Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: 9gO5Wwr7z1YL1BnsbDhgfhsncTf/n/AT+C48+shWWbk=
Subject key identifier: 5F:D2:74:9C:2F:1B:3B:5A:46:3A:9E:AF:DC:33:83:EF:19:D9:CD:02
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 019768BC01D7CED64417F2436301FEA9B9EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 10:00:41 +0000
Manifest this update: Fri 13 Jun 2025 10:00:41 +0000
Manifest next update: Sat 14 Jun 2025 10:00:41 +0000
Files and hashes: 1: 2xBb1eN1uQhPtol-uKswad7hTL8.roa (hash: dXJffbqWVGzT51NatOrFAZ7XiueTLyhLa5jFxa/I29Y=)
2: 44uLXBcL_RZwFzmvHMDFnzRLsrc.roa (hash: ebcHWLKhk2lxI2aGu12w8EL09XqOe4qlsJc7YtoQwgs=)
3: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: o20QE4uINyFW12hKAZbxwZk2etrRTu1tdXnEY2cfM5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:01:d7:ce:d6:44:17:f2:43:63:01:fe:a9:b9:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Jun 13 10:00:41 2025 GMT
Not After : Jun 14 10:00:41 2025 GMT
Subject: CN=5fd2749c2f1b3b5a463a9eafdc3383ef19d9cd02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e3:cd:3d:0f:09:67:98:97:51:9c:9f:76:4d:
ac:a5:2f:0d:fa:5e:27:c2:84:8a:22:6c:4e:25:b7:
a4:7b:48:8c:ce:79:39:83:3b:fa:aa:8e:57:74:7b:
48:b3:c3:c4:47:a9:02:d0:da:f3:c8:f7:71:e5:e2:
63:75:36:32:95:84:51:ab:c8:f7:e9:2c:0b:14:2a:
5e:fe:6d:fc:a2:af:bd:bc:93:1a:5b:dd:17:6d:6a:
46:53:85:19:e8:b1:a6:fe:bd:dd:12:2c:b4:8a:ef:
53:15:1f:a2:37:a3:3d:31:78:98:40:ba:c1:81:99:
11:17:4e:31:bd:bd:f8:2f:1d:01:a8:e1:a1:67:1c:
58:39:18:18:c0:ef:bb:98:11:a6:c3:73:46:c2:3e:
3e:78:01:1f:e9:f7:25:48:98:03:b0:00:e4:4d:cf:
47:7c:ed:89:e7:f8:2d:f0:24:7c:27:48:48:de:a4:
f9:d7:b4:87:28:af:41:29:c2:09:4f:28:40:19:59:
37:92:8e:ac:ef:2f:eb:eb:27:1a:e4:b1:26:c4:b5:
49:2b:04:67:85:10:f5:1b:79:59:5d:88:a2:13:a9:
e0:9c:2a:e9:05:6b:a6:9f:08:0e:4d:db:6c:d0:93:
d5:c3:b3:e2:7a:0a:05:14:cf:b9:6d:84:6e:83:07:
6f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:D2:74:9C:2F:1B:3B:5A:46:3A:9E:AF:DC:33:83:EF:19:D9:CD:02
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:63:cb:c8:77:61:bf:86:63:e1:bd:0f:67:09:e2:5c:9b:fc:
00:22:5c:0d:a6:af:80:7f:e8:57:8f:87:ae:c3:05:92:de:70:
32:c0:c0:fa:4f:24:e8:d5:a4:27:f9:ae:13:9c:8a:3b:5f:0c:
cb:cd:7c:69:e8:8e:66:43:29:81:ab:fa:da:f1:25:7c:f3:42:
77:57:86:4c:e1:e7:a2:b5:f1:ca:e1:1d:b6:28:c3:5d:ab:15:
f0:04:95:48:37:83:17:e5:a7:9b:55:6a:2b:b2:81:04:ab:2e:
6a:9a:ca:d1:77:5f:33:06:10:64:29:8d:6a:34:c7:27:b4:10:
31:24:d3:b2:3b:eb:2c:03:f2:27:7f:bd:2d:ac:13:d6:6d:45:
8b:bb:25:ae:51:a3:04:1c:20:f0:47:06:db:e3:97:9a:6f:27:
3b:dc:5b:2c:bf:3d:30:82:d4:43:ad:b5:0a:21:e4:06:f3:5d:
40:1c:8c:ce:a9:b6:f8:bb:cc:5c:30:cc:f9:10:f4:0e:22:7c:
b2:90:b4:1c:9d:3b:4d:87:d4:6b:2e:d7:70:0c:d3:5e:75:7f:
8e:fe:99:0a:11:51:39:a7:a6:23:ca:fa:a2:de:30:20:8f:99:
a4:c7:91:93:cd:33:f2:22:a0:1e:b7:23:b0:c9:d9:52:53:2d:
4a:f8:48:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:00:56 2025 by rpki-client