Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
File: i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft (raw, json)
Hash identifier: 9L+LfJzF/sgJeXgI22I0A3arkf0wHuMXyEzxPFdp5dw=
Subject key identifier: 46:14:B9:E3:59:4C:6D:96:36:25:17:DE:67:F1:D4:E1:4E:BE:0E:8A
Authority key identifier: 8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
Certificate issuer: /CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Certificate serial: 0197B70E965972956587DD3F0CAE3E3A0EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
Manifest number: 0ECC
Signing time: Sat 28 Jun 2025 15:01:15 +0000
Manifest this update: Sat 28 Jun 2025 15:01:15 +0000
Manifest next update: Sun 29 Jun 2025 15:01:15 +0000
Files and hashes: 1: i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl (hash: vVNXglA21XgpLihNDnufvUXJukOPL1TvHTajAomg6rY=)
2: nqo_O7xWpllnpXWgXV-EBK2yLMY.roa (hash: v3gPcs+xtmwPaPJ3A0/t7F8YEQgyHeonW0dBXWdUhwo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:96:59:72:95:65:87:dd:3f:0c:ae:3e:3a:0e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bca0edf122f4cf98b082dd4cc0d84f5ede804b9
Validity
Not Before: Jun 28 15:01:15 2025 GMT
Not After : Jun 29 15:01:15 2025 GMT
Subject: CN=4614b9e3594c6d96362517de67f1d4e14ebe0e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2a:c4:ea:45:33:37:c4:ab:ef:21:0a:69:d7:
6a:8d:1d:80:57:7f:3a:a3:81:4a:44:3c:21:5b:df:
fb:96:42:a0:85:b4:6e:73:1e:1c:89:1e:81:ce:3b:
26:f9:16:d6:d4:83:74:02:f4:77:57:7a:e4:aa:b2:
ef:35:12:19:bd:82:37:c8:95:c6:b8:e0:d4:c0:ac:
35:cc:d8:6e:e4:26:d1:5e:da:a9:e1:17:a5:e3:1b:
20:20:f9:dd:7b:06:f1:0a:02:f1:88:3f:78:cd:3a:
4e:7e:7c:03:6b:d1:1f:ae:ae:31:1f:79:25:0e:af:
94:37:60:47:2e:63:02:7e:07:82:cc:67:0d:21:bc:
53:d1:cb:32:b0:38:55:ae:f5:e9:4b:e1:fb:71:5b:
f2:4a:9e:c5:e2:ef:1b:32:6e:58:f6:b1:a3:3c:c9:
c0:1d:22:d5:a9:2d:7b:1c:54:0f:2e:6a:b0:9f:d3:
5b:30:7b:a3:6b:de:ec:cf:a3:07:87:d2:f5:4b:77:
ec:2b:e9:d1:76:05:a7:a6:f3:d4:f4:13:78:38:8e:
da:21:ff:a4:ac:bd:40:22:e0:45:ad:73:ec:ac:59:
3a:42:02:ca:fd:a0:4d:45:84:b2:f6:5c:ab:be:20:
43:b4:e6:74:41:60:52:8d:eb:fb:82:3e:2c:a8:00:
13:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:14:B9:E3:59:4C:6D:96:36:25:17:DE:67:F1:D4:E1:4E:BE:0E:8A
X509v3 Authority Key Identifier:
keyid:8B:CA:0E:DF:12:2F:4C:F9:8B:08:2D:D4:CC:0D:84:F5:ED:E8:04:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i8oO3xIvTPmLCC3UzA2E9e3oBLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/aef0ea-9403-47fb-ad80-1eda53aebe51/1/i8oO3xIvTPmLCC3UzA2E9e3oBLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:79:35:35:71:e4:b9:aa:a1:38:fb:f4:d3:52:47:84:4c:34:
90:76:3e:1b:57:88:28:a9:93:57:b9:6c:a5:ac:1a:81:a6:e6:
2a:81:83:c0:3d:5e:2d:97:3d:04:0b:bc:44:d8:b6:c6:c1:93:
c9:33:5b:50:5e:fc:bb:84:08:47:2e:28:ea:3c:50:d4:2b:fe:
21:34:15:ea:bc:82:0e:15:72:fa:d0:9e:d3:4c:c3:b2:cf:b2:
72:c6:a9:23:51:ba:76:6d:15:b3:58:1d:22:64:c6:2b:f4:19:
fa:4c:f8:64:eb:bd:9f:56:9e:21:74:62:df:d6:25:ef:13:2a:
5e:82:29:ba:7b:3f:af:73:3b:07:c0:30:57:1a:b6:c0:af:f0:
80:a7:d4:95:97:ae:f4:03:82:29:5d:fa:8d:25:a7:81:93:21:
8a:66:25:df:d0:57:ea:38:60:9d:77:ee:f2:2c:e3:88:5c:18:
2b:d6:60:f6:80:ab:49:65:27:97:b9:ed:d7:75:53:b0:22:e4:
35:ae:72:33:f5:76:ef:fe:6c:e2:34:ff:e5:29:d2:08:ba:30:
82:f4:23:1d:a1:b1:14:7a:2d:a3:46:28:df:97:08:61:86:86:
b6:98:33:88:31:71:52:d7:73:ed:29:47:c3:f2:7f:93:93:2a:
5d:c9:07:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:43:04 2025 by rpki-client