Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
File: 2o8F44Q1F88JccK_nN3d1icX5Sw.mft (raw, json)
Hash identifier: AAiH6BhMA9yblhYf0cimGnJkOoUAx3DXsFEMuKhVjlo=
Subject key identifier: CF:0D:80:81:F0:33:FB:91:84:D1:50:FF:38:3B:7C:DF:1D:A9:3A:4E
Authority key identifier: DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
Certificate issuer: /CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Certificate serial: 01976885028FA5A064AD40F80E75A395FEF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
Manifest number: 0868
Signing time: Fri 13 Jun 2025 09:00:36 +0000
Manifest this update: Fri 13 Jun 2025 09:00:36 +0000
Manifest next update: Sat 14 Jun 2025 09:00:36 +0000
Files and hashes: 1: 0uOd6pkbVcZjPk-Kbr-5tFBqZCU.roa (hash: xqBleUY4Z9zq7UyMqOMWy7ryf9KoBj1PjfY1uJWx7sk=)
2: 2o8F44Q1F88JccK_nN3d1icX5Sw.crl (hash: +DOon8uHoZc0Dn1+hxJs2eR0wxKth1AWXWnctWWoikk=)
3: 6fo87MmGE1UjtxclnRa9qrk6UGM.roa (hash: pci8N0GbpCHAxgqqnFxgDiIt1lIp8+ssI2b4Yf5Rg+E=)
4: KRSjlLP_LGaVl43CnNfHf_qcv0Y.roa (hash: T6wpRaMQShfnxACSwpJMZJO4nNVJDFOyvCxB/2y9lh0=)
5: KvD4Pa3lfXKcjfgVEMsuUlxyqpQ.roa (hash: BVkdPRLTcswZV+vMxoNSYxQYWyflcpgaedXCE6/uDRk=)
6: RR9CZyYi6n9Q08SG7w4DsIQSJqE.roa (hash: N5pZ5HpdV+sU2XpEoXlts+Mklu638CuRARvFwE/FmiI=)
7: Zqbkpwb9FEC8JI8l2BSIQZw2gNU.roa (hash: llK9gBnY2tMLV3DDPcLyEXjo4pojFi3+MnQmjAC9rBg=)
8: _E1cwjzeFiFIH7VeHBgq1a_Cpxw.roa (hash: aAipIQ263NI9Nm3A47DXuzEpDsCQg6yANknUA1m80WY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 09:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:85:02:8f:a5:a0:64:ad:40:f8:0e:75:a3:95:fe:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da8f05e3843517cf0971c2bf9cddddd62717e52c
Validity
Not Before: Jun 13 09:00:36 2025 GMT
Not After : Jun 14 09:00:36 2025 GMT
Subject: CN=cf0d8081f033fb9184d150ff383b7cdf1da93a4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:71:c7:68:94:dd:64:74:3e:e1:30:0c:15:14:
63:b2:22:fb:21:78:df:60:9f:87:5e:47:7f:f7:74:
7d:d1:ab:e7:a5:ef:d6:a2:79:d8:91:c3:8e:cf:79:
4e:59:ff:ed:c6:4d:ff:36:6b:29:a0:db:ae:7c:15:
6e:f6:62:4e:22:ef:f1:8a:7d:98:f0:1e:29:90:b2:
ef:f9:08:37:ed:57:5f:a1:c6:74:ca:b4:98:4d:9c:
29:6b:48:a1:40:7c:04:e6:d5:cf:f5:ad:a1:e4:f5:
b8:67:e9:43:24:f7:87:5f:bd:5e:76:01:e4:31:03:
90:c8:51:de:3b:2c:33:6f:bd:98:49:44:f3:99:1b:
bd:72:3d:eb:4a:b6:96:3f:73:83:fd:02:fc:92:d8:
5b:3c:2b:2f:51:a1:eb:d6:b6:05:a7:1d:10:0a:ab:
e4:7e:88:74:b7:51:21:de:6b:85:41:48:f5:ae:47:
c7:b8:fa:26:03:5f:a2:df:70:92:30:ae:5c:34:b0:
b8:02:67:d7:ad:02:20:44:49:cf:07:62:c7:ee:25:
46:00:53:7a:f7:b0:54:3e:26:78:0f:22:87:89:e9:
d1:58:ca:99:c2:38:af:eb:32:a5:0a:17:d6:62:cb:
e4:c1:15:29:e3:31:39:35:56:83:74:9b:e4:a8:29:
7c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:0D:80:81:F0:33:FB:91:84:D1:50:FF:38:3B:7C:DF:1D:A9:3A:4E
X509v3 Authority Key Identifier:
keyid:DA:8F:05:E3:84:35:17:CF:09:71:C2:BF:9C:DD:DD:D6:27:17:E5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2o8F44Q1F88JccK_nN3d1icX5Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b9884b-6fc5-4b3e-b1e8-e01e94124674/1/2o8F44Q1F88JccK_nN3d1icX5Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:9f:21:10:d3:6b:75:15:d2:c0:a3:74:2c:4e:de:65:9b:1d:
84:7d:2f:e7:3f:08:e4:a5:87:11:35:38:b5:0d:ba:bf:11:e8:
83:8a:3c:bd:bb:39:b2:9e:93:0b:34:65:61:fc:35:7c:37:7f:
9d:e2:11:71:c4:c3:55:c2:90:56:c4:7d:aa:1d:d0:6f:04:b3:
34:40:c3:57:21:fb:75:91:a1:6d:d4:63:be:c4:31:54:3f:a3:
5e:c4:87:f0:a2:4a:74:98:d6:1c:72:1b:67:4e:49:f4:96:57:
80:a5:5b:21:94:b9:23:39:f1:ca:d4:dc:4c:7d:73:8d:02:c4:
48:31:30:a7:e2:da:11:b9:8d:45:ed:e7:79:9c:46:3a:a0:df:
b1:84:f8:42:cd:9d:5b:a1:19:5b:0d:bf:02:7d:e4:a0:3b:00:
9b:fb:27:2f:65:78:68:31:63:ab:4b:4a:62:38:f7:82:22:67:
bd:64:88:e2:05:3d:e5:b9:9c:39:7a:4a:b0:ea:8a:c5:9b:56:
f4:7b:8d:60:af:20:b9:b8:fb:d2:64:75:25:fa:bc:72:54:ad:
99:b4:84:53:4b:f9:66:65:4f:50:0c:bd:4c:1f:3a:4c:a6:4a:
5e:f5:25:20:39:60:25:10:8b:0a:e8:1f:5f:12:2f:61:7f:da:
41:a0:eb:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:12:24 2025 by rpki-client