Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: fgpXITbnLAXu0UV+mKJ4iPFjVn9oLYNNRbpSFJRPyNA=
Subject key identifier: 71:EB:C4:22:3E:69:E6:18:E5:91:2C:C1:C6:40:90:4E:83:8A:FA:EE
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 0197B70E520FDED504646E2DF8C16EE00DA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 0A0E
Signing time: Sat 28 Jun 2025 15:00:58 +0000
Manifest this update: Sat 28 Jun 2025 15:00:58 +0000
Manifest next update: Sun 29 Jun 2025 15:00:58 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: aahncivGhlI5LIQ4XfpMtW4m1+BzmWfE3b5irJ8I2S4=)
2: 9fWa2lfLkLJ8sCmivN6TQyBLwDA.roa (hash: IPb2Fry6AFROnpqPDxpsLGmfQRyiCcADkUuNtSOH1vw=)
3: M0hmVP_O7pmzGC1lZ8auVtUv08M.roa (hash: O6keKWXCa23CBnMYQ5j2NdMEa5h/R6dRjRYYfD56tpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:52:0f:de:d5:04:64:6e:2d:f8:c1:6e:e0:0d:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Jun 28 15:00:58 2025 GMT
Not After : Jun 29 15:00:58 2025 GMT
Subject: CN=71ebc4223e69e618e5912cc1c640904e838afaee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:eb:e2:8c:6a:70:bf:aa:dd:db:64:00:bd:ca:
1a:c1:c1:c0:c0:ec:df:bc:e5:ae:33:72:03:0b:bd:
6f:33:61:bb:c9:da:ce:27:a0:50:1c:91:36:3d:a8:
61:87:dc:f2:c8:c7:94:e9:4c:c0:b7:b6:a2:a2:90:
ea:0b:f4:b6:ad:96:b0:c3:f0:64:ce:aa:e0:74:30:
23:9d:f6:ef:33:51:c7:34:5c:ac:e7:49:a8:eb:f8:
8e:44:bb:e1:d1:a5:cf:ea:62:fa:c6:a5:2f:5a:f1:
69:3b:d7:87:89:12:5c:04:8f:16:a1:04:1c:1e:ff:
db:31:1d:72:53:f5:1f:b5:de:b5:c1:06:64:75:f2:
44:07:43:ed:ae:2f:ce:82:0f:1e:14:ea:d2:14:5b:
61:82:c7:3c:59:f6:89:10:95:8c:17:a2:09:d7:36:
2f:58:64:07:f0:38:a6:93:fe:71:aa:72:03:9f:88:
a0:43:8e:10:2e:ae:ff:80:69:87:e2:45:dd:78:04:
5f:13:10:21:3a:a3:17:0a:02:f2:7b:ae:9d:e9:59:
f0:da:04:99:0c:f7:cb:59:59:18:d9:ed:60:22:52:
04:de:8d:e3:c7:7f:02:97:67:04:89:17:71:43:02:
18:f8:88:3e:ba:bb:2f:75:ea:bc:8e:ac:2e:fb:5a:
16:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:EB:C4:22:3E:69:E6:18:E5:91:2C:C1:C6:40:90:4E:83:8A:FA:EE
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:b6:51:1f:b7:35:13:49:27:cb:3d:34:f0:2b:57:ea:e9:89:
d0:f5:87:e7:c4:dc:32:b3:6d:ed:7a:0b:47:6c:68:be:2c:74:
ad:5e:d7:a0:d1:6d:3b:59:13:d2:a0:69:31:35:81:d2:c4:34:
f1:8d:94:61:dc:cb:4d:fb:53:1b:b4:9b:f4:6d:89:82:15:e4:
67:63:73:3f:31:d9:e1:63:b9:7b:2f:77:eb:65:9c:5d:b5:c6:
2b:8b:9d:5a:10:00:fa:fe:2c:20:26:42:f9:21:6a:83:65:e0:
37:e3:e5:62:1e:e5:57:80:db:d6:47:90:6f:48:89:33:d3:de:
7d:d9:01:72:27:22:98:eb:35:9d:63:b7:f5:34:15:b2:97:a8:
df:5c:c0:75:65:2e:8f:7a:ce:fb:08:49:99:6b:ca:cb:24:b0:
f3:93:f8:c4:df:e0:1d:be:2b:44:5c:d6:84:9e:c6:4d:06:11:
5d:f6:5d:2d:2d:32:3e:53:b8:4c:9e:d2:de:56:c7:50:78:35:
53:bf:1d:c2:25:83:0e:13:89:3d:cb:73:f3:ed:36:fb:e1:07:
12:2b:df:9c:c5:15:ec:dd:a0:c2:a2:d6:34:06:9c:00:fe:96:
6b:48:0f:63:2a:28:8e:42:ae:77:48:fa:8c:17:ec:8b:d0:e5:
0f:78:8c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:55 2025 by rpki-client