Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
File: i024ekl6Fbp5pwbRLukExESdG1U.mft (raw, json)
Hash identifier: rAKeW+rsHH2N0mpurEH0ca22PtlsYY+qVHtINiLhTzA=
Subject key identifier: A0:92:28:2F:4A:EC:D4:04:42:82:EB:2C:D9:F9:BE:67:C5:94:B3:50
Authority key identifier: 8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
Certificate issuer: /CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Certificate serial: 01976BF3E57E432BE0F0C9CF9271F00AC94B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
Manifest number: 3C
Signing time: Sat 14 Jun 2025 01:00:35 +0000
Manifest this update: Sat 14 Jun 2025 01:00:35 +0000
Manifest next update: Sun 15 Jun 2025 01:00:35 +0000
Files and hashes: 1: Mf_fXP2jPHVmLONdZ1xYPtuNu7Q.roa (hash: LOr2gDDIVLXiBV/jZXlGLfpc3s69N4tqrkcfM7qBuoA=)
2: i024ekl6Fbp5pwbRLukExESdG1U.crl (hash: 520lsTM0OJsL+PMLK0A4z0WEBCWyXdn43gqLn8J9fcc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f3:e5:7e:43:2b:e0:f0:c9:cf:92:71:f0:0a:c9:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b4db87a497a15ba79a706d12ee904c4449d1b55
Validity
Not Before: Jun 14 01:00:35 2025 GMT
Not After : Jun 15 01:00:35 2025 GMT
Subject: CN=a092282f4aecd4044282eb2cd9f9be67c594b350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:df:3a:fc:1d:01:94:d0:67:62:23:3a:74:aa:
81:34:75:00:cd:44:08:74:b4:bf:8d:4f:b5:75:b1:
88:cc:38:d9:67:53:fa:4d:c1:ad:58:5b:63:48:84:
8a:2d:9d:2e:bc:f0:1a:5c:c2:d7:9b:b4:80:05:db:
a2:24:03:75:20:d4:dc:1a:52:c9:c9:fd:98:ef:8c:
5f:e9:0f:e7:dd:79:ac:6f:b1:65:70:b9:8e:db:41:
ab:a7:83:a6:a3:a2:0b:21:fc:d1:35:ec:28:e4:7b:
f1:c6:fa:6f:d7:be:e3:8e:ef:53:4b:18:48:00:7f:
00:05:07:f2:a6:af:03:9f:85:58:b8:ce:33:7d:0a:
c7:ea:d9:ef:67:7f:82:98:0a:1a:8d:28:47:6e:e0:
7f:1e:41:70:72:23:98:3d:48:95:12:3f:b5:5a:09:
3e:36:5e:49:f8:95:16:64:c9:36:8d:b8:75:44:57:
9b:cb:c7:84:f9:4e:51:2c:79:8c:9f:32:49:09:a4:
3a:e8:89:c7:dd:5b:69:53:5e:87:c8:d5:21:5f:e6:
06:82:47:ac:02:e2:1d:9c:53:2f:06:70:9a:ce:01:
9d:2e:42:7e:a1:5c:62:43:d5:29:6c:53:64:3d:bf:
13:52:4c:d8:88:77:b7:ec:80:d5:84:91:85:bd:3e:
11:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:92:28:2F:4A:EC:D4:04:42:82:EB:2C:D9:F9:BE:67:C5:94:B3:50
X509v3 Authority Key Identifier:
keyid:8B:4D:B8:7A:49:7A:15:BA:79:A7:06:D1:2E:E9:04:C4:44:9D:1B:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i024ekl6Fbp5pwbRLukExESdG1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d814b4-02b1-4fb3-acef-1601d41fdc1f/1/i024ekl6Fbp5pwbRLukExESdG1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:e5:8e:3f:98:50:ac:1f:11:2c:b2:af:6a:9e:4a:5b:80:63:
6a:9a:e8:1c:25:f2:4e:86:05:75:87:7d:68:08:84:45:0f:fe:
47:f8:de:50:8c:60:3c:5f:2d:50:da:93:9f:60:b7:fe:2c:50:
5d:05:08:ef:02:1d:05:93:d4:50:a7:5e:7d:b0:cb:b7:05:e1:
cd:84:2d:ea:15:72:9a:60:c5:b5:1d:fb:d9:f3:ee:13:88:be:
c5:a7:9f:67:a1:14:69:13:1a:5c:4a:aa:28:31:e1:8e:85:52:
be:32:dd:af:3b:82:e0:7d:c4:81:ff:4b:44:bf:ef:05:3d:75:
c3:6c:cd:8e:78:bb:34:70:5a:2d:85:1a:2a:46:be:6e:af:bd:
10:1b:71:f9:a4:e9:9d:33:03:3a:0e:e3:b4:a1:32:28:74:aa:
ab:7e:09:20:1c:75:12:c0:25:d2:37:59:7d:62:d2:29:8e:3d:
74:d6:fd:30:df:5b:49:84:12:a8:0d:8b:d6:1e:fa:94:88:c5:
0a:b4:2d:9e:02:7b:28:6b:bf:76:90:25:9c:0a:88:7b:22:1d:
c2:c4:b1:d8:ca:af:b3:5a:50:55:9b:8e:77:96:72:cd:9f:8a:
60:0e:ac:ea:44:45:9c:d8:9b:7e:b6:d5:e7:54:27:95:ef:87:
f7:46:88:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:13 2025 by rpki-client