Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
File: 8oB_KA2plWnsokNGur6dyFrBMkA.mft (raw, json)
Hash identifier: t0iI9WEPTLbJp+kHkPVeMqcKgicUNQOdZVpmnI6EROc=
Subject key identifier: 78:50:84:50:97:F9:06:FB:F7:05:18:96:EE:2D:B9:A9:09:D6:AE:F3
Authority key identifier: F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
Certificate issuer: /CN=f2807f280da99569eca24346babe9dc85ac13240
Certificate serial: 0197B77C25BCCAEEB4B1CA5EAB761D33B0F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
Manifest number: 10F7
Signing time: Sat 28 Jun 2025 17:00:56 +0000
Manifest this update: Sat 28 Jun 2025 17:00:56 +0000
Manifest next update: Sun 29 Jun 2025 17:00:56 +0000
Files and hashes: 1: 8oB_KA2plWnsokNGur6dyFrBMkA.crl (hash: G5ZuqN8eFL5lGpKrpIiDiPMVEI0uIlZq4jqnYacHeJY=)
2: RxiVRcsHeclsIn7rqDibVKMm4qY.roa (hash: RdPDIHwu5UxKtKljTR4KLIRVl+B3RPcwmBVzbEhliKU=)
3: n1BFonHtDGvA8w45LaQUVIMy610.roa (hash: UPpZGSFwSh5u0Vmh3TPpTDA5brKnQclTUnn56OlMfIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:25:bc:ca:ee:b4:b1:ca:5e:ab:76:1d:33:b0:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2807f280da99569eca24346babe9dc85ac13240
Validity
Not Before: Jun 28 17:00:56 2025 GMT
Not After : Jun 29 17:00:56 2025 GMT
Subject: CN=7850845097f906fbf7051896ee2db9a909d6aef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:9a:5b:ce:f3:65:ab:01:15:59:82:34:87:80:
24:20:4c:15:6e:05:ce:32:80:40:8d:3a:03:d6:6c:
dc:c3:56:ca:89:0d:de:5e:72:f9:ba:02:d2:0b:f9:
07:c4:10:55:97:28:fa:b0:70:76:6e:b8:5d:10:c8:
39:18:ac:87:46:87:ac:33:ff:05:11:3f:20:71:97:
f3:1e:ef:46:08:a8:12:78:64:23:d4:b4:18:fb:ee:
8e:81:e0:1d:bb:e7:45:b4:ac:82:9a:12:c4:21:d9:
b7:29:bb:bf:2b:ab:b3:6e:45:c6:d4:d1:0d:cb:dd:
f9:88:7b:f2:05:75:62:56:84:57:c2:ea:28:e5:7e:
de:23:5b:64:89:a7:62:16:c5:fc:31:3f:17:fe:c4:
28:a7:fa:ff:12:04:38:50:58:65:05:e2:b6:0d:73:
71:e7:58:ee:d3:ba:82:c0:f2:c5:0c:12:6b:59:39:
93:76:d5:04:d1:27:3d:07:7e:36:4e:33:6b:58:62:
77:f5:df:96:12:fb:ed:15:0d:22:a2:81:0c:0d:31:
cd:c6:bf:e1:d7:31:b1:49:89:6e:11:3c:f6:e5:9f:
57:c6:6e:08:86:4f:41:6a:30:2a:b8:34:33:b8:4d:
35:b1:a1:68:03:8b:7b:b3:73:ba:15:df:eb:63:18:
7a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:50:84:50:97:F9:06:FB:F7:05:18:96:EE:2D:B9:A9:09:D6:AE:F3
X509v3 Authority Key Identifier:
keyid:F2:80:7F:28:0D:A9:95:69:EC:A2:43:46:BA:BE:9D:C8:5A:C1:32:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8oB_KA2plWnsokNGur6dyFrBMkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/7b0a85-9677-4d03-afb6-a9faf6a26426/1/8oB_KA2plWnsokNGur6dyFrBMkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:a2:dc:7b:2f:90:3e:c7:59:22:a0:2a:b4:2a:f7:0f:b2:1b:
5e:98:42:4a:2c:6c:85:a8:29:c3:9f:f7:a5:e6:d7:33:2d:56:
25:c8:2a:d9:2f:ca:ee:0c:bb:9b:fd:8e:9c:98:3c:11:ed:80:
80:c2:26:d6:c4:c5:9f:da:d1:ef:f1:7a:51:06:d7:f0:c8:d8:
2e:2f:24:19:3a:68:3a:8d:22:a5:6c:4c:3f:db:bf:08:3f:93:
16:e8:21:bf:68:88:5a:93:dc:7c:d6:ce:3a:59:a1:a9:d8:2b:
4d:be:98:50:8a:2b:8c:d9:c3:bb:e6:44:82:c6:55:71:38:2a:
9c:4c:34:5a:69:55:de:b0:c9:91:9a:02:61:4a:28:54:c0:3d:
d9:b9:ab:23:58:8e:25:7d:e2:15:ac:cd:6d:b4:e3:28:25:8a:
6a:10:0e:da:7f:b2:ee:4f:81:39:99:fb:88:8e:b5:ca:d9:4a:
93:92:de:19:70:9b:08:17:d3:18:81:f2:8e:26:23:c8:a5:62:
f1:65:f0:cd:b6:ee:ba:e5:02:e3:3a:47:ec:94:13:00:ee:35:
65:4e:f8:81:12:d3:c6:0b:5c:26:90:5e:cf:99:c9:19:02:24:
f4:a5:24:62:82:6d:70:fa:6c:16:4b:06:ee:1c:71:cf:42:1d:
a0:5d:ea:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:08 2025 by rpki-client