Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
File: 8G3inpNW30RwfIOW2RjmsokSnEo.mft (raw, json)
Hash identifier: B7TQ6NMA6gjOD3WgoGA2+EuWXfSjQG5/nkUgnUU26p4=
Subject key identifier: 1C:3D:00:C4:66:87:CB:69:CE:E0:F6:2C:5E:48:DE:3C:CA:F9:01:62
Authority key identifier: F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
Certificate issuer: /CN=f06de29e9356df44707c8396d918e6b289129c4a
Certificate serial: 0197B7B322D06B70579AD15329EC419D58A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
Manifest number: 0118
Signing time: Sat 28 Jun 2025 18:00:59 +0000
Manifest this update: Sat 28 Jun 2025 18:00:59 +0000
Manifest next update: Sun 29 Jun 2025 18:00:59 +0000
Files and hashes: 1: 8G3inpNW30RwfIOW2RjmsokSnEo.crl (hash: qGxfpHvk7N40iTGKRGogPRxOi+HoAlG0k5UATrI2ChA=)
2: FruHS8sKA0UVPBPUKiJYlzj46rI.roa (hash: If8vnhAP47c8P1zX/kOfX6rctIeesg8CbkDyipSuox4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:22:d0:6b:70:57:9a:d1:53:29:ec:41:9d:58:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06de29e9356df44707c8396d918e6b289129c4a
Validity
Not Before: Jun 28 18:00:59 2025 GMT
Not After : Jun 29 18:00:59 2025 GMT
Subject: CN=1c3d00c46687cb69cee0f62c5e48de3ccaf90162
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:94:77:61:a8:d6:43:8d:f8:93:b1:ac:20:bc:
5a:ff:db:8c:75:e6:30:1b:2f:4e:4a:30:65:dc:1d:
43:75:c3:b3:f7:d5:26:10:ca:f1:f6:93:22:b7:b1:
74:ef:5e:cc:53:dd:6a:57:41:e1:a5:f2:b6:13:db:
fe:92:b3:59:37:3d:a9:56:b6:0e:7d:16:fc:20:75:
07:46:42:d2:8d:98:bb:b2:5a:51:dc:e0:b6:aa:b9:
ec:eb:a2:74:ce:c3:1e:06:f3:42:66:1a:82:c5:84:
7d:aa:0d:e0:da:98:a9:5b:7d:7c:da:26:e6:b3:30:
d0:86:f4:a4:cf:d5:b8:d0:b9:59:69:ff:7e:03:b7:
d9:ab:38:ca:05:70:da:ef:7b:27:2d:39:a7:9b:11:
dc:86:a7:a5:6a:94:e7:e0:ef:1c:d6:7a:cf:98:1b:
1d:8e:49:fb:2d:55:60:e1:1f:60:08:39:8d:52:4c:
e5:b0:6b:86:44:ca:99:3c:68:57:81:ff:86:b1:88:
42:6c:44:0e:6c:5f:95:95:ff:e2:4a:b6:da:18:0d:
00:2d:85:df:0b:c2:f0:c9:bb:06:45:c0:82:b7:28:
42:a7:8a:40:94:1a:d6:57:64:d9:2f:c2:e8:fc:01:
2b:5b:68:fc:3b:1e:1a:0f:ea:31:c3:d1:9a:31:54:
13:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:3D:00:C4:66:87:CB:69:CE:E0:F6:2C:5E:48:DE:3C:CA:F9:01:62
X509v3 Authority Key Identifier:
keyid:F0:6D:E2:9E:93:56:DF:44:70:7C:83:96:D9:18:E6:B2:89:12:9C:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G3inpNW30RwfIOW2RjmsokSnEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e44d58-15d5-48c7-be21-f816d3be4012/1/8G3inpNW30RwfIOW2RjmsokSnEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:35:14:81:fc:11:68:88:88:83:a3:7d:5c:ce:b3:dd:09:e2:
c5:f6:1e:9c:2b:ca:79:4d:00:9b:24:1e:bc:e7:fe:af:1e:6b:
b6:1d:61:55:0b:7e:fd:8e:66:83:a6:74:13:84:b8:03:42:68:
d2:17:b9:39:7d:b2:2c:82:84:f6:6a:0f:94:48:c8:c9:a8:14:
7a:97:06:38:d5:4f:64:5d:a9:26:1d:c4:e0:38:72:f7:bb:28:
90:dd:f5:bf:ba:38:dc:9d:7a:14:c1:0d:6d:23:84:a6:6c:9b:
03:a8:be:64:b1:8e:0d:96:58:03:7d:6e:0d:14:b6:69:1e:2c:
58:1e:a2:f2:6f:9a:91:0f:3e:2b:4e:54:68:a9:6a:c9:ed:ce:
e0:44:2d:da:11:bd:b6:9a:fa:fe:14:9b:54:9c:dd:b8:b8:bc:
70:7d:62:6a:c5:c0:ff:5d:3e:13:ab:af:e0:bc:43:f6:40:84:
4f:7a:c8:88:44:ce:6d:d9:44:06:f8:e4:0a:60:ab:4e:31:a9:
34:8c:b8:c2:58:01:07:ff:8e:0d:89:6e:36:e9:6e:bd:2e:b3:
be:60:c3:4a:70:96:6a:51:d9:a8:de:6e:ce:2e:60:39:a3:8b:
97:12:09:c0:f4:9f:21:26:9e:f3:32:a2:1d:f8:76:8b:3c:3c:
14:a6:d0:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:50 2025 by rpki-client