Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
File: E-8y2L8VPATGOTviTwYyQ_fop-I.mft (raw, json)
Hash identifier: HH6RhBSY/BlxzUmQ+V8vu+aK4n5tnoyTtSygB0n/ysc=
Subject key identifier: 84:74:BC:71:CA:14:0A:3B:61:A5:8F:67:74:F5:A7:67:12:4E:E0:F0
Authority key identifier: 13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
Certificate issuer: /CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Certificate serial: 0197B70E90E72DD57B7A1116736786AFC1AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
Manifest number: 0819
Signing time: Sat 28 Jun 2025 15:01:14 +0000
Manifest this update: Sat 28 Jun 2025 15:01:14 +0000
Manifest next update: Sun 29 Jun 2025 15:01:14 +0000
Files and hashes: 1: E-8y2L8VPATGOTviTwYyQ_fop-I.crl (hash: lya/UEo4oOEp2WYjK0eHGKqQ5mDBJaZdTSZL6QRIf7k=)
2: _QgoRTMtyS5EtLyc5fzMPDI_ctA.roa (hash: zInvj3NFraNTsicxTEwbxiFyh/WcUo2wVcGwRT2Mtog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:90:e7:2d:d5:7b:7a:11:16:73:67:86:af:c1:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13ef32d8bf153c04c6393be24f063243f7e8a7e2
Validity
Not Before: Jun 28 15:01:14 2025 GMT
Not After : Jun 29 15:01:14 2025 GMT
Subject: CN=8474bc71ca140a3b61a58f6774f5a767124ee0f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:c1:14:a2:60:b3:2d:62:2a:30:0d:ab:6e:b6:
34:90:2e:29:44:af:00:99:35:0a:c5:65:24:59:ad:
d7:70:bb:8c:f2:64:4c:2f:8a:7c:d6:8b:64:6f:76:
9e:21:8c:91:a9:9c:69:4e:e8:3f:6c:9b:3f:31:0c:
18:ce:16:b6:ec:47:a8:65:8e:12:da:61:3a:a3:59:
61:76:0a:87:0d:60:d0:68:68:b8:f7:49:d6:68:2d:
a7:b4:b5:7f:29:9b:b4:cb:0c:e9:63:87:37:ee:c5:
7d:c2:3b:85:dd:0e:34:f4:fa:8d:18:e5:d8:dd:9f:
72:8e:2f:82:de:21:44:a9:32:76:90:57:f1:3a:94:
95:ec:8f:ac:9d:a0:bb:e3:26:61:73:0d:2e:62:23:
67:80:06:6a:d4:3b:26:d3:36:57:89:a3:6e:78:5a:
88:b5:36:d7:05:80:b1:30:ff:c1:c9:58:e8:12:87:
ba:e9:42:5b:06:c5:c4:06:16:44:95:dc:e8:e7:5b:
4e:30:65:0c:b3:31:92:28:cb:c4:0b:c9:3d:97:f4:
12:39:2a:7b:4c:45:53:15:85:eb:53:74:d0:b6:48:
85:ef:8a:af:2e:a4:91:b3:e1:c1:ce:96:cd:59:bb:
e6:7f:1c:cc:cd:2c:e2:45:52:6e:57:11:70:41:24:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:74:BC:71:CA:14:0A:3B:61:A5:8F:67:74:F5:A7:67:12:4E:E0:F0
X509v3 Authority Key Identifier:
keyid:13:EF:32:D8:BF:15:3C:04:C6:39:3B:E2:4F:06:32:43:F7:E8:A7:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-8y2L8VPATGOTviTwYyQ_fop-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/14821a-2119-4771-8c76-387706c2a849/1/E-8y2L8VPATGOTviTwYyQ_fop-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:8f:4b:50:db:d8:c2:d3:54:81:9a:25:6b:bc:54:d5:e9:e3:
36:fa:9c:2c:d6:29:69:0d:b4:e5:53:97:2a:73:6c:61:ce:31:
0e:87:3e:02:02:db:3f:57:a9:d3:4f:9c:71:9e:bc:6b:72:5d:
64:f1:66:3e:35:26:b5:36:eb:7e:7b:17:f9:fb:08:72:7b:ba:
24:88:f8:fb:9a:bf:87:6f:26:46:e3:27:ea:88:b0:6c:f8:63:
d1:0e:8e:dd:d3:89:39:f8:22:78:ff:04:b9:90:2c:a9:f1:62:
7d:02:5e:87:4d:e2:8f:91:09:dd:06:44:eb:63:d1:e6:7b:72:
8c:c4:01:78:b9:aa:ef:00:fb:ba:13:e0:48:c2:3d:00:61:0e:
ef:bb:33:ba:86:0c:8d:7b:e4:ca:a7:c8:0a:1b:44:f0:df:44:
77:f9:0e:bf:1e:5f:6b:55:70:9a:dd:c0:19:33:e9:85:aa:e3:
d0:56:64:4f:5a:49:61:68:ed:47:9a:2e:c5:d7:41:ab:3e:08:
0d:19:95:1f:f7:e5:78:23:c0:0b:ca:8c:02:2e:4e:64:cd:2d:
93:9a:3d:cb:2a:07:54:6b:01:75:a6:da:28:dc:81:72:0d:8c:
aa:fa:fd:f2:88:c0:29:34:ca:42:19:97:e7:c2:c7:df:de:6d:
db:11:93:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:49 2025 by rpki-client