Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier: HPLWBrl6WPHAcuM1keA4xSlw+kSfznF8Fk08u5+2xRo=
Subject key identifier: F1:0F:08:C9:A9:AC:82:4B:9A:92:F5:F0:FB:35:31:FB:F9:0A:88:B0
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 01976CCF648B6D51042DD84EC18057D70E67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number: 05DF
Signing time: Sat 14 Jun 2025 05:00:19 +0000
Manifest this update: Sat 14 Jun 2025 05:00:19 +0000
Manifest next update: Sun 15 Jun 2025 05:00:19 +0000
Files and hashes: 1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: BnTTqwZ1mJtY0DH8vAsVk0HYmCwj6hpLu8zBYfWNnds=)
2: UMmv-WY7B5qYJViInJvlNV476mE.roa (hash: jHHOgpNZRXbrpDROEuRDFCxUXMl5uaCZV9NM+NW4eXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:64:8b:6d:51:04:2d:d8:4e:c1:80:57:d7:0e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: Jun 14 05:00:19 2025 GMT
Not After : Jun 15 05:00:19 2025 GMT
Subject: CN=f10f08c9a9ac824b9a92f5f0fb3531fbf90a88b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1a:80:ae:4f:f4:a6:6a:5f:d1:bf:00:50:ef:
46:d8:7a:2a:27:c9:ea:b5:c0:6c:fd:39:66:ed:b9:
b5:01:98:29:39:39:ab:ed:0b:8d:74:5d:96:5d:65:
95:13:65:54:b4:3e:9a:50:c7:63:e6:11:49:c6:65:
31:56:27:dc:d8:3c:15:89:68:aa:9b:71:3b:fc:01:
ce:10:fb:e9:25:a2:24:b4:16:09:20:4a:07:d1:be:
68:6b:3c:75:aa:5b:63:95:d2:80:76:c1:2d:48:63:
7c:2c:b0:67:bb:6a:4f:28:19:bc:a8:69:6f:1d:5d:
7a:2c:37:81:b4:28:76:11:49:68:d3:bc:58:2b:1f:
2c:3d:cc:17:2c:41:e8:be:82:1a:de:0e:8a:d9:84:
07:0e:f0:f7:38:30:84:bf:db:dd:99:9f:ef:95:67:
e3:a8:7a:fa:14:72:66:ab:97:86:8a:39:c6:22:3a:
1a:70:a5:5c:3b:95:40:15:0d:f1:50:7e:63:52:e4:
d3:bf:92:c1:1e:28:46:5a:3b:f1:e1:f5:8b:06:da:
6b:aa:3f:ca:15:f5:af:b6:3d:1c:88:a2:bd:5c:48:
ef:27:93:e9:38:aa:4d:9d:48:99:a7:96:1a:66:f3:
7b:78:c6:fa:9b:d8:f8:d9:d8:3a:29:6f:92:7c:6a:
7b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:0F:08:C9:A9:AC:82:4B:9A:92:F5:F0:FB:35:31:FB:F9:0A:88:B0
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0b:64:c8:80:5e:4e:bd:15:58:86:ec:2e:6f:f6:5b:82:f9:
5a:d3:7f:55:4c:80:b1:ab:40:c6:3a:e9:62:a4:51:2a:2f:cd:
6a:38:55:85:32:bf:d7:57:70:de:6a:b0:d7:7b:b1:ee:c2:e9:
19:4d:ce:25:b7:53:75:09:5e:d2:bd:48:c0:86:5e:e4:80:d8:
3d:e1:45:a2:4c:e3:bb:9b:26:e6:33:7d:d4:b4:9f:0b:c9:94:
f4:ba:e7:e0:78:63:09:22:66:10:bb:e6:c7:9a:34:15:8b:50:
55:82:47:c7:59:3b:88:1f:1b:50:8d:27:4e:c5:01:1a:9e:64:
f9:fa:3b:19:b0:55:dc:df:02:53:aa:2d:0e:37:e9:cb:77:26:
9a:ff:01:73:cc:10:f4:dd:27:9e:a8:4d:20:0c:41:be:fe:9a:
4f:8d:22:c1:5d:6e:04:3e:b6:77:19:ee:10:5a:81:88:2b:e0:
d9:35:2b:a0:16:2a:8d:69:26:f2:99:9a:1a:be:72:b8:19:bb:
01:66:0b:6e:fd:ca:dc:a0:d5:91:c2:a1:9c:5f:0a:a1:00:10:
c4:78:8e:af:e1:86:7c:6d:3d:bb:af:8d:e3:f8:48:a6:1f:8d:
3d:5e:4b:92:9d:06:e9:4d:cf:c0:48:62:b0:7b:aa:f6:22:c4:
17:55:3e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:15:44 2025 by rpki-client