Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier: eGj/ZpsZpf3VnrOH1OMW02GidfZtx8PbsG2CCBSR8ts=
Subject key identifier: 71:91:BC:E5:CF:0B:1B:68:D9:B4:40:6D:E7:F1:4A:EA:E2:2E:DD:E4
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 01977609861A06D7CD8BDF7F964181448A7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number: 15A2
Signing time: Mon 16 Jun 2025 00:00:25 +0000
Manifest this update: Mon 16 Jun 2025 00:00:25 +0000
Manifest next update: Tue 17 Jun 2025 00:00:25 +0000
Files and hashes: 1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: 231VHU0GCKfHli9vtBF6cNoSPi/vS/rSAwVe98CXpJM=)
2: OnZ1oDUkGHXt8p5LFZr7iXHIj2U.roa (hash: /DcdW9UyVs0Pozfbw9Y31s/RNRP7VGPFkHtsuWsMDGA=)
3: ae03YOkS1ofM34wdhj2KqmDyBno.roa (hash: urHsIcZ4xBvpG+piPTKwb+t4LjinRiEgOkguvBfEZMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 00:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:09:86:1a:06:d7:cd:8b:df:7f:96:41:81:44:8a:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Jun 16 00:00:25 2025 GMT
Not After : Jun 17 00:00:25 2025 GMT
Subject: CN=7191bce5cf0b1b68d9b4406de7f14aeae22edde4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:25:ff:68:0f:e0:b0:65:0f:e6:19:e4:d0:1b:
7b:6c:71:34:ac:30:dc:85:40:e0:02:f2:52:3b:9e:
81:a7:17:42:9b:14:00:1d:c6:71:d7:19:b5:fd:14:
af:ec:10:09:89:33:fc:e5:40:c9:54:79:74:42:07:
c1:7c:f2:c3:3a:67:af:a7:c9:ad:e1:22:fc:13:c3:
71:4c:51:af:ef:2f:e7:ec:05:23:de:f7:bc:3f:43:
95:8a:e3:44:d1:93:ba:a8:82:f0:a7:86:75:4c:6e:
8f:9f:30:d8:06:fe:ac:48:bf:1e:02:20:e8:82:64:
90:b7:fa:16:b1:c9:22:43:2e:a2:88:51:29:a3:2b:
7d:63:78:79:e3:2d:70:bf:13:fc:c4:d6:81:b5:20:
02:23:5d:6f:30:5b:66:ca:06:dc:09:ce:4d:eb:6d:
43:63:17:69:d3:ae:79:b2:6c:be:50:e7:33:43:0a:
92:3c:a5:87:af:5e:02:d0:8c:10:ca:4b:84:3c:ae:
ed:0b:da:b8:7b:30:20:ac:bc:54:f2:a2:74:a1:d6:
90:d4:81:3e:2c:ad:12:db:29:ad:29:f5:f7:a7:9d:
8c:f2:21:37:f0:f2:ab:e5:10:92:c1:56:28:08:cc:
bc:2e:db:93:cf:4f:f7:22:ef:9a:dc:b7:2c:b5:82:
45:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:91:BC:E5:CF:0B:1B:68:D9:B4:40:6D:E7:F1:4A:EA:E2:2E:DD:E4
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:59:56:0b:1a:44:80:e2:d1:2d:59:11:56:8b:76:1e:7a:69:
48:6a:51:67:c6:7b:18:0e:b7:16:e3:2d:c1:24:7b:98:3c:8e:
5d:49:52:c4:d7:cf:d1:56:d2:8a:ae:54:c0:b4:87:e8:15:9b:
0f:c7:17:db:06:61:82:15:b8:7c:29:97:ce:ae:23:cc:49:60:
b4:24:e7:bf:9a:4c:8d:85:1c:d5:17:fe:28:a5:24:dd:42:aa:
10:8f:58:81:90:75:4e:3c:07:58:3a:2b:a5:2f:00:1b:d8:c1:
99:6d:f9:a4:8d:3c:25:30:a0:b4:85:8a:3b:1a:9d:77:31:34:
de:d7:7e:7f:29:1e:7f:8c:3e:19:1c:9f:f7:13:8b:62:a3:89:
d5:38:e8:9b:b7:ee:01:15:99:53:dc:0a:91:9b:c1:55:03:3a:
bc:62:fd:20:a7:71:a4:22:38:51:28:23:40:eb:30:3e:d5:b4:
5a:00:7d:a9:17:dd:fc:fd:a9:88:2f:98:79:eb:6b:4c:1c:a8:
1b:43:45:18:63:07:cf:01:42:71:5b:9a:a7:2c:45:80:72:7f:
56:d2:8b:70:8d:89:85:87:b3:80:d5:0b:00:d2:a5:0b:69:5c:
6f:8e:68:8a:48:2b:c4:68:98:5a:bb:b8:a6:1c:3e:fb:db:58:
2d:6e:e4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 10:50:16 2025 by rpki-client