Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
File: t8jfPaM5OL8bJF8cRHn9JN2flPA.mft (raw, json)
Hash identifier: N3k5hUO4y7XDpTWHLBKRUFo4Qg5UrNzJSYpz1zJ46oQ=
Subject key identifier: B6:AC:D6:AC:D5:4C:EB:B6:97:1F:36:FE:BE:C6:BE:6A:76:63:9F:A3
Authority key identifier: B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
Certificate issuer: /CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Certificate serial: 0197722D082A27043585C3363D89653631FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
Manifest number: 155E
Signing time: Sun 15 Jun 2025 06:00:43 +0000
Manifest this update: Sun 15 Jun 2025 06:00:43 +0000
Manifest next update: Mon 16 Jun 2025 06:00:43 +0000
Files and hashes: 1: rnBvIUiPG215g2G4TvJ3vJPLCJg.roa (hash: QymikogB0QXOb1awGtB0gQkLWC08JbHRqFZVMECKiDM=)
2: t8jfPaM5OL8bJF8cRHn9JN2flPA.crl (hash: 7FEPL+zx+5+8eWHjjRhQOxUWlKycSi5O58Az7awa7iA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:08:2a:27:04:35:85:c3:36:3d:89:65:36:31:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7c8df3da33938bf1b245f1c4479fd24dd9f94f0
Validity
Not Before: Jun 15 06:00:43 2025 GMT
Not After : Jun 16 06:00:43 2025 GMT
Subject: CN=b6acd6acd54cebb6971f36febec6be6a76639fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:70:08:89:66:64:4e:f3:0c:50:0b:8f:fb:a9:
b5:74:5b:ce:d7:cd:8a:2e:79:bc:37:cb:c2:3a:0d:
6c:82:0d:ce:a6:5b:e8:c9:48:1f:65:11:dc:44:c4:
01:0f:11:3c:73:2f:04:b1:a7:de:f4:6f:bc:58:6d:
7b:45:67:06:19:f4:bd:45:a2:b5:91:dc:b7:05:45:
6c:c5:22:93:38:d6:ed:dc:28:3d:53:50:2b:13:5e:
f9:15:de:2c:8d:eb:1b:8d:32:68:01:91:8b:27:c4:
b3:7c:e1:47:49:24:bb:8a:d7:67:f0:7f:d9:03:e3:
ca:d9:19:85:37:f8:e4:24:40:27:92:47:e8:64:b3:
30:59:0c:f4:14:2a:f3:ee:92:4a:80:c6:f4:a5:56:
5f:a1:97:d6:45:2d:2a:fe:75:d7:a4:2c:71:7a:ea:
f9:e2:49:64:66:d5:9f:c4:f4:5c:4c:cb:06:f2:68:
44:6f:0d:42:5f:26:62:27:84:fb:f5:6a:70:e3:31:
c9:e7:2c:e3:05:ba:a6:a1:6d:26:79:6d:9f:c1:c8:
4d:b3:40:cc:d7:e7:bc:7e:d0:7d:75:3a:01:14:af:
22:37:a9:31:29:65:d0:4a:1a:1a:3f:dc:8a:78:b2:
c7:d0:a3:24:52:53:e9:7e:56:e9:45:fb:9d:0b:7c:
5d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AC:D6:AC:D5:4C:EB:B6:97:1F:36:FE:BE:C6:BE:6A:76:63:9F:A3
X509v3 Authority Key Identifier:
keyid:B7:C8:DF:3D:A3:39:38:BF:1B:24:5F:1C:44:79:FD:24:DD:9F:94:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t8jfPaM5OL8bJF8cRHn9JN2flPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/4dd198-93cb-459c-bee2-2d1daa299e83/1/t8jfPaM5OL8bJF8cRHn9JN2flPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:44:f7:65:a2:4f:c6:f5:08:22:39:d0:ce:0a:15:ac:a1:92:
c9:f0:0b:21:d6:65:28:d3:7e:1b:d6:07:f7:3e:86:5c:3a:a8:
a5:f4:af:07:6f:f9:24:cd:d6:71:57:77:59:c0:60:f2:a7:1e:
5c:a1:e1:86:02:59:51:8b:43:0c:7c:8f:7f:a7:48:ed:c9:98:
84:88:90:02:f1:e0:cf:a2:30:22:a7:82:c2:98:32:61:19:92:
b2:42:da:e6:3b:68:66:05:2b:84:82:71:ed:74:3c:56:16:13:
9d:ed:52:19:c7:26:e2:b6:d5:38:4e:4e:f6:45:c8:14:48:67:
4d:fd:82:cb:31:73:70:a6:61:c9:ad:17:b9:5e:94:bc:d4:9a:
8c:8b:46:9f:e1:4c:ca:3a:ca:1f:2c:9d:c9:6d:bd:cd:52:a3:
92:71:84:61:63:91:e7:e8:93:43:63:b6:4a:dc:f3:ce:be:2b:
9e:05:f9:16:5c:56:db:59:42:9f:74:fd:c8:7b:87:fb:66:6d:
b6:db:c0:94:db:3e:55:cb:5e:3a:30:f8:c0:65:cd:fc:bf:98:
d3:54:d3:a1:de:0f:c4:cc:bd:df:26:75:c4:9a:8d:b4:c4:a5:
ba:a6:a3:c2:c8:9b:15:b4:a6:b7:72:a9:c6:dc:f9:5b:bd:12:
e7:7a:9b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:48:49 2025 by rpki-client