Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
File: 8x6drOnnIGMJy2yeW4YX6YWd3IU.mft (raw, json)
Hash identifier: /lfiRgMijpFYwmHcGU2hRRQQWExYaTfN177nRPD+Xis=
Subject key identifier: BF:B1:1E:79:A2:E7:E0:A7:7E:26:FD:B8:EB:DE:D6:E3:46:DB:5E:EB
Authority key identifier: F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
Certificate issuer: /CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Certificate serial: 019769CEB2269A43C959DAA67C52F49AF0D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
Manifest number: 4D
Signing time: Fri 13 Jun 2025 15:00:43 +0000
Manifest this update: Fri 13 Jun 2025 15:00:43 +0000
Manifest next update: Sat 14 Jun 2025 15:00:43 +0000
Files and hashes: 1: 8x6drOnnIGMJy2yeW4YX6YWd3IU.crl (hash: A1gLO+HN62pHY2677v8ZtKI1iT/5qJmvQ2w8H29ALiM=)
2: Y_V2AX-hKmiZJha1bvfVKTCTgXI.roa (hash: D45qS/LlK8mwdIW6eNsRENlHm2CkkbRz9HSr40lXt7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:b2:26:9a:43:c9:59:da:a6:7c:52:f4:9a:f0:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Validity
Not Before: Jun 13 15:00:43 2025 GMT
Not After : Jun 14 15:00:43 2025 GMT
Subject: CN=bfb11e79a2e7e0a77e26fdb8ebded6e346db5eeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7f:e2:4d:75:de:17:73:fb:a3:5c:0e:e2:32:
95:ae:d5:fb:db:10:98:2f:26:ea:4c:1d:59:0f:8c:
9e:c5:28:6b:a9:65:07:c6:c7:5d:ce:09:c3:48:51:
c3:ff:8f:8e:3c:d8:e8:98:1e:10:bb:6e:5d:fd:a2:
3c:73:96:ab:4f:0d:7e:fe:82:de:94:08:a5:2d:f9:
01:2c:5d:93:dc:6d:49:21:f8:00:ff:59:b3:09:cd:
9f:fb:d2:0e:e2:f1:28:65:57:84:c5:8a:c4:96:13:
ee:67:08:29:0f:6b:63:c8:af:5f:83:18:a1:d2:3e:
1e:23:64:86:29:13:55:f4:e7:20:61:c7:ce:c4:ec:
d9:7e:eb:c5:fd:ef:92:89:d2:e7:2d:e8:5b:b9:6e:
6e:97:36:a8:b8:41:1a:8b:1a:f7:8f:74:f2:fe:34:
f5:66:b9:ce:55:ca:85:76:74:36:a1:d8:a9:58:54:
d1:45:25:86:e5:3f:5d:48:02:37:79:b3:e3:ea:6d:
a6:0a:3c:4a:d1:95:95:e5:20:99:1c:65:8f:a8:c2:
90:92:0b:b7:34:f8:7b:62:44:d1:04:be:6e:15:89:
0b:9c:47:3b:c9:b7:c9:f5:d4:4c:de:e1:c4:dc:ff:
4f:ac:57:ae:41:37:11:b5:0d:d8:53:55:58:c9:c9:
7c:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:B1:1E:79:A2:E7:E0:A7:7E:26:FD:B8:EB:DE:D6:E3:46:DB:5E:EB
X509v3 Authority Key Identifier:
keyid:F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3e:ed:2d:68:01:62:af:52:e1:f2:77:62:38:7d:78:6a:b6:
47:fc:00:9b:44:e4:59:df:f4:d6:fc:dd:59:70:f8:0b:bd:36:
83:29:38:af:2a:4c:f5:c5:5b:ba:99:70:57:15:f8:72:d9:7f:
87:1f:82:de:78:62:e5:d7:e5:01:f1:7a:d3:68:d0:d2:6c:d3:
8f:05:ff:52:d9:08:6e:fa:95:84:47:89:83:cb:6f:fd:aa:dd:
bd:83:be:9c:9c:88:73:32:2b:9a:74:ec:4a:65:5a:f8:f0:ec:
42:cc:5f:fd:f2:9d:f1:c0:4f:b6:6d:07:97:b5:b3:1b:81:c2:
97:41:5f:98:a1:1a:4b:74:9e:87:2e:c9:06:19:24:76:c9:1a:
2a:a3:1f:c1:9b:30:ba:d4:96:27:7e:9e:ba:97:77:4b:2f:5a:
87:9b:c9:12:ed:82:58:94:83:09:ef:ff:a2:5e:02:70:63:ef:
ac:6c:7f:00:ca:e8:77:0c:a4:10:0b:08:3e:3b:c0:31:d0:6c:
8e:9f:43:18:0d:72:40:71:46:dd:a3:af:4a:aa:71:c9:b9:4d:
9e:53:a8:63:db:cb:16:9f:c4:c9:83:7d:db:5f:f8:4b:dc:95:
e5:b3:27:3d:b1:63:f0:06:65:05:db:ee:d6:22:af:fd:69:46:
aa:e1:34:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:05 2025 by rpki-client