Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
File: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft (raw, json)
Hash identifier: +LnDXTQQlRhz5SvUzbWK6+lkJmKCFUbmt7DzowycMmc=
Subject key identifier: 9E:C0:EF:B0:67:8D:09:93:66:F6:60:F0:AB:7A:54:48:D4:DC:AF:03
Authority key identifier: F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
Certificate issuer: /CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Certificate serial: 0197B7EAC41AC10B43949A320B10E2029C30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 19:01:45 +0000
Manifest this update: Sat 28 Jun 2025 19:01:45 +0000
Manifest next update: Sun 29 Jun 2025 19:01:45 +0000
Files and hashes: 1: 8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl (hash: RS3/4xdXrYwXZug2GPdn2KKxI1CdtUUXlMegalZD6lc=)
2: 9iL04rGDZoryywio-gmg9h9zCvU.roa (hash: gqClxkuVstSkbo5JxbBFKE2JBuMbwOG9F1HTwbBvxv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:c4:1a:c1:0b:43:94:9a:32:0b:10:e2:02:9c:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f210bac96aff25b2aa931c4297446be37ffe2ada
Validity
Not Before: Jun 28 19:01:45 2025 GMT
Not After : Jun 29 19:01:45 2025 GMT
Subject: CN=9ec0efb0678d099366f660f0ab7a5448d4dcaf03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:15:4a:12:5a:2d:92:73:4e:83:f5:e0:01:08:
16:85:2d:ba:94:1f:c7:6d:73:d5:4c:0b:7b:55:7a:
25:38:aa:1b:23:ab:70:7f:83:bd:7e:e8:c3:50:9e:
4e:f1:b4:86:d0:41:c2:e3:f5:6d:5e:83:a9:2e:99:
fd:7b:50:3c:22:e0:13:42:4f:59:0f:77:77:3e:49:
4b:ac:16:a4:d8:c9:b7:34:13:b7:0b:3e:32:e4:e1:
fc:50:89:d3:8d:93:28:d4:87:6c:c4:a6:8f:1c:b6:
b1:c3:62:ff:cd:a4:94:3c:2e:7d:63:b9:b1:fe:6d:
a3:05:e7:5a:f0:83:30:5a:e8:25:50:50:17:18:55:
cd:70:03:34:06:55:89:60:4e:2f:20:d7:e5:7f:ba:
32:02:e4:ce:23:58:54:3c:78:57:7a:27:ea:f5:c6:
35:47:11:d3:50:9b:45:cb:9e:0e:30:6f:a9:56:26:
ba:3f:72:b8:8a:6a:c7:41:45:79:2c:85:28:5c:85:
6d:22:d1:51:23:3e:a2:c7:c4:c3:09:54:6d:b5:b9:
1d:c0:3e:90:a7:6c:b8:b3:6e:83:e2:4a:a7:c5:1d:
6b:91:e8:20:25:96:2f:10:1b:b5:9d:22:a6:c3:8f:
d7:87:fd:7d:16:b9:14:b5:89:81:66:de:7e:98:a5:
67:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C0:EF:B0:67:8D:09:93:66:F6:60:F0:AB:7A:54:48:D4:DC:AF:03
X509v3 Authority Key Identifier:
keyid:F2:10:BA:C9:6A:FF:25:B2:AA:93:1C:42:97:44:6B:E3:7F:FE:2A:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hC6yWr_JbKqkxxCl0Rr43_-Kto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b52421-1a3d-48f5-949f-a329394698d2/1/8hC6yWr_JbKqkxxCl0Rr43_-Kto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:52:0e:b3:58:e7:01:53:48:c0:94:b0:f0:bb:19:8c:cd:53:
68:1c:88:75:1a:0f:52:78:d2:a0:aa:d1:55:46:8c:f0:c3:22:
47:27:bf:03:93:c8:ca:1a:46:6d:9d:d5:9a:f9:25:dd:1f:c9:
40:37:f5:1c:8b:7a:d1:b8:74:cf:15:10:8e:be:2c:9c:54:10:
f5:b8:79:30:5e:ef:f3:71:98:38:a4:f6:4f:98:b0:18:5b:7a:
0d:e5:5a:91:9b:aa:c6:ec:6c:03:b5:39:f7:f0:fa:24:3b:96:
3e:84:a8:6f:37:2b:5c:e0:3a:e3:e4:d5:a2:63:dc:bb:c9:1e:
bd:b7:7a:d2:1d:1c:65:b0:b5:e7:62:74:0e:b6:b0:9e:92:a1:
1c:a1:db:fe:bd:7d:82:28:6d:50:93:99:eb:d6:36:a4:43:61:
60:ff:1f:49:52:54:18:68:3c:15:44:aa:2b:e8:18:7c:65:53:
e3:6e:e3:8f:fb:62:b2:7e:e5:7a:d2:f0:12:ce:53:25:92:14:
33:0d:40:60:d2:e9:d8:a1:a7:1a:ad:ff:59:e6:b1:25:cf:9f:
c5:8c:d1:28:3c:26:75:16:63:b1:73:39:0c:21:9d:43:f5:3d:
43:d8:cb:d4:d3:b7:c9:35:9e:27:d7:79:80:aa:b1:49:26:c6:
d4:4b:0d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:32 2025 by rpki-client