Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
File: 8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft (raw, json)
Hash identifier: 6bBh3p4JzJRb/ZKhoBohET3pUG0tcg803gPcCqVRYW4=
Subject key identifier: A0:85:4F:6A:94:1C:FD:28:00:38:48:59:4D:A3:3E:BA:BE:B1:61:26
Authority key identifier: F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
Certificate issuer: /CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Certificate serial: 01976E50A74B49F9509B318BE8CB917737D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
Manifest number: 1403
Signing time: Sat 14 Jun 2025 12:01:08 +0000
Manifest this update: Sat 14 Jun 2025 12:01:08 +0000
Manifest next update: Sun 15 Jun 2025 12:01:08 +0000
Files and hashes: 1: 8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl (hash: WnB+RWg9MLWZJC8RfV6Hr5MavkasUTovG7LDvRAOHFU=)
2: IhBK0ciO53Ec1EbuRK46uaRKreQ.roa (hash: 4ZKr5RNFkrNbbNrdBlZagiUZ6klyQ2uoBXn/MMtAeKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:a7:4b:49:f9:50:9b:31:8b:e8:cb:91:77:37:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Validity
Not Before: Jun 14 12:01:08 2025 GMT
Not After : Jun 15 12:01:08 2025 GMT
Subject: CN=a0854f6a941cfd28003848594da33ebabeb16126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:1f:d9:cc:e5:86:60:67:3f:a8:be:d7:99:ff:
e7:8e:9f:b1:09:15:eb:47:26:ad:78:cf:eb:e5:bf:
5e:45:6a:a9:a2:33:f6:e4:28:23:32:97:28:17:66:
33:85:5f:19:32:57:20:ad:84:8f:6c:c6:0e:7a:b1:
31:61:4a:7b:6c:c9:ce:f3:fe:d2:c3:1f:84:2f:a7:
a2:34:73:68:98:f4:ef:ce:72:16:46:33:45:63:d1:
ea:21:8c:d4:0a:46:4d:a7:6e:75:c2:e9:3c:c3:bc:
be:5c:bf:e4:6c:a1:7c:c2:72:b0:46:72:2b:b3:17:
92:ad:48:af:08:cf:7b:73:b9:6b:0b:ef:d9:fd:62:
29:a7:2e:16:87:30:0b:0a:38:20:ae:f8:cc:f5:d3:
61:88:71:eb:45:fb:89:89:42:66:34:96:9d:2c:17:
b6:b6:47:bb:8f:e5:d3:a3:f9:6d:7c:93:f0:55:5c:
80:27:44:80:9a:0f:f1:2f:94:b2:b8:1a:87:a1:05:
8e:03:2c:d2:3d:e8:0f:05:47:2d:99:d1:7e:b2:a0:
8b:d9:cb:25:f3:1c:88:23:f2:73:fd:77:b5:4c:3a:
9f:20:5a:29:a7:8b:72:9c:1a:e7:46:56:7d:4e:20:
97:e3:3b:b7:50:2d:26:76:d8:c3:a3:3d:f0:43:d4:
6d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:85:4F:6A:94:1C:FD:28:00:38:48:59:4D:A3:3E:BA:BE:B1:61:26
X509v3 Authority Key Identifier:
keyid:F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:73:94:cc:67:c7:02:c3:8a:d0:b3:38:1b:11:40:3f:da:56:
af:04:42:c2:1a:b2:3f:4f:ea:fc:5b:3a:ee:43:a6:19:f1:39:
01:2a:c4:64:79:00:5f:26:14:da:cf:52:ff:60:15:48:6c:01:
88:a1:90:3b:33:67:1a:27:ef:27:19:0b:e3:17:7d:48:42:23:
a6:d0:00:52:f0:05:16:c1:00:5d:e8:a3:c3:3a:b3:5a:1d:5a:
69:75:d0:be:e9:f9:74:a4:0e:e0:e0:fa:ac:92:a4:d6:03:ca:
e1:2a:f4:37:72:67:72:dd:f2:77:31:4a:a4:4c:7a:cc:6f:78:
0d:08:b0:3f:a7:e4:e6:ee:bc:e9:f4:bc:f9:24:6b:28:1c:ce:
5c:bc:3c:e4:e7:1b:c5:2a:0d:65:bf:a0:7a:e3:f7:e0:ee:0f:
5b:0d:71:b9:47:ed:e0:42:6c:19:4c:c7:2c:7f:e1:21:42:18:
86:35:6e:62:55:3a:b4:60:78:c7:87:24:c6:f0:65:2f:47:e2:
39:37:4e:97:aa:7d:a2:87:3f:fc:d5:53:46:62:8f:48:94:4b:
f0:41:b1:5a:9b:80:8c:fc:6f:ae:07:2e:7f:3b:b1:80:3e:2c:
50:19:71:05:20:a4:8e:2e:c4:19:8f:fc:84:09:87:21:39:57:
8c:e2:69:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:22:34 2025 by rpki-client