Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: D4b/1Qg6fbIS+S8fuSVRUC6ns7E3Au4maNuxIDVrKbI=
Subject key identifier: 21:55:32:1F:05:DE:33:B0:D3:7C:75:EE:5B:D1:09:D0:4A:A1:4D:70
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 01977007A7D075836438DE1D52432C1BFB5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 103A
Signing time: Sat 14 Jun 2025 20:00:39 +0000
Manifest this update: Sat 14 Jun 2025 20:00:39 +0000
Manifest next update: Sun 15 Jun 2025 20:00:39 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: iNoeUQTi2Nh/IY7hWAUSA3usGwN+ZQiL303zVUBV0eI=)
2: mre0Sbb8szBBX4GresgiiwdF634.roa (hash: KGpatw4GtK16xXPbD1RSTnF7RbGtyhCDwaJXsQ0f2K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:a7:d0:75:83:64:38:de:1d:52:43:2c:1b:fb:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Jun 14 20:00:39 2025 GMT
Not After : Jun 15 20:00:39 2025 GMT
Subject: CN=2155321f05de33b0d37c75ee5bd109d04aa14d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2a:41:52:b9:c8:cf:56:09:b3:0c:b1:19:f2:
1b:9f:1e:fa:26:5d:f7:2f:9f:04:f0:a0:4d:7b:fb:
02:ff:62:72:a5:01:67:05:29:fa:f0:2c:05:65:c3:
d2:c0:5d:67:7a:97:0b:a6:ba:78:5c:fc:ac:fc:f4:
7c:09:ae:e0:96:79:09:f7:bd:4f:00:f6:aa:c7:bf:
0b:57:4b:98:90:fc:5a:fa:83:d5:db:38:18:0b:46:
38:39:3b:9a:0a:89:99:c2:e0:cd:30:f9:25:0b:3f:
c3:54:1a:a6:de:3f:05:f4:0b:d9:80:10:35:f8:db:
bd:a8:57:d4:39:4f:e1:f3:fb:65:02:ee:10:29:4d:
f7:3f:6f:c9:82:a1:77:9a:fb:34:c0:62:d1:7f:1d:
cb:79:b2:7a:8b:15:b1:72:17:e1:09:3b:e2:59:9f:
24:b8:22:ce:01:2c:02:8e:9b:de:a4:07:12:82:dd:
6f:cd:af:9e:04:0e:61:b9:0b:e6:a5:c5:19:e6:ce:
97:54:5c:81:00:4b:3d:84:29:13:ba:eb:b8:0a:bd:
d9:62:9a:7a:53:9d:2d:b4:12:f9:c9:bf:58:48:d7:
fe:45:df:ba:cb:73:1f:63:78:21:e8:7e:f3:77:93:
fb:92:da:d1:e3:03:6b:14:cb:cf:c4:b7:61:a6:ce:
30:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:55:32:1F:05:DE:33:B0:D3:7C:75:EE:5B:D1:09:D0:4A:A1:4D:70
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:35:48:4c:87:17:16:e0:33:0c:25:9e:d2:3c:a0:3b:f7:cc:
e8:5c:67:29:7a:c2:33:d9:29:d3:b5:5c:3e:47:c3:66:a1:39:
a3:bf:38:45:17:a1:a4:48:41:f1:df:30:26:06:04:a2:5a:ec:
8f:9e:18:f2:da:89:fe:29:d4:f7:e1:b2:a6:ab:34:a5:9e:77:
e5:ba:b0:ae:b8:57:d5:76:6a:0b:d6:4a:ee:c2:9a:41:2c:aa:
54:90:c2:92:7f:e2:ad:1c:4c:f1:25:b4:07:dc:b4:55:63:fc:
46:ad:62:06:e1:75:49:b4:b3:c7:ff:36:21:bb:58:ee:cf:22:
63:15:7f:66:39:64:26:31:9e:1d:c6:b6:9e:30:5e:96:1c:1f:
27:9b:49:e3:b6:d0:de:ad:8c:26:c9:a4:60:36:9f:d9:ca:9a:
b0:5f:81:01:a5:c9:63:cb:fd:7f:5f:ac:b8:ab:c7:94:f4:8f:
68:19:08:ef:a0:4b:70:a5:79:ca:95:9f:ed:be:ea:e1:58:08:
17:91:e9:63:2a:db:62:52:49:1b:f0:1f:49:24:5a:72:8b:6e:
8d:d1:b6:20:ec:51:86:fc:fd:a5:e2:e2:29:07:73:1a:db:50:
b8:75:6f:17:d7:ea:2e:f0:ab:e5:f6:95:45:d9:07:e3:22:ee:
66:b0:00:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 22:51:10 2025 by rpki-client