Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
File: 8bi7seGGpZnUzAWMq_TfDiUvMfo.mft (raw, json)
Hash identifier: j1BKDXwAJoc/A9EwiMAjtP9onUoK0FbiB+LxTK0no4w=
Subject key identifier: 92:36:6E:0C:F8:06:C6:A1:A0:3B:79:67:1B:A3:38:A7:9A:1A:4E:67
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 0197B5FC3F5ED3C1222D0E8AB5E9EAFC2760
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
Manifest number: 15A3
Signing time: Sat 28 Jun 2025 10:01:36 +0000
Manifest this update: Sat 28 Jun 2025 10:01:36 +0000
Manifest next update: Sun 29 Jun 2025 10:01:36 +0000
Files and hashes: 1: 8bi7seGGpZnUzAWMq_TfDiUvMfo.crl (hash: ts+JdPA4tPeRwKXGD2Qb3efYAjlwg7yMampjWFWsbZc=)
2: j0TS7sWufeH5UA9R8L5Lar1dfN8.roa (hash: 4uoOp+ywbPIH2GvAsL/CI2u9RgmZPn6i2PjYhgr/qBg=)
3: rPef_fSf30lKUIt0FiquYhoXATY.roa (hash: Z0VOnnMDQ8rVUNalJ6zJanV6z7u+O1OwYpukhKJNqvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:3f:5e:d3:c1:22:2d:0e:8a:b5:e9:ea:fc:27:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Jun 28 10:01:36 2025 GMT
Not After : Jun 29 10:01:36 2025 GMT
Subject: CN=92366e0cf806c6a1a03b79671ba338a79a1a4e67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3d:9f:e9:a1:6e:c1:db:93:78:a6:27:f3:6f:
21:b0:af:f1:fe:ae:16:17:d8:f3:46:98:85:f8:f3:
83:5c:a9:89:18:94:f6:9e:b0:84:33:81:34:64:98:
d2:92:7f:d1:b2:fc:ba:9b:57:f1:1b:74:38:68:49:
d2:4d:a2:c2:ce:30:91:87:5e:bd:06:18:e7:e3:e3:
5f:92:59:37:af:8b:2e:a2:e1:92:ff:08:ee:44:7b:
2c:05:76:7c:4e:03:23:52:ae:f0:ac:d6:e7:a5:1e:
13:8a:5e:e4:ed:74:16:86:b3:22:f0:16:9b:b1:0b:
ad:f7:d3:f4:23:71:96:67:d3:e8:a2:4d:a7:77:c9:
99:1c:c4:b2:6d:aa:25:d1:fb:b7:11:1a:3a:5d:5d:
b7:46:22:9a:ce:40:cf:e3:31:2a:60:3f:f1:d7:48:
c9:88:2e:f5:29:42:37:e4:b2:5b:08:ff:d5:3e:2e:
04:b0:61:bf:d7:ba:27:f0:23:36:fb:25:a8:ea:86:
2d:02:8d:08:47:b0:a4:e3:eb:6d:ec:80:24:c7:82:
f7:66:fc:6c:0c:3b:d3:d7:e5:25:4e:7d:5e:1c:ed:
d0:9f:3e:32:9c:b9:47:8d:ba:ca:e5:13:25:3e:a1:
6e:5f:fe:a6:b2:a0:d8:4a:6e:8f:95:b3:c8:49:2e:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:36:6E:0C:F8:06:C6:A1:A0:3B:79:67:1B:A3:38:A7:9A:1A:4E:67
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:c1:49:df:7c:38:03:71:50:20:f2:b9:59:fb:cb:0d:1b:23:
c4:fc:c0:e4:69:ef:72:4b:26:27:e6:ed:51:e0:f5:a7:06:39:
43:76:30:b8:12:be:82:ca:8e:1b:2c:75:be:7e:20:21:b5:95:
f3:a6:b0:fb:ab:c6:22:3c:f0:b7:d0:5c:97:7b:7c:7e:ed:f9:
84:94:20:ef:02:2e:2b:f4:be:7c:25:9c:57:ef:34:f3:81:c4:
76:8f:07:e3:f7:48:dd:6a:5f:99:c0:85:11:b1:22:50:16:f5:
81:a7:5d:b0:4e:81:ff:26:ba:e7:a7:da:90:33:60:30:3a:c7:
a7:a3:f3:a6:b8:c7:00:38:ce:de:8c:91:c4:d3:c5:19:eb:69:
9c:fa:fd:a4:56:ca:bd:26:c0:e0:8c:00:55:ec:a9:b8:b6:73:
72:45:54:f8:7a:bd:58:0a:70:59:7c:7e:f1:75:e0:d8:88:f6:
b1:9b:e1:a9:44:a8:98:5d:4f:df:bc:5e:69:fc:33:6a:67:59:
cd:1b:60:71:f0:8c:ec:59:76:82:4a:01:55:2a:36:65:ce:bb:
b6:12:d5:2e:5e:c0:67:50:46:72:e6:51:1d:3b:e3:62:8a:04:
e0:0a:72:d3:f4:92:31:87:60:aa:37:55:de:a1:67:d8:ef:61:
58:b4:82:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:44 2025 by rpki-client