Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
File: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft (raw, json)
Hash identifier: AtcZ9+5fggH59K5/Cr6I43ek/Y8+9x+pdTMnH7ORl7M=
Subject key identifier: EB:4F:B2:5B:28:E0:08:C7:7C:C6:00:04:07:10:51:56:10:00:D6:C7
Authority key identifier: F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
Certificate issuer: /CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Certificate serial: 0197C6150A7F0A12E7B44AA7CAC56B60FB44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
Manifest number: 0FAD
Signing time: Tue 01 Jul 2025 13:02:36 +0000
Manifest this update: Tue 01 Jul 2025 13:02:36 +0000
Manifest next update: Wed 02 Jul 2025 13:02:36 +0000
Files and hashes: 1: 8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl (hash: gestgH8jGo6tz8JvXW30Qz7xYO+iCpTINoOmhHWNsQ4=)
2: qPfR7RG57f18LNEfOXECDUWuxuU.roa (hash: QgXqOHY45cNI3RJ9Yex5GhM6/GX8GPU2S0Ij2p9Y640=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:15:0a:7f:0a:12:e7:b4:4a:a7:ca:c5:6b:60:fb:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1003d2c71ab076991fb03ed6600bf1d48b72be5
Validity
Not Before: Jul 1 13:02:36 2025 GMT
Not After : Jul 2 13:02:36 2025 GMT
Subject: CN=eb4fb25b28e008c77cc60004071051561000d6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a1:4b:9e:bd:79:36:30:c1:bf:e3:b9:32:76:
32:65:a2:69:82:8f:90:8f:a5:26:e6:85:6e:1f:39:
0a:38:09:b0:ea:7a:b1:33:36:00:20:38:07:55:a8:
4f:9f:66:b4:b3:cc:b0:a8:99:40:2b:94:3c:39:fa:
0b:b8:db:c1:40:4b:74:8f:a3:26:dc:c9:c5:c9:26:
f4:51:d1:c7:36:9d:73:ad:d6:03:92:f0:2d:9f:78:
88:9b:22:94:8f:3a:b0:7e:01:28:f8:1c:0b:d6:fc:
6a:f9:6c:b1:6b:d6:a3:fb:2c:89:e5:88:a0:50:ab:
e1:0a:bf:a5:48:67:e2:93:4e:fd:de:71:33:a8:2b:
1c:ca:4e:7a:52:80:87:db:47:f8:1e:bf:56:01:11:
6d:49:0c:cc:00:a4:78:dc:c9:cf:6a:47:12:ed:7c:
9a:31:97:53:3c:0f:a5:63:c5:7c:b4:2b:61:35:01:
cd:e8:cb:21:04:91:21:bb:6b:37:18:8f:b5:43:76:
0a:8c:b4:fe:cd:c8:87:a3:11:38:de:9b:d3:86:00:
72:c4:e8:0d:c5:5d:74:82:13:ac:1b:a0:89:e2:fd:
5e:5a:a9:87:ee:83:84:0c:55:99:aa:75:5d:12:4f:
ad:0d:a2:91:69:3c:d1:8a:7c:6d:8c:6b:a3:e1:b1:
0c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4F:B2:5B:28:E0:08:C7:7C:C6:00:04:07:10:51:56:10:00:D6:C7
X509v3 Authority Key Identifier:
keyid:F1:00:3D:2C:71:AB:07:69:91:FB:03:ED:66:00:BF:1D:48:B7:2B:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8QA9LHGrB2mR-wPtZgC_HUi3K-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/846a03-de24-485b-b9b7-c4bc803d893f/1/8QA9LHGrB2mR-wPtZgC_HUi3K-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:10:ef:76:53:03:51:b0:25:b3:fe:ab:c6:b3:86:e1:ac:7f:
ae:7d:c5:29:fe:19:a0:af:ff:ff:a1:5c:d6:5b:22:3e:49:87:
41:4a:4e:4d:91:f9:62:6d:f6:e5:22:55:95:54:bd:ab:27:8b:
51:c3:a5:f4:e7:a0:87:b1:fc:6a:7b:61:00:c3:ae:70:49:34:
cd:4b:a3:10:de:b7:18:3d:0f:f4:4d:ad:16:b7:5e:a6:50:da:
d8:4a:30:dc:63:41:c2:77:ed:e3:3b:de:40:e5:78:1e:fd:75:
d5:99:b6:c9:b1:4b:b1:3e:43:2a:f4:ac:4a:8f:31:d3:7d:1d:
d9:75:04:5f:07:de:d4:83:1b:ed:e2:c4:ef:71:db:08:cb:f5:
ef:33:25:b9:6f:cb:ff:12:17:df:c4:42:5d:74:ca:9e:4f:64:
b0:71:f8:de:dc:84:bc:fd:a2:d7:e3:17:34:97:2c:da:d0:27:
17:d2:23:43:d9:0f:10:4d:65:d4:52:95:87:02:b6:44:76:34:
ba:0f:fc:2c:b6:7e:b0:64:1b:ac:01:73:19:c7:57:fd:27:65:
d8:c4:f0:ef:6b:cd:fe:87:06:16:d4:8e:ca:bd:68:68:5e:cb:
c7:27:b6:a6:51:a5:f1:d8:0c:6f:68:b5:55:d4:48:4b:80:90:
83:55:63:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 20:15:58 2025 by rpki-client