Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
File: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft (raw, json)
Hash identifier: 8bFXRHU6azDciVgTpnQPKQqry6RSE/QA0BoDMdW5BkA=
Subject key identifier: 21:B1:D0:A7:C5:E4:12:06:A8:75:0C:0D:DC:42:1E:A6:8B:73:09:F5
Authority key identifier: F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
Certificate issuer: /CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Certificate serial: 0197BBFDCD2752785D926A6DC37608988CE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
Manifest number: 0FCB
Signing time: Sun 29 Jun 2025 14:01:01 +0000
Manifest this update: Sun 29 Jun 2025 14:01:01 +0000
Manifest next update: Mon 30 Jun 2025 14:01:01 +0000
Files and hashes: 1: 8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl (hash: j+SqyM5+8iOEiwPgowoYx2rdL9sLKZBYGsBoRpHtadY=)
2: rPbx58T-x5ORRRx0tEYr-rx7t3U.roa (hash: vSn+krLvdIPvrWL0ipO2XK8jiZxa1ds2oZDzxWzd7dE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:fd:cd:27:52:78:5d:92:6a:6d:c3:76:08:98:8c:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f05c6af3d022620f72c53b770e82e5c73ae5506d
Validity
Not Before: Jun 29 14:01:01 2025 GMT
Not After : Jun 30 14:01:01 2025 GMT
Subject: CN=21b1d0a7c5e41206a8750c0ddc421ea68b7309f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:a3:09:89:9b:e7:ee:a8:8e:ca:6f:db:bb:78:
58:6d:6b:b3:98:9b:c4:cc:ab:f0:73:7d:df:2e:e0:
9b:66:96:84:c7:37:c3:4c:b4:d8:96:85:de:7a:24:
e4:1d:d7:15:c0:e1:19:ba:48:af:14:70:1d:bc:bc:
5b:2a:c1:47:0f:d9:c6:73:94:01:5b:78:0a:12:4b:
97:13:8a:79:44:48:17:a6:dd:e8:2e:c9:73:ae:1b:
14:98:cf:97:53:85:43:0f:59:e5:89:e8:f6:72:1a:
77:62:4a:15:c5:b4:52:7e:81:7f:48:4c:73:a9:d1:
e0:3a:bd:e2:5f:7f:07:ab:44:66:40:d6:4d:76:6d:
fb:6c:93:94:76:57:ad:d5:44:bd:3b:fd:ea:c1:d4:
5d:fe:d0:2a:b9:29:ef:5b:38:70:ac:00:b6:e3:a7:
91:e7:83:e2:21:dd:dd:c3:f9:da:13:83:42:82:c2:
b6:5b:c1:92:34:82:20:60:f3:47:bd:a5:de:b3:83:
bf:02:d9:0f:97:82:e1:5b:2c:69:fe:8d:b7:05:7b:
a2:b7:d8:80:0b:fe:f2:47:15:85:47:f5:3d:39:f6:
84:eb:bd:5c:1d:c9:7c:08:42:0b:f9:4b:b3:49:72:
9e:21:6f:33:d9:12:67:f5:ce:2c:78:0a:7b:38:27:
d1:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:B1:D0:A7:C5:E4:12:06:A8:75:0C:0D:DC:42:1E:A6:8B:73:09:F5
X509v3 Authority Key Identifier:
keyid:F0:5C:6A:F3:D0:22:62:0F:72:C5:3B:77:0E:82:E5:C7:3A:E5:50:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Fxq89AiYg9yxTt3DoLlxzrlUG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/f7b7c2-5d8d-4e88-8454-0a532156b2a6/1/8Fxq89AiYg9yxTt3DoLlxzrlUG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d5:0a:4b:96:e8:34:70:42:f9:8f:8a:34:ba:2c:1e:1b:8b:
ad:db:6c:fd:36:68:b2:d5:52:99:e4:b9:0d:75:d0:b7:e2:19:
b3:c0:e0:06:32:10:98:21:0c:45:9f:77:0b:94:e2:10:7a:a7:
31:79:4f:7a:54:c7:9e:a0:2a:74:60:e5:d2:06:f0:9f:f7:64:
66:69:cf:11:31:41:d3:a6:c4:7b:4f:c8:d2:a6:16:bd:44:e9:
ef:0f:32:1b:4a:a6:e6:f9:06:b1:c2:2b:81:54:fd:80:18:f7:
43:72:37:86:30:bf:fa:27:cc:b2:ec:01:53:a3:a7:33:e1:71:
43:b6:36:47:a1:7b:a9:41:6d:53:0d:bb:00:9f:df:05:18:dd:
f3:50:4b:49:79:46:fc:5e:66:29:f4:98:83:e7:9e:a6:ce:bd:
44:74:82:fb:5f:c8:5d:3b:e4:0d:ad:1e:cf:46:7f:fb:06:85:
52:84:d0:bd:40:76:64:b9:d6:58:4b:f1:22:54:be:b8:2e:3c:
a9:b3:2f:e4:00:ce:a7:ff:21:af:a4:25:f1:6f:d0:97:0d:49:
e7:82:49:0f:18:e8:3b:e9:6e:a8:7f:14:ee:32:a1:0f:44:ca:
c6:c6:ce:02:22:5e:b4:9c:9c:af:4a:28:d5:a9:1a:4a:40:8e:
00:d4:45:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:49:57 2025 by rpki-client