Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
File: 8iL76FrkCNN3shfU66eziyS69d0.mft (raw, json)
Hash identifier: Th3/YQT4RWHLPePavDj8geYIy0xHMICWYGYSTr3qEWo=
Subject key identifier: 8A:2C:42:CC:82:0F:09:40:9B:36:CA:72:B8:EF:30:7F:FF:7B:0E:49
Authority key identifier: F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
Certificate issuer: /CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Certificate serial: 01976E50203077FE907824E132FB43DE20D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
Manifest number: 0C3F
Signing time: Sat 14 Jun 2025 12:00:34 +0000
Manifest this update: Sat 14 Jun 2025 12:00:34 +0000
Manifest next update: Sun 15 Jun 2025 12:00:34 +0000
Files and hashes: 1: 5-tO1DtUPdvn-gHncHuAbgt6OiM.roa (hash: L6Z02H1tfyOJ9fsH+lsAomG7wfqgJlWMWjJh/1Ka9SI=)
2: 8iL76FrkCNN3shfU66eziyS69d0.crl (hash: nDJYiul2tUxy+iimLGIAn2hrKymUyF/Nt3QWv5zoz9Y=)
3: gPE9V0tO8JPLDv8MCZH-UuWvdnQ.roa (hash: 5qjlUc3/t7psPBo135Wzs5OYxrc/B+KKSYzn0gcEaGk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:20:30:77:fe:90:78:24:e1:32:fb:43:de:20:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f222fbe85ae408d377b217d4eba7b38b24baf5dd
Validity
Not Before: Jun 14 12:00:34 2025 GMT
Not After : Jun 15 12:00:34 2025 GMT
Subject: CN=8a2c42cc820f09409b36ca72b8ef307fff7b0e49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4a:16:15:7f:71:38:53:8b:7d:49:58:4e:69:
ea:3a:87:f2:88:06:93:0b:e8:a3:a8:2c:3e:5d:6c:
45:a2:92:4f:39:30:af:50:84:e5:40:29:5e:62:42:
03:17:e0:c6:ab:5d:ee:53:aa:85:7e:47:21:48:28:
7e:4c:a7:03:a7:13:51:67:d9:5e:0b:28:8c:6a:30:
86:c2:d1:89:ed:80:2a:5c:13:81:55:e2:08:e4:7d:
70:1a:8c:10:9a:d3:4b:a0:d6:64:92:df:48:e2:23:
d5:28:79:53:8d:da:df:d3:4a:ab:47:0f:bc:dd:ea:
a7:66:20:ac:3e:93:f6:a0:f6:74:71:65:8e:5a:80:
3e:54:81:03:89:fb:23:6b:bf:d6:2b:23:a8:9a:e2:
c6:b2:12:4e:9e:d7:b8:75:85:ed:e0:11:63:bd:88:
7b:55:2c:93:2a:2c:1c:c2:3b:3d:da:c8:8a:5c:26:
4c:84:8b:ff:e5:e4:0b:78:35:41:f6:b3:83:20:13:
b2:0f:b8:49:c5:29:ab:ec:1f:d2:f1:0e:5f:f4:2f:
eb:db:bd:63:58:95:5d:db:a5:e5:b5:b3:23:db:03:
6d:54:7f:83:d2:f7:fb:92:94:f2:01:29:02:3b:b6:
4a:0b:0a:6c:82:14:f6:06:f5:cb:eb:3d:36:c7:9a:
4f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:2C:42:CC:82:0F:09:40:9B:36:CA:72:B8:EF:30:7F:FF:7B:0E:49
X509v3 Authority Key Identifier:
keyid:F2:22:FB:E8:5A:E4:08:D3:77:B2:17:D4:EB:A7:B3:8B:24:BA:F5:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iL76FrkCNN3shfU66eziyS69d0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1aa875-03b5-4c17-bb39-b0c1e3304e74/1/8iL76FrkCNN3shfU66eziyS69d0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:cd:b1:51:a5:87:5d:09:76:5c:94:f5:d8:85:2e:c9:6a:e4:
bf:c6:1b:f5:c0:ea:45:c8:ee:1d:d4:75:1e:2b:ad:65:34:a7:
55:fb:ca:42:9d:cd:10:72:ae:09:95:29:c1:38:4e:2f:c1:0d:
6c:56:da:6f:06:9a:a2:4c:a9:fe:e8:9d:79:86:09:00:fa:df:
7d:b5:a4:ce:cd:72:c8:7f:64:31:1f:2d:36:08:0c:4b:7a:76:
06:7c:0f:77:1a:84:69:b7:b8:06:25:55:41:3a:18:0b:47:b8:
a9:81:17:b6:44:aa:a5:d3:62:2b:6a:93:f4:c2:22:dd:43:29:
bb:bc:b4:bb:d9:38:bd:9e:81:24:00:02:97:b0:0b:e8:fe:11:
50:bf:ad:e0:b8:cf:bd:2f:cf:71:d4:96:cc:f2:30:bf:ea:27:
93:74:44:6a:74:e1:f4:94:74:ca:fa:12:66:15:62:de:b6:a9:
fc:d5:09:f1:51:f7:fc:ea:ee:1b:2e:27:36:e5:dc:3d:de:8f:
80:73:0b:09:30:bb:81:fb:77:cd:e3:4e:a2:e7:cf:d0:62:86:
ab:22:eb:27:3c:33:91:4d:d7:b3:34:64:12:b7:27:98:50:2e:
17:5c:61:9d:1d:f4:93:37:0b:96:1e:57:0a:4c:8b:13:65:30:
41:9d:d7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:47:46 2025 by rpki-client