Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
File: 8R8omgChsRW386TRuAEb-Q0aL3I.mft (raw, json)
Hash identifier: wZK5QD8wZKJmHaIp+64MzcBbwej5DYa2+OiPn4P4V3U=
Subject key identifier: FE:51:F5:A2:67:88:96:ED:A5:C1:91:DA:6D:2F:03:0A:B0:AB:9F:51
Authority key identifier: F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
Certificate issuer: /CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Certificate serial: 01977AC2953EA84FD1C737A7476CD0774226
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
Manifest number: 0965
Signing time: Mon 16 Jun 2025 22:01:01 +0000
Manifest this update: Mon 16 Jun 2025 22:01:01 +0000
Manifest next update: Tue 17 Jun 2025 22:01:01 +0000
Files and hashes: 1: 8R8omgChsRW386TRuAEb-Q0aL3I.crl (hash: WiQ62abJceEOElbJxS9VEKU54VRSk/AFepGtEqoFieE=)
2: tRxgXr9YQwTbEh2NqyL9M68npkQ.roa (hash: QcuVE9jeWpJsMM52+9+6n7mFIjZuC9lNEDcWkB7O3NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:c2:95:3e:a8:4f:d1:c7:37:a7:47:6c:d0:77:42:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Validity
Not Before: Jun 16 22:01:01 2025 GMT
Not After : Jun 17 22:01:01 2025 GMT
Subject: CN=fe51f5a2678896eda5c191da6d2f030ab0ab9f51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b6:87:fb:fb:58:7f:3c:3b:03:66:c7:c1:54:
61:6a:3c:06:f7:30:4b:c5:6b:26:77:15:e1:67:0b:
a9:08:85:e2:04:74:ad:44:e0:ed:3e:c4:c1:d5:66:
5b:0f:38:1e:81:4c:44:76:d4:f7:85:25:6e:6f:8c:
53:0c:4e:06:13:8a:2f:10:1f:aa:91:d3:c1:32:62:
62:25:42:f6:f9:34:a3:c5:09:76:a9:2f:75:6c:c7:
f6:6e:65:b3:96:a3:dc:96:eb:a6:99:d0:5e:56:89:
97:ac:23:0b:1a:87:ae:6e:aa:f9:51:02:12:d1:5c:
96:cd:3c:76:bd:ca:96:c2:19:9b:e3:7a:f6:f0:fe:
17:91:c1:8d:9a:cc:45:f8:f3:21:4c:94:3f:c9:ab:
f0:74:46:7d:37:1c:04:ec:d4:4f:89:a0:0c:a9:60:
96:a5:9f:f8:a4:61:c7:51:2e:9a:de:5c:ec:54:f3:
09:47:df:12:16:5b:4b:57:b0:18:37:08:c1:74:18:
e3:db:00:eb:ac:52:5e:ff:09:82:3e:91:54:89:1a:
8b:d0:03:4c:07:e1:fc:39:0f:d4:3f:b9:5c:71:5c:
15:fe:d6:b0:dd:0c:7a:08:4a:24:00:48:f0:71:13:
05:e4:4c:64:62:a1:5e:5d:c8:52:ae:60:19:b4:81:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:51:F5:A2:67:88:96:ED:A5:C1:91:DA:6D:2F:03:0A:B0:AB:9F:51
X509v3 Authority Key Identifier:
keyid:F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:2d:56:9e:e2:64:98:3f:7c:42:4d:8e:5f:12:13:75:f8:e5:
f4:1d:4a:b8:2d:0b:71:7a:18:43:6d:b9:a7:8f:64:c5:d4:07:
df:f6:97:29:14:d5:98:ad:c6:84:75:1b:ce:67:c4:49:13:f3:
e6:25:ea:f7:88:ff:88:77:28:fc:e7:94:e1:9e:b2:06:2d:4b:
44:07:5f:7c:db:95:bb:df:c8:c9:72:d2:33:17:ac:6c:5b:50:
07:ef:b1:be:02:ea:c4:2b:da:41:fa:2a:0f:2a:a4:bb:81:42:
5b:62:9f:51:fc:7d:09:c0:41:76:a6:9a:99:ee:6e:d8:45:bc:
d3:c1:7e:bf:24:ac:af:54:de:40:b9:31:6e:66:72:6d:bf:a2:
05:e9:5a:b7:79:65:7b:8e:31:9b:b6:73:36:a8:67:74:b9:84:
e5:a8:22:4a:71:06:a6:82:44:23:66:83:b0:c2:18:9c:16:c5:
61:fd:e3:04:b7:ce:fe:7f:79:b5:c0:dc:97:1a:53:70:26:33:
ae:02:ee:cf:f1:66:0b:7d:68:aa:a2:55:a2:3c:65:99:46:28:
2e:7c:c3:57:db:ce:58:1c:f4:f6:b9:0a:af:f5:86:04:f5:3f:
99:fc:2a:39:0f:c9:7e:3b:08:49:fc:b3:03:ef:4d:21:9f:a5:
6b:57:d7:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 00:49:51 2025 by rpki-client