Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
File: rev8Tln35kZGDZAxFWbfH0ftqRc.mft (raw, json)
Hash identifier: detj1ENBy8pVcx21QIVw0yb8f1RbuqTsxIz/q4S9t1s=
Subject key identifier: AD:52:DF:2E:8F:64:E1:E5:68:E5:E4:95:D4:05:5B:11:BC:5F:A3:94
Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
Certificate issuer: /CN=adebfc4e59f7e646460d90311566df1f47eda917
Certificate serial: 01976B861AAAA5770CC893BFCF51732FCEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
Manifest number: 10CB
Signing time: Fri 13 Jun 2025 23:00:40 +0000
Manifest this update: Fri 13 Jun 2025 23:00:40 +0000
Manifest next update: Sat 14 Jun 2025 23:00:40 +0000
Files and hashes: 1: cQyc6nVgHzK4QNpSkp4cDVRMkiE.roa (hash: N1QdoGGRESzbdDo8ibNStMhsdyaZ5jyu5P6HBd0ZTZU=)
2: rev8Tln35kZGDZAxFWbfH0ftqRc.crl (hash: +9l5fkWB7tZ0+3pR6XU27zMMEEJzhz0Cn9qwhPqUA1g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:1a:aa:a5:77:0c:c8:93:bf:cf:51:73:2f:ce:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917
Validity
Not Before: Jun 13 23:00:40 2025 GMT
Not After : Jun 14 23:00:40 2025 GMT
Subject: CN=ad52df2e8f64e1e568e5e495d4055b11bc5fa394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0f:25:f1:ff:07:8f:a4:b4:7a:00:c8:17:f5:
3a:70:1c:1e:c3:01:c3:5a:c7:b9:7e:23:2a:12:d1:
40:7c:02:da:29:8d:dd:ae:09:34:15:8b:15:2e:e5:
67:f0:50:2c:26:dc:67:17:8c:86:bb:25:aa:d0:53:
de:50:f3:29:ec:4c:18:8d:7c:c7:71:86:fd:1c:93:
18:46:b4:e7:af:31:1f:fb:bc:87:ea:1d:d1:16:f6:
bd:c4:43:b2:02:8f:d2:90:dc:4f:3a:f7:c3:13:d5:
c1:e2:fb:24:88:68:cc:b5:c5:80:3d:3d:1d:0c:52:
2f:16:b5:00:a7:c8:77:4a:c4:58:f4:c9:af:7c:04:
f7:28:32:3c:51:c5:8f:0c:e3:28:31:e8:c2:a1:92:
c2:a1:8d:b6:d5:51:5f:23:17:2f:cf:fc:ce:06:88:
87:5a:83:fc:86:03:30:8d:f6:c8:90:2b:9e:01:60:
3c:e8:da:56:29:2a:2b:10:88:2e:7e:be:ad:48:aa:
0d:4f:96:44:f6:7e:d5:71:7b:61:2c:df:d0:ff:a5:
3d:ec:fe:1b:b2:a5:8a:21:a1:72:77:7b:25:d2:32:
db:3f:90:e4:9d:08:f1:db:66:9c:75:5c:bf:9a:4d:
81:7f:4c:45:62:aa:7a:89:97:27:24:c2:99:a0:b8:
64:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:52:DF:2E:8F:64:E1:E5:68:E5:E4:95:D4:05:5B:11:BC:5F:A3:94
X509v3 Authority Key Identifier:
keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:27:0f:0b:59:18:de:5d:e0:3e:7f:b6:7f:4b:e0:cd:58:91:
3f:af:5d:9c:1a:82:cd:02:fe:02:1c:41:c0:1a:17:2d:8e:f5:
95:52:bb:10:f6:c4:aa:6b:79:3c:dd:54:36:e2:03:a1:7d:84:
d7:76:fe:f2:d8:7b:d6:97:82:82:ed:ac:54:c6:63:41:6c:a5:
39:44:ba:03:47:89:cb:7b:59:e4:ba:da:c8:51:be:f5:2b:e3:
fb:12:90:2f:eb:2e:22:0f:ed:55:d4:e7:65:7d:e9:92:55:ae:
1d:d4:30:db:61:2f:b9:f1:80:72:b0:c5:75:8c:9f:8d:e8:cb:
be:19:b5:32:8c:90:1c:f7:e0:f5:13:79:18:cb:86:95:4a:fc:
89:db:16:b4:96:32:f7:e9:79:8d:c9:8b:2e:8f:6a:06:01:d0:
4f:ec:ff:4b:56:52:56:4c:d2:ed:26:b8:19:3e:dc:da:71:cc:
cb:4b:98:1d:5c:59:95:74:bd:e4:e0:62:81:13:9f:9c:8c:e0:
78:0d:d4:df:88:bd:dc:c2:12:6c:28:55:48:47:e4:35:27:bf:
45:e0:ef:b6:42:95:6b:8e:2e:1f:1d:a9:fd:87:b3:1b:e7:10:
df:57:32:93:ee:43:98:df:6e:8d:a2:52:f0:a6:cb:7c:c5:ef:
29:87:fe:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:28:24 2025 by rpki-client