Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
File: 8mFEyCSVlxG2UteMGHAr9DLyGVw.mft (raw, json)
Hash identifier: Gog9tkgVQZfK1DFzsYlBrZD7S8ytFl8kCpa8MvrGk+0=
Subject key identifier: 61:C7:63:43:7E:61:9A:20:08:2B:81:CC:09:A6:91:83:D0:2B:39:95
Authority key identifier: F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
Certificate issuer: /CN=f26144c824959711b652d78c18702bf432f2195c
Certificate serial: 0197B7B3205208877ADE99F88166BD185B6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
Manifest number: 1549
Signing time: Sat 28 Jun 2025 18:00:59 +0000
Manifest this update: Sat 28 Jun 2025 18:00:59 +0000
Manifest next update: Sun 29 Jun 2025 18:00:59 +0000
Files and hashes: 1: 8mFEyCSVlxG2UteMGHAr9DLyGVw.crl (hash: YxFpxO69L3ABbs60qw9EcrrsdwtSg4px+asVms6pLz8=)
2: yT1Jx8Ou-jYtMpuKi40cHf-H83c.roa (hash: Lx4YPLeLSMnJ3NGAZ4PST+Ci/ylYMYy1Z+vRgBl8ZqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:20:52:08:87:7a:de:99:f8:81:66:bd:18:5b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26144c824959711b652d78c18702bf432f2195c
Validity
Not Before: Jun 28 18:00:59 2025 GMT
Not After : Jun 29 18:00:59 2025 GMT
Subject: CN=61c763437e619a20082b81cc09a69183d02b3995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:45:74:33:37:bc:e2:fd:75:f6:eb:ee:84:74:
be:ba:55:29:ee:ba:4e:7c:3c:7c:a6:ad:8d:cd:7e:
51:13:10:0e:ed:17:ab:ea:c7:cc:21:aa:5b:75:42:
f5:c2:3a:0c:39:4d:13:32:42:2d:f7:f5:db:e4:37:
46:25:2c:57:70:55:8f:9c:77:1c:f2:8e:70:f5:ed:
3a:95:aa:9d:de:a0:fe:53:4f:a1:52:c3:69:7b:3d:
7b:30:2a:e1:f0:37:98:af:a3:5f:71:6e:9d:a2:3e:
08:be:9b:5b:67:f8:ff:29:f1:08:d3:e5:6c:6a:2f:
e0:f1:82:0d:bd:22:6e:9d:8a:90:7c:a2:18:b4:61:
cb:75:17:fe:56:aa:48:ab:27:72:8e:5f:93:b9:8a:
a0:72:3b:0a:e2:11:d3:af:5b:12:be:97:c7:1c:13:
cb:1f:28:fc:3d:de:f4:28:3d:cc:3e:e1:38:cd:70:
7c:9d:87:d4:f7:ff:c9:9c:0b:04:1f:43:0a:49:a1:
72:aa:e0:83:3f:db:8d:2b:27:41:de:c0:e7:d0:51:
bf:d7:9e:78:d0:24:09:7b:54:94:28:c8:8c:10:46:
c5:e7:7b:3e:f0:07:45:6c:58:24:e3:9e:f2:09:13:
52:c9:1e:f8:1b:12:49:88:42:07:8c:fa:79:0d:e4:
76:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C7:63:43:7E:61:9A:20:08:2B:81:CC:09:A6:91:83:D0:2B:39:95
X509v3 Authority Key Identifier:
keyid:F2:61:44:C8:24:95:97:11:B6:52:D7:8C:18:70:2B:F4:32:F2:19:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mFEyCSVlxG2UteMGHAr9DLyGVw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/a66c25-2711-4659-b162-35b483bb4c84/1/8mFEyCSVlxG2UteMGHAr9DLyGVw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:37:86:d1:88:74:e8:dd:43:5e:39:f0:32:14:09:60:06:c8:
22:d8:59:6c:e0:3c:14:14:d8:09:71:bc:9f:8f:0e:86:34:49:
9c:2d:38:b3:0f:54:f8:fe:82:eb:57:10:46:ea:73:da:70:75:
0d:ee:a8:24:82:5d:93:46:e5:36:97:e3:8c:cb:23:f7:25:14:
b7:fa:34:1f:51:36:87:9f:c5:80:23:54:f7:46:48:9e:ab:49:
dd:f8:03:82:c0:de:ea:ad:03:c1:ab:c2:3c:ee:c2:2b:6e:c6:
2f:e3:41:a4:a6:9d:3c:8b:0c:3a:56:e0:6c:ad:a1:55:ec:49:
ec:86:d1:5c:a7:7a:7f:1c:78:8c:f7:b4:c3:96:62:9e:61:e7:
1e:50:4b:b8:63:2b:3a:64:fb:e4:a9:a3:bb:e2:3b:ca:cd:8e:
19:54:af:b8:00:08:4a:38:cb:ba:98:de:8c:0a:91:ff:5e:07:
4d:b2:e8:40:7b:d2:76:d6:7c:94:68:77:fa:d5:d7:7f:de:d1:
fd:8f:30:8c:d2:57:6e:c6:94:26:de:62:d5:86:06:0b:36:01:
c2:dd:5b:ab:c6:57:a2:5f:d6:36:bc:ce:04:bf:11:e6:f0:aa:
c8:1d:aa:c5:d8:c0:a6:f9:15:e5:ef:11:77:c5:30:62:5b:d3:
e5:e0:9a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:39 2025 by rpki-client