Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: sd1zS8MLZ/wyXN6aS+CXJxq6B7HdvIwRcc5ozaLWyBY=
Subject key identifier: 35:14:09:66:7F:1B:75:23:E0:D9:82:99:E3:6A:81:83:92:4D:52:3C
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 0197B96A70B479E887FEE1C0058202A95BC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 0C42
Signing time: Sun 29 Jun 2025 02:00:50 +0000
Manifest this update: Sun 29 Jun 2025 02:00:50 +0000
Manifest next update: Mon 30 Jun 2025 02:00:50 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: Lfd9XscKDdIjEmByGFvZzjNw6+Oi7ZPoqWWKIhUlaOY=)
2: B6rNTDmSeixvi2u96itxbHQseH8.roa (hash: /bpvcJ02LIsBEU3Cv3unhIGktgtKR8kh+JeWSM+804A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:70:b4:79:e8:87:fe:e1:c0:05:82:02:a9:5b:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Jun 29 02:00:50 2025 GMT
Not After : Jun 30 02:00:50 2025 GMT
Subject: CN=351409667f1b7523e0d98299e36a8183924d523c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:fa:f1:2f:21:66:81:a0:75:4a:27:22:fc:81:
cd:17:1b:e7:c7:67:36:56:6a:90:07:8a:ba:82:96:
95:43:df:98:51:a0:76:03:f5:e1:18:bf:ae:d4:96:
a3:83:52:61:01:ca:6e:64:53:8a:74:79:fe:45:fc:
a4:07:88:4b:c4:f1:cd:7a:5b:de:37:71:9e:b5:28:
ba:82:56:d4:cf:6c:ab:08:4e:f4:36:ee:b9:14:d5:
bb:64:1b:0e:dd:8a:02:11:d3:4e:e9:a7:d7:55:60:
a4:8e:78:d3:26:a4:e1:6e:6d:60:60:a2:fd:6e:77:
53:90:b6:dd:e0:ac:28:b0:94:92:48:b0:12:c1:9a:
e4:1b:13:97:6f:87:1c:3b:e6:b8:4a:17:c4:9a:bf:
f0:79:ad:31:df:24:5c:8e:90:58:e4:73:8e:d4:a7:
19:00:9f:bb:c0:3a:ef:79:4e:60:83:4d:ab:e0:4f:
18:65:3b:06:96:59:7a:6b:9a:3c:26:7c:96:13:88:
35:af:19:b5:7b:87:80:be:97:ce:d3:b9:68:9f:29:
44:d0:ad:0f:1b:69:77:f6:55:da:0e:7d:ac:31:72:
a1:43:fc:0f:a8:48:34:2a:0c:f5:b9:d2:d9:8e:eb:
c7:94:c6:e9:f4:24:1e:ea:3c:5f:d1:af:fb:df:2b:
54:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:14:09:66:7F:1B:75:23:E0:D9:82:99:E3:6A:81:83:92:4D:52:3C
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ae:c2:64:f1:45:b5:c7:a3:f6:6f:8f:2e:c2:a8:d1:2b:c4:
43:af:34:9c:a5:7c:71:55:17:3b:6d:4d:f9:d9:80:39:70:20:
27:e3:43:76:65:df:ab:9b:15:59:c3:03:13:00:75:52:bd:12:
28:76:a7:71:a0:d8:15:8b:6f:0b:f9:cc:88:8d:2f:72:8d:7f:
08:c5:02:de:39:27:75:d1:26:5a:2e:5d:50:ad:25:a5:74:c9:
17:34:6d:28:a6:8e:e9:2d:c3:31:3a:73:b3:1d:40:41:71:14:
97:71:1e:94:d7:8f:8b:f4:97:73:e1:25:f4:ee:e1:93:c5:f1:
4d:9f:ff:f7:41:fd:a0:20:a8:a8:c8:7b:49:eb:91:f6:4c:01:
9d:43:44:78:5c:14:bb:ad:24:21:d1:3a:57:a4:8e:41:89:5d:
8a:ba:44:b0:a0:a9:cb:92:41:c2:f1:ec:7f:95:a7:71:a3:4a:
f4:fb:fa:e3:95:dc:7a:f9:9b:5e:9b:70:61:ed:c0:0d:f2:c1:
84:90:39:f6:6d:f8:a4:9f:2d:08:e0:da:e3:e1:3c:fa:f9:f0:
ab:e9:53:0e:e6:5c:1e:12:2b:69:79:68:50:77:6d:c0:8d:93:
13:13:45:a0:7a:36:7d:fe:f9:e7:c7:e0:ac:cf:76:9e:e6:23:
b0:b0:96:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 11:21:57 2025 by rpki-client