Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
File: 8gI-dqaOpsn3DT6nLfhOU9whck8.mft (raw, json)
Hash identifier: OczYcxiSNpqrU+Fz3BRbfzi+odcvA2cMV+aES5UH420=
Subject key identifier: 1C:45:2B:80:12:C3:E2:BE:FC:B2:CE:07:60:9C:D0:3E:6A:AF:81:21
Authority key identifier: F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
Certificate issuer: /CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Certificate serial: 0197B88FF30A4CD578E8E1BD580AC46B1E50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
Manifest number: 0E0A
Signing time: Sat 28 Jun 2025 22:02:10 +0000
Manifest this update: Sat 28 Jun 2025 22:02:10 +0000
Manifest next update: Sun 29 Jun 2025 22:02:10 +0000
Files and hashes: 1: 8gI-dqaOpsn3DT6nLfhOU9whck8.crl (hash: UC5JGlouPyEMy6SZtMuhRXvz7NyqW4wCI1xAiYuE7QA=)
2: xmm2JL7TcI6ebRwScNNxmj8JWuo.roa (hash: fkFUQl1m0mbIlDS4H4YUitr8IcfvKPdCtORJm2ZIyMA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:f3:0a:4c:d5:78:e8:e1:bd:58:0a:c4:6b:1e:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2023e76a68ea6c9f70d3ea72df84e53dc21724f
Validity
Not Before: Jun 28 22:02:10 2025 GMT
Not After : Jun 29 22:02:10 2025 GMT
Subject: CN=1c452b8012c3e2befcb2ce07609cd03e6aaf8121
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:46:a1:09:02:7c:d2:48:1f:85:ef:85:75:43:
ba:d5:10:47:3e:d3:0b:7b:6f:56:9a:81:95:ba:da:
78:06:9c:9c:5d:e1:41:ae:06:17:01:3d:69:9a:60:
cd:17:21:19:f2:1b:b2:b9:5d:d4:90:ce:ef:7d:3e:
3c:cd:82:e8:1d:7f:0b:86:d9:1f:a7:6e:f8:0b:28:
d2:57:ec:fe:13:38:ff:6a:b8:15:5f:c7:8e:e4:d1:
6b:c8:22:b1:60:5f:d6:9b:45:7e:4b:22:56:9e:f1:
78:7e:62:7f:78:50:c1:ec:db:7c:81:48:96:de:11:
55:a7:d8:41:2e:c2:a6:0e:e3:0b:d8:32:60:06:f3:
a4:12:b2:b6:da:c1:66:00:c6:26:7d:6b:15:cf:66:
c4:6d:bf:06:06:1c:5c:ee:b0:8f:92:36:6a:79:35:
51:c2:2c:f6:17:fd:6b:03:35:92:12:9c:dd:75:32:
74:31:5f:75:89:f8:15:0d:fe:25:b9:74:de:8a:3a:
b5:a7:4d:ea:82:68:32:25:4a:52:0c:e7:2d:ee:02:
d8:7c:6f:83:95:67:09:18:ca:41:b4:da:5f:dd:c4:
ea:82:66:e8:49:a0:b1:dd:f4:2d:03:45:85:05:0b:
58:26:6c:b7:82:b4:9f:b6:36:9f:77:e6:54:08:e4:
d6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:45:2B:80:12:C3:E2:BE:FC:B2:CE:07:60:9C:D0:3E:6A:AF:81:21
X509v3 Authority Key Identifier:
keyid:F2:02:3E:76:A6:8E:A6:C9:F7:0D:3E:A7:2D:F8:4E:53:DC:21:72:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gI-dqaOpsn3DT6nLfhOU9whck8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7e8ed6-ae72-4d3f-999d-67c3affbd1aa/1/8gI-dqaOpsn3DT6nLfhOU9whck8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:63:e4:53:4f:c3:63:24:d9:cf:6a:9b:06:6b:09:eb:b4:c7:
cc:97:b4:33:ea:ed:dc:e0:c8:c0:5f:fa:d4:13:e6:bc:c0:bf:
77:de:08:c4:8b:10:a0:7e:99:8b:fd:b0:8b:0f:f4:ff:32:84:
6e:69:97:ad:8f:1a:49:4b:2b:0c:9e:60:be:a9:82:df:91:d4:
69:62:c4:13:54:9c:99:8d:e3:98:2e:74:ee:b3:cd:fa:a6:a6:
67:df:61:6a:e6:30:e9:1a:c4:f2:7c:c9:24:60:c1:80:bf:9b:
c0:23:a5:b1:c8:39:e7:bb:f4:8b:0f:69:22:0a:88:20:0a:92:
97:de:47:62:1f:1b:59:53:92:33:3e:46:31:fd:e8:7d:35:74:
98:78:bf:c0:57:1e:68:3b:86:d4:61:f3:88:4e:2a:50:a1:83:
8d:d9:62:91:bd:6b:04:34:d4:3e:9d:03:69:f3:ed:8b:11:40:
4c:a6:b1:70:2f:83:68:a9:38:13:43:a6:bd:8a:69:16:a7:f7:
3f:7f:fd:fb:8c:8a:4b:ec:a5:77:4b:8a:ac:c0:d6:83:33:b3:
21:dc:6c:4e:d0:1c:37:c4:9b:05:d6:c2:d5:41:6e:6b:f1:50:
3e:78:17:22:8b:8e:8f:28:6c:09:8a:32:a0:76:9a:b9:71:81:
b2:cd:12:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:26 2025 by rpki-client