Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
File: 8FAUfun2L5cEI8vYttUupfSg7aU.mft (raw, json)
Hash identifier: NlPZUYcjdeNiahg2p1HKKfO8kNqs0Q4CEaeW0NVVSKE=
Subject key identifier: D8:76:1E:08:0D:71:E0:10:B9:4E:E9:0C:C4:BE:B8:0B:59:FD:B3:CA
Authority key identifier: F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
Certificate issuer: /CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Certificate serial: 0197B7B327673D44CC54260C6770B17ED0AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
Manifest number: 0103
Signing time: Sat 28 Jun 2025 18:01:00 +0000
Manifest this update: Sat 28 Jun 2025 18:01:00 +0000
Manifest next update: Sun 29 Jun 2025 18:01:00 +0000
Files and hashes: 1: 8FAUfun2L5cEI8vYttUupfSg7aU.crl (hash: lvWBFLsqIDI4frX7B68U+kBzwwZbLRpH7ssWPcILULk=)
2: I9B7Iw-lVDjKZXQpLdWJsK0y0wg.roa (hash: 51ni5eAnE+Uva7Z7eVwqTn8UmbMwpkaozroHS0ckX3Q=)
3: uYmDkNSOTpoFpFn87a-aXY254ZI.roa (hash: f1Ff5ggY03B285EwxB+EjeSorrx1qWrOpvl1cl092pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:27:67:3d:44:cc:54:26:0c:67:70:b1:7e:d0:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f050147ee9f62f970423cbd8b6d52ea5f4a0eda5
Validity
Not Before: Jun 28 18:01:00 2025 GMT
Not After : Jun 29 18:01:00 2025 GMT
Subject: CN=d8761e080d71e010b94ee90cc4beb80b59fdb3ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:dd:c0:7f:6c:89:a9:d8:9b:09:93:be:7b:5a:
7b:3a:98:90:c2:a9:a9:34:73:3e:c0:7b:e3:e3:53:
92:ce:41:8c:e4:fd:4c:bd:fb:50:6e:68:eb:ea:b3:
61:4c:a1:24:89:cb:c9:4b:fe:1d:bc:26:eb:69:c4:
7c:fb:86:54:ee:2c:48:20:37:d7:c9:ef:0a:27:55:
e6:0f:10:ce:34:0f:c3:a3:31:41:14:b4:a6:33:43:
78:cb:49:b9:8d:c0:0c:b4:d8:97:83:4f:b8:34:67:
c3:a8:71:8d:55:c0:24:78:91:a6:57:02:0f:82:c2:
3d:d8:a3:17:8c:7f:30:fe:81:b8:22:0c:79:71:cf:
53:39:c7:15:01:f1:0e:bc:e1:05:f4:19:65:a6:30:
05:6a:c9:a0:6d:34:20:26:93:4f:c7:b1:44:d8:0b:
58:5b:85:24:02:c5:6b:be:6b:c6:e5:2f:25:2a:cc:
0e:30:2c:45:98:45:5b:d6:cc:d8:17:ec:63:46:86:
a5:d2:97:0f:0e:69:cb:a2:14:11:bf:a4:b5:65:85:
8e:dc:b4:61:48:e2:58:fd:ef:e6:2e:bd:9a:53:e2:
7b:0a:53:a6:e1:b6:18:4a:8b:2b:62:bf:fb:01:46:
c7:17:b7:55:5c:a9:ab:01:82:ee:15:24:89:50:24:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:76:1E:08:0D:71:E0:10:B9:4E:E9:0C:C4:BE:B8:0B:59:FD:B3:CA
X509v3 Authority Key Identifier:
keyid:F0:50:14:7E:E9:F6:2F:97:04:23:CB:D8:B6:D5:2E:A5:F4:A0:ED:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FAUfun2L5cEI8vYttUupfSg7aU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/072105-49ef-4903-9695-eeb865d10dba/1/8FAUfun2L5cEI8vYttUupfSg7aU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:eb:c9:38:db:07:87:43:4b:76:54:50:30:30:80:9a:59:fa:
84:15:c0:f8:a9:75:7a:78:7d:c4:58:50:59:c5:58:d7:b2:ca:
63:2d:b8:12:fa:3a:dd:a9:e1:d2:b8:b2:6b:32:ea:be:82:f2:
63:d7:c5:be:9a:33:86:6c:ca:c3:e7:b0:ff:cd:a1:50:61:e0:
b7:82:ad:f3:11:c1:d6:ab:fd:70:15:1d:3e:db:10:41:1b:8d:
2a:9d:b9:e4:87:b9:60:1c:d0:a0:8e:4b:a9:3d:bc:8b:4e:67:
25:b9:2b:53:c2:ba:8e:ae:33:19:71:3c:f0:29:47:54:25:64:
cb:75:ad:a6:cb:e9:8f:90:a6:8d:ff:6a:89:f0:7e:35:50:20:
b8:1f:da:61:9f:da:72:b9:5a:8a:1d:14:f1:bf:bc:1b:56:a9:
0d:6f:10:fb:10:c8:10:37:20:50:3b:d3:80:4a:16:87:fb:8c:
7e:47:21:cb:9e:db:cb:24:d9:35:c0:8d:d0:4a:66:78:cf:1e:
ef:cb:db:de:a9:83:80:58:30:21:83:e0:45:70:5a:fa:b7:a2:
af:48:a4:71:b1:80:2a:49:90:f9:f0:6e:28:2e:20:5f:37:48:
d6:2e:d1:19:41:d1:f1:49:3c:ae:8b:4f:34:29:bc:bb:ff:57:
ed:47:9a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:21:12 2025 by rpki-client