Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json)
Hash identifier: nu4kXE9YvNLupKJU3i0AYj5cxay5PZg7xp/DzVnC9XA=
Subject key identifier: 3D:EF:2F:BD:BD:0D:75:17:D7:F6:66:F3:92:FC:85:C3:26:FE:5D:4A
Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Certificate serial: 01978B47E985A744BF397A4D07CDB530A85F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
Manifest number: 159E
Signing time: Fri 20 Jun 2025 03:00:35 +0000
Manifest this update: Fri 20 Jun 2025 03:00:35 +0000
Manifest next update: Sat 21 Jun 2025 03:00:35 +0000
Files and hashes: 1: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: b2Vj22ktG+TptjWCU/FAfk8rVSc8Qum/UwBiwzYxSBs=)
2: pul6fCeEfRfqHUtKh0hXtHyFW6M.roa (hash: SMvKtJGuPxG36wkNr1bAgb49/+mZbdqtVopoxHFUHtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 21 Jun 2025 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8b:47:e9:85:a7:44:bf:39:7a:4d:07:cd:b5:30:a8:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Validity
Not Before: Jun 20 03:00:35 2025 GMT
Not After : Jun 21 03:00:35 2025 GMT
Subject: CN=3def2fbdbd0d7517d7f666f392fc85c326fe5d4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:6c:02:6f:47:14:c0:32:48:41:bb:ce:08:71:
f0:b6:d4:17:a1:1c:23:d5:dd:7e:43:cc:2c:a0:41:
51:bc:26:f1:3e:22:e3:58:e7:86:5d:d4:04:1d:d2:
e0:8f:4c:ea:39:dd:4e:5b:f0:77:6b:98:86:e8:50:
ac:99:86:ad:47:ba:2e:9a:a0:69:de:0a:c7:d5:43:
15:bc:ab:5d:ff:3b:df:59:9a:e0:db:99:7d:24:67:
03:64:2d:b4:15:98:25:72:6e:e7:e9:21:c0:d1:d0:
e7:d0:e2:ae:6c:47:a6:94:97:ad:65:82:64:c7:87:
e2:ac:ec:b4:2a:4b:8a:c6:d5:e5:28:e9:da:4c:52:
ef:c2:5e:3d:a5:ad:97:f2:cf:21:4b:84:29:f5:9e:
7c:9b:ff:81:01:5a:7c:fd:fa:62:70:72:9f:49:bb:
f6:91:55:a1:48:f5:15:bb:e6:13:f5:ed:fd:13:81:
e9:dd:74:27:4d:4d:19:b1:91:6a:ac:da:c3:ba:f7:
ef:7c:2c:1b:57:e9:90:46:f6:c0:ee:9c:ad:e8:f0:
4b:5f:53:4d:6e:f6:87:a2:5b:61:c9:38:90:b4:ce:
e3:60:bb:70:29:a1:d7:e6:51:92:39:90:b9:8d:63:
f2:0d:ed:eb:e4:d0:ad:e2:82:c1:80:25:9e:99:84:
bb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:EF:2F:BD:BD:0D:75:17:D7:F6:66:F3:92:FC:85:C3:26:FE:5D:4A
X509v3 Authority Key Identifier:
keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:9a:3d:de:aa:d0:a6:28:51:2c:09:02:da:de:86:ca:07:7c:
65:e3:7b:57:0b:97:39:22:eb:2e:72:7a:ea:45:e4:63:7d:13:
1e:58:b1:17:35:d8:a0:e3:ce:f7:bc:95:96:68:8f:2b:9c:70:
0a:ac:4e:ad:0a:0d:9b:03:94:2c:0a:51:1f:9d:3e:fc:f9:ee:
a0:b8:af:a4:cf:ca:3a:c2:d1:53:b5:75:38:f4:30:34:c1:af:
ca:dd:36:10:08:63:a8:1c:84:cc:43:39:a9:1f:b8:39:3c:c2:
62:d6:4d:d3:3e:0c:8f:be:b9:0b:fb:6c:2a:1b:62:41:0a:5a:
87:31:7c:e6:c4:d8:0d:e1:8c:95:18:6a:7d:57:8e:fc:5a:82:
4a:56:3e:e8:51:57:86:27:4e:f4:49:3c:eb:de:70:fd:99:9a:
a4:5e:77:b8:bf:1f:69:a9:3e:17:11:4b:b0:12:71:87:a3:c5:
60:ab:f4:40:da:fe:2a:e7:ff:78:52:75:15:a2:c1:ca:63:b9:
a7:d7:5c:2a:f7:9d:e8:6d:1d:ab:56:e6:10:6f:12:53:d8:a1:
a1:3e:0a:36:ba:d6:0c:93:b7:e7:7d:77:3b:84:6d:c8:ee:42:
c1:9a:0d:32:6c:5f:2b:5d:41:a5:38:51:34:36:46:d8:8c:d9:
d9:82:73:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 08:51:28 2025 by rpki-client