 23:00:33 2025 GMT
Subject: CN=72985a58c62082384cd5c3484f6372d99f76be00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:26:b0:ff:86:78:c3:01:cb:5f:4f:bb:e9:29:
da:98:5b:40:5e:70:15:5b:9e:2a:22:8e:7f:ab:94:
d5:54:bc:02:11:36:15:0f:61:d3:a8:36:54:89:d9:
85:af:2c:39:0d:fb:4d:5a:2e:20:ad:a3:2a:93:2f:
60:52:84:a3:0a:0c:5d:98:46:96:c3:a9:c7:68:c4:
54:56:11:09:14:c8:99:71:10:4a:23:df:d8:09:d0:
b0:14:ec:70:91:85:2e:b4:1a:fb:77:0b:b3:04:44:
9f:fd:cd:7c:e6:3d:c4:62:c0:7b:c8:79:a7:b3:b1:
9b:05:87:63:1b:e2:ca:27:61:c8:c9:71:84:ce:84:
74:b4:ba:e8:57:49:31:57:ce:63:d0:ea:fa:d6:d1:
8e:40:09:8f:ab:69:8a:37:cf:51:e6:eb:62:35:27:
ce:40:8b:70:0e:d9:17:bf:7d:98:4e:56:e5:e1:65:
7e:38:51:ce:4a:a6:91:a3:54:7e:39:96:b1:ab:92:
59:c9:45:73:37:6b:d9:91:81:0e:06:9d:0b:15:76:
5b:50:db:74:f7:47:c0:77:42:aa:32:5d:31:09:a0:
79:45:ec:2c:9f:06:2e:f3:88:04:d4:3b:28:dd:b9:
c9:4a:c7:29:19:e5:85:78:b2:ab:1e:82:11:ed:d9:
87:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:98:5A:58:C6:20:82:38:4C:D5:C3:48:4F:63:72:D9:9F:76:BE:00
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:b7:79:2c:0e:64:92:37:fb:81:6e:12:74:e5:d3:2c:20:c3:
cc:04:eb:b3:54:a8:32:de:db:fc:1b:2c:2a:56:c2:86:b7:35:
a3:03:bf:75:ae:ed:81:d7:f1:a8:af:b3:1e:6f:87:a5:6c:3d:
bf:ee:89:a7:cc:80:29:41:a0:d3:b9:4c:b7:50:2a:46:70:ae:
59:04:63:3b:d9:c9:44:fc:7f:27:4b:c9:7c:50:08:5c:0e:85:
4a:d9:bb:47:dd:af:5d:72:c0:f0:f1:98:8c:a0:07:90:1f:66:
25:43:7d:56:42:ca:ee:9e:ba:32:15:8e:af:f9:12:f2:6c:cd:
43:46:70:fc:26:d3:df:3e:2b:4e:77:ae:f0:71:c5:59:6a:03:
93:1d:21:b2:53:43:f5:c7:8a:be:95:c3:54:46:79:4a:83:46:
3c:e0:fa:ed:0a:c3:83:bc:b1:6d:5f:57:22:de:79:66:c9:94:
ed:0e:4f:4f:74:a9:9d:b1:bc:34:19:42:7f:72:55:57:e0:5c:
e8:de:48:c1:4d:ee:21:cd:82:33:ec:77:d1:bf:d4:77:a1:08:
e6:a7:82:34:51:36:69:70:4d:44:61:76:46:fb:db:57:5e:0a:
ef:7b:5a:0e:92:49:7d:d5:bd:ff:64:89:d6:78:6a:81:7e:cb:
6b:db:9d:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 07:45:14 2025 by rpki-client