Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
File: 8hVRewsgMJ6RZAW54e0hoEaaaJU.mft (raw, json)
Hash identifier: TnlzeCDs+Z5F2uOVeUKRUSIVM8OU3sJOqv0L8VFvvLY=
Subject key identifier: 8E:BE:9B:BA:ED:37:1C:BB:5B:BF:86:0E:2C:83:79:25:B5:2E:1F:16
Authority key identifier: F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
Certificate issuer: /CN=f215517b0b20309e916405b9e1ed21a0469a6895
Certificate serial: 0197684DE90BC137DB35E72D8FE6AA47DC65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
Manifest number: 01BA
Signing time: Fri 13 Jun 2025 08:00:25 +0000
Manifest this update: Fri 13 Jun 2025 08:00:25 +0000
Manifest next update: Sat 14 Jun 2025 08:00:25 +0000
Files and hashes: 1: 8hVRewsgMJ6RZAW54e0hoEaaaJU.crl (hash: ZPQZfWRFzR9pdnU428w3T5KsZJJCLTGhAQrQve+sI1E=)
2: qCeXwVNQp66WQ27Det0b9KrkJEc.roa (hash: WoKc3ldX5sHKUSOKMyS/VBt9xUxQrJ5xCbXpuIjQb48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4d:e9:0b:c1:37:db:35:e7:2d:8f:e6:aa:47:dc:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215517b0b20309e916405b9e1ed21a0469a6895
Validity
Not Before: Jun 13 08:00:25 2025 GMT
Not After : Jun 14 08:00:25 2025 GMT
Subject: CN=8ebe9bbaed371cbb5bbf860e2c837925b52e1f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c7:44:63:bc:00:99:b1:e8:79:65:fe:84:18:
13:4f:9f:53:53:ca:24:e9:7b:3c:3c:85:f0:ad:51:
97:d6:09:54:2e:d6:6c:3e:2c:88:6f:28:6b:2d:c5:
d0:71:a4:2c:41:e9:eb:2b:84:9c:7d:0c:8a:83:c3:
9e:fe:80:7f:17:69:a7:d1:42:e4:e9:ac:a4:e5:04:
ac:64:4d:48:5e:01:17:30:3e:05:d5:9b:a1:1c:b7:
a0:73:fd:6d:7e:08:fc:1d:d6:df:8a:3d:71:68:d7:
3f:9e:c3:cc:6c:1c:dc:ac:d1:f9:a7:9a:8f:6b:b4:
6b:6d:a3:ed:da:65:63:39:b3:a0:45:e7:fe:41:54:
2c:59:be:a6:1b:e1:c9:31:49:7b:cc:b4:84:93:6b:
d5:6d:a8:e5:bf:0e:89:ad:68:12:06:22:60:ab:bf:
d2:49:16:fc:38:9e:41:ee:43:a0:69:65:c0:9f:24:
82:e6:5b:cc:a7:d7:54:52:9f:48:21:4a:a5:f2:33:
17:c6:7e:01:d9:86:af:02:44:f0:73:65:ea:92:c2:
2e:53:60:bd:18:48:a0:40:d9:df:f9:18:d6:7a:ad:
7a:8e:2e:31:bd:15:de:70:a1:8b:c0:dc:52:00:a7:
f5:d2:c1:3a:a6:1b:2c:e0:2e:33:53:36:a0:ab:d1:
55:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:BE:9B:BA:ED:37:1C:BB:5B:BF:86:0E:2C:83:79:25:B5:2E:1F:16
X509v3 Authority Key Identifier:
keyid:F2:15:51:7B:0B:20:30:9E:91:64:05:B9:E1:ED:21:A0:46:9A:68:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hVRewsgMJ6RZAW54e0hoEaaaJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/83cebe-c8ce-489d-a2f0-b95a16416b56/1/8hVRewsgMJ6RZAW54e0hoEaaaJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:38:15:28:31:48:16:76:f2:9f:0a:b4:a3:90:a0:1c:c0:a2:
29:30:c6:8a:ed:ae:85:f2:c5:51:c1:af:92:7c:db:ae:88:80:
f6:6e:74:b0:c2:18:55:eb:1d:69:73:bc:db:32:21:ac:54:c8:
92:33:e2:97:aa:89:ce:0b:89:d4:f3:ee:61:31:c5:d3:db:1c:
0a:79:ab:e4:8e:8b:24:61:54:14:c7:dc:da:65:56:9c:26:02:
19:b4:51:c5:a9:70:0f:e3:86:a5:be:ff:3a:ef:2c:3c:4b:cb:
bc:cb:e4:8c:65:63:77:d0:d5:7b:5a:ad:c0:5a:14:6a:d5:13:
ee:cd:b5:a3:00:07:7e:67:9a:96:8a:dd:f5:e6:03:a3:c3:49:
0f:85:08:ae:f7:a7:b0:21:80:8c:a4:35:e7:45:a5:42:42:08:
61:5f:1f:7e:eb:61:02:8f:5a:13:85:3e:0b:d0:0e:03:01:5b:
22:8a:d0:39:ea:89:bc:6d:96:e3:07:c3:ee:0d:c3:7c:71:90:
71:77:47:2f:cb:54:e7:67:77:7e:c6:73:e1:10:4e:7a:25:40:
57:fc:bf:08:78:8f:85:f8:a6:a4:84:31:bf:5b:dd:7b:fc:30:
b3:ed:f4:f9:18:4a:ea:d5:cf:9a:ef:e0:95:0f:89:30:de:7d:
17:64:d6:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:13:57 2025 by rpki-client