Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: kMk0zOUNMHWbS6gZM6mU03MnwBn8qqQ9tadMq22LswI=
Subject key identifier: 31:06:3B:6D:F1:66:0B:F9:1A:8F:CE:1C:E0:AF:03:39:4F:42:8D:03
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 0197838E3D91A89BE010ED28FD568278F804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 0E5E
Signing time: Wed 18 Jun 2025 15:00:26 +0000
Manifest this update: Wed 18 Jun 2025 15:00:26 +0000
Manifest next update: Thu 19 Jun 2025 15:00:26 +0000
Files and hashes: 1: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: 4zAABtAnFP+U3zBzuB7NGjK/uBKN4DLxGswQXc2nMoY=)
2: FSVMQ4pJCPFoKLSJXQ6SN5sd20I.roa (hash: fn+/BnxEhFcy9tBiYyHkUVxuspdk8dmiFltXF8v88aI=)
3: tEflzcf84YeIQ7wQhAU1KUgL-Vw.roa (hash: 4tBHDD8ccamGIZtMNBVAmE3bow4OuhCBji726kCuMPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 14:10:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:8e:3d:91:a8:9b:e0:10:ed:28:fd:56:82:78:f8:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Jun 18 15:00:26 2025 GMT
Not After : Jun 19 15:00:26 2025 GMT
Subject: CN=31063b6df1660bf91a8fce1ce0af03394f428d03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7e:1b:87:d9:a0:05:fa:cc:86:15:d6:25:23:
52:01:c9:cd:b6:63:12:19:53:2d:6d:d9:79:38:9f:
2c:68:5a:a7:a5:55:54:d4:4a:59:f2:d2:2d:d8:18:
a5:05:ea:13:60:40:3e:4b:71:17:50:8e:59:89:5e:
95:6c:f9:eb:1d:d9:93:80:a7:c7:24:53:2f:55:93:
b1:84:1a:7d:e7:33:55:e6:08:65:9c:0e:f3:10:0a:
be:e8:7f:be:32:ad:e5:d6:3e:db:93:64:22:e0:0c:
45:57:54:76:22:ce:7c:b3:19:ee:55:5e:2e:f4:1b:
47:8b:98:5e:77:ec:5e:60:85:02:e8:0a:e8:79:7a:
ed:88:cd:68:bf:93:48:6e:78:11:6f:8f:3a:0c:97:
5a:a9:5a:0c:33:f4:8c:f5:56:22:e1:94:8b:33:ec:
cc:84:31:d7:0c:f8:eb:32:aa:cc:d6:2b:49:4a:70:
f4:b1:83:64:36:b5:9a:da:3d:03:96:bd:9a:f4:4a:
10:a3:80:21:a9:c3:14:13:c9:b5:05:2b:44:77:3f:
f2:e7:81:b1:01:06:de:c3:d3:cc:20:a4:b0:4c:07:
83:af:17:0c:92:0d:7a:22:c3:b3:c7:15:a3:d9:2e:
8c:1e:d9:37:a2:7b:31:28:4e:86:c4:98:8d:d1:6d:
72:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:06:3B:6D:F1:66:0B:F9:1A:8F:CE:1C:E0:AF:03:39:4F:42:8D:03
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:d3:22:21:06:f6:ed:d6:5c:36:20:8f:88:a3:af:ea:8e:9b:
6e:1d:7f:3d:01:bc:ab:07:d5:65:5c:a5:9d:ad:37:c3:77:e7:
c9:2b:1d:f3:e1:e8:b2:56:ce:0d:6c:31:ed:db:8e:13:89:76:
7a:ee:4c:a0:99:16:90:be:0e:ac:33:c5:41:35:16:e0:f5:3d:
43:35:be:ba:80:05:2f:76:ff:e9:30:ce:8f:53:ff:1e:88:d8:
e7:71:24:67:40:e3:ec:c0:77:e5:5c:01:64:72:41:91:29:3e:
c9:4d:fe:fb:f0:07:d5:f4:be:64:12:f9:d0:b5:51:04:59:ff:
d0:0d:7d:24:c1:7e:b3:5c:a1:72:94:a6:55:88:2e:f8:7d:34:
1a:ff:8b:c5:70:2f:d9:71:e9:b3:81:36:60:fb:79:9b:21:96:
0c:e5:a5:07:ef:3b:f4:b8:2e:86:c0:31:eb:9b:19:57:70:cb:
5b:8c:c7:29:6d:26:e1:61:74:85:e4:36:a2:41:54:cb:1f:74:
34:11:52:a3:50:09:16:d3:2a:58:b1:14:63:4d:65:59:5d:90:
f3:be:d6:1e:7c:54:2a:95:fa:48:8e:e3:1d:16:7c:19:c7:02:
79:f4:f3:97:81:69:dd:a6:80:41:a8:5f:c3:5b:fd:87:84:6c:
a0:ea:a8:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 18:16:28 2025 by rpki-client