Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
File: _8qZfTkM1uRuASjlDXC4Tnq2dA8.mft (raw, json)
Hash identifier: C7FuyhHM/9xgvQ12QAcppFn8oFXRXxGAAzVfYliV4wA=
Subject key identifier: DB:06:A0:FE:0D:EB:56:55:5D:8F:93:11:29:1A:BA:71:13:50:A6:81
Authority key identifier: FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
Certificate issuer: /CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Certificate serial: 0197B5FC449611A7898CCBDBA6533EFE695E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 10:01:38 +0000
Manifest this update: Sat 28 Jun 2025 10:01:38 +0000
Manifest next update: Sun 29 Jun 2025 10:01:38 +0000
Files and hashes: 1: 2xBb1eN1uQhPtol-uKswad7hTL8.roa (hash: dXJffbqWVGzT51NatOrFAZ7XiueTLyhLa5jFxa/I29Y=)
2: 44uLXBcL_RZwFzmvHMDFnzRLsrc.roa (hash: ebcHWLKhk2lxI2aGu12w8EL09XqOe4qlsJc7YtoQwgs=)
3: _8qZfTkM1uRuASjlDXC4Tnq2dA8.crl (hash: CvUgDxV3yqNDSS+Xfg3WHh5rzBihVJ9tWCytrS7jf0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:44:96:11:a7:89:8c:cb:db:a6:53:3e:fe:69:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffca997d390cd6e46e0128e50d70b84e7ab6740f
Validity
Not Before: Jun 28 10:01:38 2025 GMT
Not After : Jun 29 10:01:38 2025 GMT
Subject: CN=db06a0fe0deb56555d8f9311291aba711350a681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:a5:9b:79:d2:c5:36:b8:18:86:74:9a:9e:86:
b9:7f:9a:d3:17:8f:ac:6d:de:c3:dd:5a:94:21:b3:
87:cb:2e:fd:1a:57:a1:b8:3e:b7:e5:ca:08:f6:a7:
9a:15:cd:88:12:a6:a9:c9:36:73:bd:6c:e1:66:3c:
f4:1a:bb:69:7e:ae:27:d7:58:be:19:35:a9:12:38:
df:2b:a4:81:04:5d:01:bc:20:35:07:15:03:7b:c3:
a7:f4:f4:92:f7:a8:2d:b4:82:aa:92:bc:42:0b:1a:
0f:1d:1b:97:eb:9c:6f:24:13:7d:90:b0:f7:12:89:
17:e5:9d:fc:b3:8c:b0:65:e0:05:a5:6d:0f:31:3e:
03:96:dc:33:e1:fa:06:86:72:2e:dd:f5:2a:71:ca:
9d:7a:a0:06:bd:b9:01:4a:97:b3:b7:bc:ca:5d:9c:
10:63:95:af:be:02:10:17:b2:36:99:37:da:04:73:
c6:9b:66:7d:40:f9:07:3d:03:2f:e4:08:08:22:44:
81:ea:76:e5:cc:c3:0e:4e:d3:eb:3e:1b:90:34:e0:
f0:f9:b1:a6:00:d2:e1:53:8a:ae:e7:92:39:2c:f1:
1f:33:61:96:cc:66:00:3d:32:bf:96:04:16:9a:2b:
a0:c8:7a:69:69:63:a7:bc:97:48:03:4c:0c:d8:8c:
6d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:06:A0:FE:0D:EB:56:55:5D:8F:93:11:29:1A:BA:71:13:50:A6:81
X509v3 Authority Key Identifier:
keyid:FF:CA:99:7D:39:0C:D6:E4:6E:01:28:E5:0D:70:B8:4E:7A:B6:74:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8qZfTkM1uRuASjlDXC4Tnq2dA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/af0a2a-7ebf-4dc0-a319-819b7a7ec434/1/_8qZfTkM1uRuASjlDXC4Tnq2dA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:ff:2d:f1:0c:a1:c3:ac:1d:28:64:04:4a:0a:c0:4f:ca:ec:
f9:26:c2:8b:72:42:47:1f:22:34:26:cd:b9:95:c9:0b:06:07:
6b:3b:b1:22:d5:5f:a3:15:94:2c:ee:35:14:fe:a3:3d:eb:75:
37:7f:46:4b:08:eb:e9:11:45:8f:1b:56:6f:23:74:50:4f:85:
e4:7b:73:4f:72:27:f5:14:dd:67:c0:a6:3b:f3:79:c8:02:41:
09:81:9d:04:23:00:78:f6:38:06:41:d4:a9:7e:05:0c:9c:80:
fc:b0:41:c5:43:55:0a:e0:5e:c8:77:51:85:ac:a0:43:6e:d9:
77:74:a2:ab:b0:73:ec:f3:d1:a2:56:6a:bc:9e:32:4f:d9:b0:
95:35:b8:7b:42:aa:0d:d4:24:ac:cd:75:69:bf:b7:da:5f:4e:
e0:26:ee:1b:53:34:8d:16:16:cb:07:84:ec:0a:a3:9b:91:28:
39:0c:90:6c:22:1f:52:7c:f7:ae:37:3a:05:9f:f4:cf:bd:0b:
1f:4d:4c:ec:31:26:6c:cf:d9:02:b3:22:65:40:cf:3e:e0:ba:
c4:a9:ea:93:96:bb:5f:ea:a7:3f:dc:d1:b3:95:a7:02:7e:de:
4a:54:9d:c5:a7:22:aa:2a:c5:4b:75:ad:a0:22:74:68:34:66:
12:ce:89:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:20 2025 by rpki-client