Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
File: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft (raw, json)
Hash identifier: AiRwF9BT7X0fDzyN8sBy6N3zWGWMtXEzC+4LnqPpw3c=
Subject key identifier: 28:77:37:F3:38:1A:A4:8E:77:8A:BA:5B:58:C6:BA:8F:4A:6A:4F:67
Authority key identifier: F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
Certificate issuer: /CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Certificate serial: 01976D3E1C8D3019582D7B69362F0972D22A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
Manifest number: 095B
Signing time: Sat 14 Jun 2025 07:01:16 +0000
Manifest this update: Sat 14 Jun 2025 07:01:16 +0000
Manifest next update: Sun 15 Jun 2025 07:01:16 +0000
Files and hashes: 1: 8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl (hash: JlEfYPXcKk5p8Zikptnzh5iMPVfqBhUJy721UbWjBfI=)
2: GZ1s7d54viav3wnjL9leWDPX9XE.roa (hash: havZ3bJj+OM6go5VLxui+205cgsq5mlbJ3gC7fDy5Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:1c:8d:30:19:58:2d:7b:69:36:2f:09:72:d2:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22219eca54ab269c8aab9b0ff416e7293829b59
Validity
Not Before: Jun 14 07:01:16 2025 GMT
Not After : Jun 15 07:01:16 2025 GMT
Subject: CN=287737f3381aa48e778aba5b58c6ba8f4a6a4f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:db:ab:cd:c0:6d:c8:e4:a1:f7:7d:d7:cd:a5:
75:40:94:f6:32:62:24:5c:d6:50:54:c5:08:df:b2:
59:c5:a6:22:12:a9:ba:c1:f2:c5:08:9d:e7:05:6e:
82:0e:cd:a8:b3:81:b8:e8:3c:ff:30:37:a6:ce:23:
02:7b:cb:dc:5f:1b:44:1b:4a:e1:f2:05:c3:9d:e2:
48:e7:19:66:e4:79:82:37:50:27:01:d8:6a:b3:5f:
23:3c:c0:9b:ad:dc:ed:10:2e:7f:5d:f1:3f:84:65:
42:5a:5b:50:dc:63:26:ab:76:0f:32:90:01:10:32:
40:42:71:c3:90:c8:5f:b6:dc:82:f4:3a:4a:90:c5:
cd:80:1d:fc:c1:83:b5:5f:30:23:b1:bd:94:63:1c:
25:05:fb:df:c8:80:73:7e:15:f7:47:1c:ee:17:d2:
d4:2b:44:97:8f:7f:69:43:b4:97:54:ae:1b:71:06:
af:61:a9:8a:df:18:bd:05:a3:16:8f:35:22:5e:e2:
56:df:4b:ec:7f:a2:55:53:2e:f3:c9:3c:9b:ff:18:
1f:85:55:1e:6f:7e:2a:d6:72:aa:13:2d:98:78:22:
94:84:9a:6b:40:52:22:67:c3:d4:84:56:7c:3c:e6:
64:87:9d:1b:34:ab:90:4e:eb:07:96:be:a9:19:fe:
96:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:77:37:F3:38:1A:A4:8E:77:8A:BA:5B:58:C6:BA:8F:4A:6A:4F:67
X509v3 Authority Key Identifier:
keyid:F2:22:19:EC:A5:4A:B2:69:C8:AA:B9:B0:FF:41:6E:72:93:82:9B:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8iIZ7KVKsmnIqrmw_0FucpOCm1k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/cb1467-241a-4bc5-baa6-6f363e83a78e/1/8iIZ7KVKsmnIqrmw_0FucpOCm1k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:34:3a:15:ce:31:e5:2b:7a:d2:f2:73:b6:da:fa:5e:27:47:
e3:67:c8:56:c5:be:9d:d8:49:17:97:56:2b:e3:1e:1c:1a:a4:
56:b2:88:ff:c1:7d:eb:c5:3b:e3:05:fe:bf:ec:58:f7:84:e4:
8c:fc:0a:ca:dc:b8:0c:b5:5f:7f:61:cc:ff:47:b7:28:af:44:
15:eb:19:47:9b:7a:12:db:bd:ae:d4:9f:0a:22:8d:ef:2b:3b:
2b:99:1f:82:eb:4c:9c:f4:f3:45:f7:f1:bc:b6:76:d4:df:2f:
f3:3f:58:9b:a6:89:6d:a8:e8:f1:09:71:cc:e8:47:25:b7:1e:
c0:46:2b:5c:77:99:5f:65:72:c3:38:2f:00:aa:f4:ee:e9:ae:
60:9e:8e:22:95:14:ee:37:da:5b:13:bc:cb:a5:c4:40:18:c3:
01:b1:96:69:99:22:17:c9:ce:e1:86:03:69:ff:af:10:5e:e4:
51:51:f9:76:47:f0:d5:07:7e:41:3f:4b:31:66:56:e6:a1:6a:
5a:6f:5d:3a:70:76:03:b1:f2:a0:81:53:b6:03:c8:7f:a5:06:
16:86:75:e1:13:c8:f1:5a:b6:2e:02:61:a4:1d:1d:0c:3a:d1:
86:7c:e7:63:a7:b6:1f:6f:ab:71:d5:0c:9e:29:30:cc:27:31:
09:77:65:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 12:59:33 2025 by rpki-client