Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
File: 8dK6iiqWoHtbZMr4cykOIHjZZKY.mft (raw, json)
Hash identifier: p4VKLd3O+0yw/ZckGCMr/zWFK1emAF+YP8wDvyEQEkE=
Subject key identifier: 22:DC:0A:B1:03:5D:D2:4D:1E:6F:FA:A4:41:ED:2F:BC:05:42:20:64
Authority key identifier: F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
Certificate issuer: /CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Certificate serial: 0197B82136C0D5AEC1C69C1AD97D182FBACD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
Manifest number: 0536
Signing time: Sat 28 Jun 2025 20:01:13 +0000
Manifest this update: Sat 28 Jun 2025 20:01:13 +0000
Manifest next update: Sun 29 Jun 2025 20:01:13 +0000
Files and hashes: 1: 1-a6iBHASMUxMW7asjxbfE0QEd5w.roa (hash: m3RXlatEBF9cA7N2EEjPPwV4+LMKEGb0hrpMsfXqqsk=)
2: 8dK6iiqWoHtbZMr4cykOIHjZZKY.crl (hash: /gwnegSw3Pw9SlObMOQzH+fRRZov+h4FOpIQ6DtZZfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:36:c0:d5:ae:c1:c6:9c:1a:d9:7d:18:2f:ba:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d2ba8a2a96a07b5b64caf873290e2078d964a6
Validity
Not Before: Jun 28 20:01:13 2025 GMT
Not After : Jun 29 20:01:13 2025 GMT
Subject: CN=22dc0ab1035dd24d1e6ffaa441ed2fbc05422064
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:36:b1:40:6f:c3:48:86:17:f8:bc:48:dd:b8:
30:dd:1c:8c:47:50:05:e3:69:12:6d:3d:26:81:05:
1e:89:d6:fe:40:22:05:52:45:d2:ab:3d:6a:b9:d2:
fb:3c:ae:6c:8e:b1:49:37:7f:4e:df:29:92:08:6d:
e4:b5:71:eb:03:d7:0c:3f:50:ab:74:81:a5:86:9c:
9c:a3:5f:5b:ca:86:99:42:b1:d5:3d:c7:2c:9c:25:
73:44:9f:b0:5a:57:1c:5a:f4:8b:0f:5b:f5:8f:dd:
4b:b2:af:3a:e2:b0:d9:65:38:96:de:c4:94:93:14:
dd:a0:69:9f:82:54:4e:93:c6:55:c0:c6:96:e3:44:
18:e7:ca:d7:e3:25:05:e7:9f:c4:6b:20:fa:64:be:
43:01:c6:a2:d4:77:d8:b9:3c:e4:8b:72:f0:74:be:
df:f6:00:f5:59:3b:bd:c5:c7:c9:54:8d:49:c7:48:
75:3d:b6:12:a4:8c:1c:ac:92:3a:47:ca:2f:2c:3a:
d3:43:de:a9:4d:91:a0:9a:c9:21:b6:91:0d:23:cd:
e2:41:19:ba:9d:97:db:0e:35:7a:65:f0:6c:e1:c4:
62:00:33:f1:09:c5:70:51:e1:b4:f2:b7:c7:62:71:
82:3d:39:ae:a9:73:62:38:7c:85:f8:24:86:6d:88:
c8:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:0A:B1:03:5D:D2:4D:1E:6F:FA:A4:41:ED:2F:BC:05:42:20:64
X509v3 Authority Key Identifier:
keyid:F1:D2:BA:8A:2A:96:A0:7B:5B:64:CA:F8:73:29:0E:20:78:D9:64:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dK6iiqWoHtbZMr4cykOIHjZZKY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/8075a0-0c5e-4c78-bdb1-d16898016cfe/1/8dK6iiqWoHtbZMr4cykOIHjZZKY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:c2:43:25:9b:7c:94:51:14:8e:6a:ca:bd:78:ad:65:ab:ab:
fb:d0:90:d9:20:df:38:48:73:82:bd:47:64:cd:dd:bc:2a:2a:
7d:3e:62:3f:4e:9c:dc:54:73:3d:bc:f9:76:d4:05:1a:99:db:
fd:3e:5d:a9:02:6e:eb:02:9e:66:38:21:26:84:3f:7c:19:7f:
5d:7a:bc:3f:5c:b5:70:2a:40:d4:61:fd:d4:a6:35:40:03:cc:
61:58:c1:13:a2:fd:2a:11:c6:8d:e6:78:97:79:af:8a:11:01:
7e:e8:93:e4:44:b2:04:46:77:85:fb:ef:52:69:07:94:55:09:
99:c7:d2:86:0a:11:46:9f:b9:47:43:27:e4:01:fc:b7:50:35:
83:68:17:6a:8d:54:2a:56:42:a6:e7:9b:e8:50:27:77:6e:81:
67:0f:11:82:1a:94:56:1d:a6:41:47:e5:42:ee:a3:91:63:b6:
d1:58:9b:06:98:cb:1a:d2:39:3d:b3:ee:71:0c:ea:51:70:aa:
fc:a9:c7:21:7a:05:97:f4:bd:10:f1:d1:3c:91:0f:82:57:43:
cf:d0:7b:17:27:38:f2:ff:d9:7c:d1:5c:b6:ec:d1:0c:e2:63:
08:85:4e:4a:4f:c0:8a:67:04:9a:50:a4:58:f4:24:87:6f:7d:
f1:3c:c2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:43:27 2025 by rpki-client