Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: 9uqqwU4Kf+fWeJvIn7wg2/PLg7WetQzwDuAb8JD5oU8=
Subject key identifier: 10:78:41:1D:47:57:C6:25:98:E7:BC:FD:06:FC:CB:71:0F:33:CA:7E
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 0197722CA6878D91EBF8FA9E6559BD1CFA29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 1594
Signing time: Sun 15 Jun 2025 06:00:18 +0000
Manifest this update: Sun 15 Jun 2025 06:00:18 +0000
Manifest next update: Mon 16 Jun 2025 06:00:18 +0000
Files and hashes: 1: 3-RywYSjpl9yuamrGaiHfk5Mz6o.roa (hash: khi3zX71hfk8spUUIwuIJwDTfe1y2tzgOMplAgujSag=)
2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: 7tkrPp1OjgkQodwlErUKL6FS1GpyBxIk1ALgHH1eR4k=)
3: qmufYg21c7b0gdjuY1ziryDKce0.roa (hash: cPNs19EWQmBAO/qKhHL4tQL9v8RMF/40vmmVOD5n7Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:a6:87:8d:91:eb:f8:fa:9e:65:59:bd:1c:fa:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Jun 15 06:00:18 2025 GMT
Not After : Jun 16 06:00:18 2025 GMT
Subject: CN=1078411d4757c62598e7bcfd06fccb710f33ca7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:43:cc:37:29:46:18:0c:29:1f:bc:2f:7c:6d:
46:7a:12:93:d6:73:3f:08:7e:76:30:1b:5d:36:7c:
bf:48:4b:1d:cd:81:91:60:06:27:d1:50:e0:03:55:
98:29:45:84:ca:1e:57:f0:c3:5a:bc:16:83:b0:c6:
fb:c0:54:27:d9:c6:e2:d7:a5:54:54:aa:3b:7e:6a:
6a:8d:f2:56:23:0d:68:3d:62:d7:67:35:49:1b:13:
45:06:7a:0e:5d:98:4d:1f:28:95:67:3b:da:a9:80:
63:5e:8d:bb:6c:d4:78:64:8e:c7:a1:1d:50:56:b3:
50:f1:95:99:55:07:49:ce:4e:47:c8:11:23:f9:bf:
ac:b6:fa:e5:e6:4f:21:47:5c:e7:df:96:02:fb:53:
48:f9:24:a2:99:d6:ff:3f:e4:c9:d7:51:b7:05:3c:
64:1f:cf:67:69:62:83:14:59:db:93:80:ec:02:53:
d4:90:d8:70:95:fe:22:f0:e5:ac:e8:e6:e1:6c:24:
e7:05:b2:9e:2e:0a:48:72:75:ed:9d:f9:1c:04:bb:
8d:0f:b7:32:2c:87:22:86:11:57:6b:ee:77:0d:7a:
df:f1:18:64:39:62:de:a6:3e:b6:34:c5:93:9e:23:
b8:cc:ee:dc:29:76:ad:d9:4e:dd:41:ad:c1:49:3a:
3f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:78:41:1D:47:57:C6:25:98:E7:BC:FD:06:FC:CB:71:0F:33:CA:7E
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:62:34:d1:48:2b:47:9d:c9:6a:a5:40:d6:68:be:5f:9f:62:
70:23:dc:b7:1e:56:a2:0e:6d:9e:f5:a3:d9:e3:48:ad:bd:08:
e9:62:90:a4:30:ba:a5:c8:59:0e:1d:4d:86:2e:50:c6:95:23:
0e:8a:d1:95:a2:f9:58:ea:c1:c7:c5:c2:fc:70:e0:9f:ad:bf:
33:89:48:d4:07:16:19:b8:c9:10:09:ce:38:92:1a:8f:d0:23:
85:f0:c1:c4:96:28:1d:12:0d:41:0a:a8:38:2c:b0:a7:ac:75:
3e:b9:df:3d:94:3a:e4:04:b8:35:67:01:92:53:32:eb:b1:2c:
fa:61:2b:94:f1:78:42:72:33:e5:e1:d4:17:c8:ad:1e:6d:8b:
77:a0:5d:16:65:72:e0:2d:9a:18:2b:bf:a9:5b:f4:a3:24:ec:
af:d4:2d:70:0c:59:0c:92:2d:64:e2:3c:d7:fa:78:77:36:ec:
33:96:dd:3f:a8:c9:1a:1d:66:2f:59:f1:4e:a9:b2:2a:d0:f9:
59:7c:5c:1f:d0:c2:2f:7c:c8:f9:36:e8:4b:18:0a:75:81:a4:
c4:e9:f4:61:d3:04:e8:49:58:7f:41:aa:18:5a:d3:e7:c1:73:
3a:d6:63:af:db:ea:ec:f5:ae:c3:e9:32:fd:6d:fc:57:03:93:
8b:e0:0e:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:06:43 2025 by rpki-client