Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: K2AFcZnn2j3hKf2qyfJOvf38BmoOqcIU/LaiC39pqYk=
Subject key identifier: 57:3F:10:C6:39:6D:26:AE:00:10:F1:97:EC:56:48:27:16:84:03:94
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 019778663159D2A57272226F75FDA4D17D74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 159A
Signing time: Mon 16 Jun 2025 11:00:52 +0000
Manifest this update: Mon 16 Jun 2025 11:00:52 +0000
Manifest next update: Tue 17 Jun 2025 11:00:52 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: ROIZDnkUYCehm+TvY/xHWJJ4QyyuAkYXpelmQFRZn4U=)
2: XuSi8kXeBm_B8q7AzG1ldyxBl-U.roa (hash: VfVAqS9+xLim6Zr3WY+RPdJPag+yTxoDEH7wLbaR7Ko=)
3: w31LkDj-LMN5WUk5kbozH3jiIBA.roa (hash: y5CKPYN2xY1V73cNd1uJ1GGyUm72KbaIXZc2V61uNZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:31:59:d2:a5:72:72:22:6f:75:fd:a4:d1:7d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Jun 16 11:00:52 2025 GMT
Not After : Jun 17 11:00:52 2025 GMT
Subject: CN=573f10c6396d26ae0010f197ec56482716840394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:99:e0:31:90:ba:7f:6e:a2:7e:d3:24:a0:c4:
2e:cb:a1:f1:00:bc:10:d7:41:e8:74:dd:79:55:bd:
c4:71:08:c6:80:36:ee:0e:6c:43:c6:eb:cf:fd:1c:
ed:cf:12:d3:8f:85:23:33:73:56:80:7f:05:bc:a9:
09:1a:eb:82:14:1e:4a:5d:3a:f3:ef:eb:12:81:82:
75:69:df:76:1c:ad:22:ca:45:45:a8:bf:18:ae:f7:
c0:48:9f:14:c4:59:5d:19:ef:a9:9c:b6:d1:3b:46:
75:7e:62:9d:95:7c:20:f1:56:81:c2:e4:4a:77:56:
f1:2a:02:38:b0:75:59:0a:21:d0:a7:6f:cb:e7:28:
5b:93:86:eb:50:08:6d:18:f6:20:d6:bb:ab:71:fe:
f2:77:e0:1a:5f:44:09:e6:e3:b5:2e:67:04:f8:17:
dd:e2:4f:8d:53:43:6a:93:7e:25:27:89:f7:d0:90:
e9:77:8a:55:37:fc:93:b8:2f:0b:c9:39:51:07:c0:
e0:6b:f3:d8:a6:e0:67:af:54:ad:df:41:4e:fb:6a:
f7:98:f6:ce:70:74:df:1f:3a:de:cb:80:cd:97:ea:
7c:64:ba:7d:33:18:2b:f5:ab:88:d6:94:1e:7f:dc:
16:16:fa:e9:57:ff:20:4b:79:6d:ce:91:b8:dc:63:
c5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:3F:10:C6:39:6D:26:AE:00:10:F1:97:EC:56:48:27:16:84:03:94
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:be:7f:9e:83:a6:30:90:f4:bc:73:4e:45:ca:c7:b3:ae:3b:
8e:77:ed:22:ed:8e:55:92:96:5a:c6:7d:c6:30:98:0b:86:fe:
14:6f:52:bf:8d:fe:96:fd:23:56:6a:e8:6a:0f:ae:6b:cc:12:
53:56:fb:69:9c:de:e4:9f:bc:99:60:ad:7c:00:11:07:8d:bb:
79:29:f7:c7:97:a2:a5:c0:0c:aa:7b:f0:fa:9a:b1:25:04:3d:
c7:81:9f:f5:7e:37:75:79:14:f6:4b:5b:7a:d9:07:a0:8b:ba:
42:0b:cf:37:ba:1f:3b:28:e2:66:3d:e2:7b:e8:fd:7d:34:42:
e8:cb:5d:a7:23:55:e7:f8:10:ef:89:28:44:cb:c5:21:c5:af:
6a:34:39:cb:1a:6e:1a:43:1f:4f:25:53:2f:21:4a:78:8b:1c:
26:27:3c:10:d2:59:39:c4:9e:e5:8b:e5:9c:90:19:5a:16:d9:
67:92:a3:ba:6b:04:4b:a7:40:f9:14:59:de:69:1e:6d:52:6c:
12:ae:b5:7e:6e:8b:d5:97:2f:a9:09:e9:b0:c6:7a:db:c4:bf:
58:e4:07:de:62:25:e0:29:d4:19:47:9e:5f:29:cc:d3:d0:27:
47:c0:ee:6e:97:9c:2d:5e:ed:4b:fd:1a:9a:fb:ab:c0:a6:b2:
51:58:c0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 19:58:13 2025 by rpki-client