Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
File: 8TWf8QwVZEIel0VzrOG6YjM7gqc.mft (raw, json)
Hash identifier: 7C2ikrFhNoD8FQ6kTeUVr5hfLj0YM2+uKkCrxiRCga0=
Subject key identifier: 9D:7A:46:FD:A1:39:11:4F:EB:B8:78:44:98:B2:02:F4:2A:07:3B:04
Authority key identifier: F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
Certificate issuer: /CN=f1359ff10c1564421e974573ace1ba62333b82a7
Certificate serial: 0197B6A1C039245FEC5F8B416C55A9C35DCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
Manifest number: 124A
Signing time: Sat 28 Jun 2025 13:02:23 +0000
Manifest this update: Sat 28 Jun 2025 13:02:23 +0000
Manifest next update: Sun 29 Jun 2025 13:02:23 +0000
Files and hashes: 1: 8TWf8QwVZEIel0VzrOG6YjM7gqc.crl (hash: vVzqXPfa+/Jrl42uL/2CqixMlSPhAIU+32tWDdg28rE=)
2: xcycZms0_ZHCVQVtErEWcPT6uzM.roa (hash: LGvEW3RDqUd1ArWiz/8ADiBje4yqqRUes0HgBtn3AOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:c0:39:24:5f:ec:5f:8b:41:6c:55:a9:c3:5d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1359ff10c1564421e974573ace1ba62333b82a7
Validity
Not Before: Jun 28 13:02:23 2025 GMT
Not After : Jun 29 13:02:23 2025 GMT
Subject: CN=9d7a46fda139114febb8784498b202f42a073b04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:0e:da:7b:75:f6:58:17:21:f3:15:71:90:b2:
2f:53:cd:15:70:60:35:fc:7a:a2:43:32:ce:d4:8f:
1b:b6:fc:8d:29:77:b2:16:df:5f:c1:af:8b:37:48:
3e:a6:84:42:ff:fa:2f:1f:d8:a7:63:07:08:5b:02:
97:c6:eb:81:83:4b:1b:2a:f2:4c:cd:52:ec:f4:e6:
ef:38:0e:1b:68:52:7e:db:11:b8:9e:90:05:0d:de:
de:e2:f7:e3:dc:e8:3d:33:b1:bc:f3:9b:71:1e:3b:
f4:c5:0a:ee:a1:0e:ac:72:d5:fc:a4:d6:33:29:98:
3a:04:cd:e8:d6:51:d6:f7:1c:de:09:79:24:7d:15:
13:48:42:b1:0c:38:ee:45:a2:b0:8d:65:44:37:71:
7a:2a:c6:6f:8e:8b:29:1f:96:22:b9:95:f3:06:0b:
dd:24:a0:a8:27:16:1c:89:ec:af:2d:9a:50:57:fa:
c9:b1:10:e2:54:d9:7d:6a:06:16:93:54:3c:f8:a7:
2d:5b:10:0a:fd:85:be:f7:91:fc:a2:99:51:09:d8:
32:b1:2c:2b:f9:65:a2:1d:87:b3:e3:61:e1:5f:15:
64:b8:82:55:4a:53:8a:b5:c4:58:a1:9f:47:24:f0:
32:4c:28:fb:34:c3:05:4d:e4:b0:c7:6f:01:0b:b9:
56:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7A:46:FD:A1:39:11:4F:EB:B8:78:44:98:B2:02:F4:2A:07:3B:04
X509v3 Authority Key Identifier:
keyid:F1:35:9F:F1:0C:15:64:42:1E:97:45:73:AC:E1:BA:62:33:3B:82:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TWf8QwVZEIel0VzrOG6YjM7gqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f8dff9-6dac-4313-9980-ab4ba332fe15/1/8TWf8QwVZEIel0VzrOG6YjM7gqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:2e:24:d4:e4:e5:3b:23:1e:67:c3:19:8e:50:8d:02:9d:0e:
3c:7a:fc:4d:20:41:13:da:3e:9f:27:a3:a1:9b:a9:b9:15:40:
61:cb:02:f2:69:57:79:86:31:59:1e:b7:72:46:48:27:bf:ef:
63:dc:cf:14:a0:b1:c9:87:c9:86:0e:77:b6:fc:21:fb:d3:56:
cc:6b:26:4d:e0:cd:bb:36:89:be:58:cb:67:e6:37:bd:83:92:
f1:cc:f4:6f:97:5f:9e:a5:d2:7e:50:bd:1b:21:a7:f7:29:ba:
b3:54:1f:17:ed:da:2c:f9:e5:31:8f:40:71:ba:f1:7d:96:bc:
99:16:28:ce:99:cb:71:ed:30:0c:0e:1e:b9:e9:ac:55:a7:30:
03:3f:44:65:12:21:ee:94:69:6c:df:0a:b9:e5:e8:d3:d0:1b:
2e:c1:d1:13:e5:bd:80:1e:bf:a5:d9:2f:c0:74:a9:4f:3f:62:
61:3a:6d:5a:6e:20:f1:69:df:f1:2f:3a:2b:3c:6a:43:73:4c:
4b:14:ba:5d:6c:14:c5:ca:f2:a1:57:f8:c2:b2:2b:78:3f:9d:
b9:43:1b:12:cf:11:a7:5b:9c:30:48:7e:73:27:58:2c:45:0e:
ed:b1:8b:b8:e3:40:c6:8f:c9:0d:19:31:87:7e:b3:4f:ba:f9:
a7:4c:cd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:09 2025 by rpki-client