Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
File: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft (raw, json)
Hash identifier: MDQXxg5GqiWb7LFtci62tapw2zBzg35AwGF6ddxLD2o=
Subject key identifier: 37:F0:16:F2:42:AD:45:E7:B0:9C:78:1A:91:6B:3A:A9:36:AB:94:9D
Authority key identifier: F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
Certificate issuer: /CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Certificate serial: 01976C2B1097174C36EDFEA05CCC85EAECB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
Manifest number: 03EA
Signing time: Sat 14 Jun 2025 02:00:50 +0000
Manifest this update: Sat 14 Jun 2025 02:00:50 +0000
Manifest next update: Sun 15 Jun 2025 02:00:50 +0000
Files and hashes: 1: 8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl (hash: mEU1F78QHJD296w0xJ8v4s+bXw6Cm1CBUeJsk0LvYrQ=)
2: i40en23OGg_DEWIRxhMGmgEox1s.roa (hash: iWUkdAfgE1mLIKUO/1DuqvBR2l5IncPfNwSFVOKSJKY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:10:97:17:4c:36:ed:fe:a0:5c:cc:85:ea:ec:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03ed4fedf56d0b02b172c8f89ec376510cd3174
Validity
Not Before: Jun 14 02:00:50 2025 GMT
Not After : Jun 15 02:00:50 2025 GMT
Subject: CN=37f016f242ad45e7b09c781a916b3aa936ab949d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:49:ae:cb:22:cd:07:22:dc:14:f4:5f:f3:aa:
e2:59:81:f5:da:02:c3:6b:88:44:cc:ba:6e:f3:10:
68:b5:d2:7c:d1:f5:27:50:91:3b:7c:25:d0:38:f0:
d9:b8:c4:03:fe:f4:b8:51:6f:4c:8e:9e:59:7f:20:
b0:97:2d:ef:56:0a:13:3e:69:48:5f:df:f4:78:aa:
42:1a:13:d3:02:30:ca:9b:fa:37:d2:e9:29:f6:a6:
66:07:6c:b1:26:fb:33:bf:e2:98:9b:73:10:63:70:
22:38:a4:31:de:20:51:fe:ec:b6:84:50:19:aa:6e:
7e:1c:a3:40:14:3f:3a:c8:b3:cd:12:3e:33:bd:aa:
b4:f1:1e:38:a9:37:3d:e3:92:29:a1:59:9b:67:4b:
5a:60:53:de:a9:7b:34:bd:5d:ea:6a:52:53:f9:28:
49:9b:02:df:31:88:08:68:3a:fa:6a:c9:9a:eb:ac:
52:8b:26:14:c2:44:cb:4f:e5:bb:0e:b8:7b:66:7d:
7c:fa:4f:2b:72:d8:c1:32:72:b2:4d:8e:38:d0:24:
69:e2:17:23:36:17:5d:00:85:d0:43:fc:88:2b:bc:
c5:fb:bf:ff:19:45:97:b5:19:9c:b5:04:17:c8:f0:
76:71:78:a4:a1:a4:5d:f1:03:bf:e9:f9:1a:39:55:
14:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F0:16:F2:42:AD:45:E7:B0:9C:78:1A:91:6B:3A:A9:36:AB:94:9D
X509v3 Authority Key Identifier:
keyid:F0:3E:D4:FE:DF:56:D0:B0:2B:17:2C:8F:89:EC:37:65:10:CD:31:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8D7U_t9W0LArFyyPiew3ZRDNMXQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/e63950-76e8-4f2b-8731-fb4fd07e26a0/1/8D7U_t9W0LArFyyPiew3ZRDNMXQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:72:02:59:06:3e:15:c1:98:d9:32:b5:7c:7e:a3:28:7d:de:
77:07:9e:a2:26:b6:7c:d8:3a:d3:c9:78:4c:9a:fb:91:05:cd:
52:3e:a9:bf:f8:d1:62:a4:c6:40:c3:77:db:29:82:26:31:33:
0e:84:e8:99:73:bb:88:40:63:08:23:11:68:f4:cb:32:57:ff:
20:3f:cc:44:89:87:e6:9f:1a:ce:e0:95:0f:2b:f1:a0:27:e6:
e8:88:fc:93:82:87:1b:a7:2b:61:ed:1e:91:8c:a2:d0:ab:36:
a0:c5:b6:b2:d3:5d:83:f5:59:3d:56:a8:3e:08:39:44:78:9e:
75:42:18:f3:e1:58:9d:ad:4c:6f:9a:4a:e0:b3:51:2b:11:52:
38:c2:ef:d6:e8:c7:a8:50:5b:74:97:f7:ad:bc:9f:49:50:8a:
f2:22:6c:13:8e:26:a0:a1:64:73:11:9c:20:3e:54:69:00:3a:
70:aa:ab:3f:7b:dc:d4:7f:93:33:99:fa:41:e0:f5:fa:43:f8:
33:a9:c7:e2:69:41:8d:b6:ae:30:5c:33:06:4a:4d:47:79:3e:
25:10:30:78:1c:97:90:75:2c:bf:c5:82:fd:c1:7d:52:b5:fa:
c0:e2:e7:ad:cb:27:a8:46:14:c9:2e:ac:11:cd:24:b1:20:99:
f4:aa:e3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:16:45 2025 by rpki-client