Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: Om4i5IpmWsJQv+AeghfdYN9+zslG0eIv2UCEulFqjno=
Subject key identifier: CA:FF:47:28:BF:55:80:05:03:8A:13:B0:0F:7D:D6:0E:01:89:C9:AC
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 0197B77C2A27DFAFEB45B9BAE67D97E61ADC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 0B0E
Signing time: Sat 28 Jun 2025 17:00:56 +0000
Manifest this update: Sat 28 Jun 2025 17:00:56 +0000
Manifest next update: Sun 29 Jun 2025 17:00:56 +0000
Files and hashes: 1: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: udOo1P6aL8VV63Xkg1glfRGT1vpuCj3aMZbaCTMy0fk=)
2: ww5W_AzyvORyhz7R6e4M2kGu004.roa (hash: h+p5BWiNgVQT+Ps96Xby3wyi4OgT8Zpuq9hDEAln8lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:2a:27:df:af:eb:45:b9:ba:e6:7d:97:e6:1a:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Jun 28 17:00:56 2025 GMT
Not After : Jun 29 17:00:56 2025 GMT
Subject: CN=caff4728bf558005038a13b00f7dd60e0189c9ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:35:ea:e5:72:66:ff:d2:d8:1f:04:3e:9e:
aa:25:5d:c7:e0:32:6b:73:e4:f6:82:70:0f:0c:34:
b6:4f:d2:1f:7c:d0:cc:1b:31:ac:06:c2:ee:23:b4:
ab:8b:5a:39:89:4a:6c:90:b8:3c:f9:bc:9e:db:64:
76:8f:c8:ad:57:d3:ee:91:10:84:63:bd:1c:2e:5a:
54:cd:a7:50:a4:3b:19:52:0d:3b:a9:b1:32:89:0c:
b2:fb:57:e4:f9:3c:0f:f8:64:67:8c:af:a9:53:29:
19:2c:e9:9b:de:fb:8d:80:41:4a:d4:1e:4f:d0:c4:
12:d9:a0:ff:f9:ff:15:76:84:6c:73:74:ad:83:0f:
64:ae:49:4d:f6:56:5b:81:ac:66:43:10:1a:bb:14:
1e:ac:c5:94:45:20:ad:51:e7:28:e2:b1:17:f5:bf:
a8:44:e7:df:6f:0c:54:a5:3a:95:2c:e9:bc:ae:3d:
41:59:c9:67:7b:7f:3b:3f:a1:09:6e:4f:ad:f2:ed:
56:4e:00:03:fa:d4:fa:17:3e:82:78:83:41:be:2c:
94:08:55:0d:6f:f9:97:13:0d:42:39:4e:23:fb:8b:
8c:c9:6d:fa:03:18:ff:1f:35:73:6f:4f:4e:12:be:
d4:16:13:28:ee:94:cb:c2:7e:6e:4e:02:5c:04:4c:
8f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:FF:47:28:BF:55:80:05:03:8A:13:B0:0F:7D:D6:0E:01:89:C9:AC
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:12:c9:bc:7f:28:4c:ad:1b:75:be:8b:6b:ac:27:a6:b9:74:
99:ec:77:14:d0:d7:03:74:79:68:0a:f3:db:fe:54:a5:bf:e6:
33:e3:d0:20:55:67:3a:ed:30:ff:66:3d:ac:98:dc:9d:0d:b0:
f8:50:c6:23:b0:d5:d3:cc:a0:17:30:c3:77:0d:4e:0f:a8:8a:
dc:03:0d:0d:47:da:1b:c7:e2:5e:ba:45:0d:4f:74:5f:6f:ba:
5e:a2:28:df:62:79:d8:50:34:17:ed:bb:ea:ea:ab:22:11:4c:
df:c8:6a:d2:9e:c9:17:ee:a3:cf:25:a2:51:51:a4:30:fa:1a:
5d:10:b7:ce:40:8d:96:ad:6f:e8:45:31:4c:b6:c2:71:81:8c:
4d:a1:e5:de:4f:e8:3d:9b:a1:35:94:6d:e0:19:56:65:d9:fe:
8e:c4:0f:40:c8:31:4e:9d:28:b5:ac:7f:3f:50:3a:a6:be:be:
f2:f9:c8:4a:05:82:b2:6d:38:b5:ae:e2:55:a4:4c:f8:ec:55:
cc:ad:a3:f9:b4:aa:7d:1c:b8:ff:25:fb:ca:47:29:88:93:c6:
c0:5b:ee:0a:af:62:a0:62:0d:f8:5e:84:0b:ba:b4:30:c1:81:
35:4b:2f:60:e1:a6:9f:71:82:b6:63:fa:2e:61:4b:53:67:6f:
ac:c2:df:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:57:47 2025 by rpki-client