Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: Vj2bO0QrLpPI4EKxnD1yxdPilEZ4WyeH6ogiI9FFtns=
Subject key identifier: 9C:FD:3E:96:DE:1F:01:DD:F2:AE:15:66:71:BF:A2:AC:11:41:4C:27
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 01976960D8160C3B41513D7DC869BCBBCDC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 1590
Signing time: Fri 13 Jun 2025 13:00:43 +0000
Manifest this update: Fri 13 Jun 2025 13:00:43 +0000
Manifest next update: Sat 14 Jun 2025 13:00:43 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: NftNScVmE/b7nGUfZFDEB85FCLxb6AEDaBbGTIVZrKk=)
2: WVDdYi47m-6hf2_QV0K2CVkP7zw.roa (hash: 9WCgzOj2n+hDIFLmZXxef2ObXsI93yW31Mx8FRKIiM8=)
3: _nQyzxD5tzJPLFHKcoFX_hH-tT8.roa (hash: K943OWLrTeetJ5gY0wxowSl9TJP/OQ1YX347sbUwBP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:d8:16:0c:3b:41:51:3d:7d:c8:69:bc:bb:cd:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Jun 13 13:00:43 2025 GMT
Not After : Jun 14 13:00:43 2025 GMT
Subject: CN=9cfd3e96de1f01ddf2ae156671bfa2ac11414c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a7:f0:bd:35:18:b3:f2:ec:53:6b:1a:70:d7:
38:5f:9d:5a:0a:b6:28:22:b4:e7:9b:ce:f9:0c:d6:
75:70:95:45:1c:bb:c5:47:b4:62:29:f1:0e:48:50:
21:7a:92:29:2e:31:4d:6a:68:a0:e7:3d:51:70:10:
ba:ad:29:36:2c:d7:fa:d2:73:6a:e5:c1:83:69:09:
00:d9:88:ff:7c:57:7b:21:a2:31:ad:29:24:22:9b:
c4:33:35:30:3e:e1:58:7c:d5:e1:a9:f9:ff:43:67:
61:be:3d:a8:01:c3:f6:b8:34:5c:4a:bb:9f:b2:3f:
90:79:d2:3d:83:c9:27:cc:91:71:4a:9e:ec:e7:95:
a4:cd:86:8a:43:e7:1d:59:de:94:99:dc:b3:06:7d:
f9:34:32:7c:3a:86:0f:0d:c3:70:6e:84:3a:57:71:
8e:08:f9:4f:dd:c8:fa:b9:51:90:f9:e8:90:2d:3a:
d0:7c:3d:8c:f3:c2:ca:7d:1b:a7:f0:21:15:09:26:
45:8b:54:4a:f3:01:98:29:93:a5:1f:0c:da:68:c8:
b1:c4:57:0b:61:00:46:2b:66:a8:e0:b3:e9:0c:ba:
8b:f1:a1:78:00:91:33:fd:ba:96:60:dd:4f:b2:6d:
4e:d8:af:d6:c5:a2:3a:92:f2:b7:c6:1c:4c:10:2d:
54:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:FD:3E:96:DE:1F:01:DD:F2:AE:15:66:71:BF:A2:AC:11:41:4C:27
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:5a:cf:64:9e:00:03:1a:6e:99:fb:87:b7:6d:4f:17:c7:3c:
bd:ab:6c:54:70:28:70:10:f6:04:6d:1f:c9:ff:64:16:ba:f4:
a1:ee:da:ae:8f:fe:98:0e:95:03:b8:e7:53:12:52:0e:40:c6:
54:d1:86:ff:db:e9:5b:e5:7e:e3:63:c4:63:d8:2f:38:c2:fb:
a4:6b:be:09:6b:ea:1c:68:5e:ea:9d:1f:c4:20:d1:2e:84:8f:
51:7c:04:ab:2f:c9:c9:5d:c9:ea:ad:e6:0d:cd:6e:6e:ab:8b:
b1:f5:22:fb:67:ea:71:76:70:a7:ca:d5:3e:4f:cb:24:7c:2d:
9a:f6:f9:b0:35:84:e0:ab:e0:50:56:0a:d4:c2:fa:43:3c:dc:
5c:db:b6:69:f6:af:e1:ee:84:61:4a:fe:da:e0:f9:f1:07:a5:
70:f2:cd:77:ca:e3:08:d0:1e:b4:16:37:c5:d2:23:fb:5a:b7:
c9:0a:9f:65:d3:43:e3:72:30:76:c7:32:af:c7:0f:3f:78:ab:
ea:80:95:76:b3:e6:4b:aa:b0:49:bb:96:72:cf:cd:b5:50:15:
12:46:1a:4a:43:3d:ee:d7:0a:be:2f:fa:6f:00:4e:80:a2:50:
33:19:b4:83:04:9f:53:49:28:08:6a:b5:0d:1f:61:d0:44:ad:
bd:f8:94:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:00 2025 by rpki-client