Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
File: 8bmuyqN97cDywE9RvJY_zS5KrMw.mft (raw, json)
Hash identifier: 5yB90zIQVIHIPPlwegZVC7Jb5e4npLbG1cgywACDgfM=
Subject key identifier: B8:5F:B8:A4:C8:C0:66:50:59:FD:3A:66:5D:14:59:B0:BE:C6:3E:C9
Authority key identifier: F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
Certificate issuer: /CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Certificate serial: 0197B6A123805BC930A27435FDFCF49EC741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
Manifest number: 03B6
Signing time: Sat 28 Jun 2025 13:01:43 +0000
Manifest this update: Sat 28 Jun 2025 13:01:43 +0000
Manifest next update: Sun 29 Jun 2025 13:01:43 +0000
Files and hashes: 1: 8bmuyqN97cDywE9RvJY_zS5KrMw.crl (hash: DUMw0CWg0YGBzYC7wEaNmkXmVc/pn3L6YItKORzcfaw=)
2: wN3I7D42_Scvh3kTX6wbZgc3STg.roa (hash: +5WZ8eZml5reiYd5KuhYrJcZjNCC9ofGPFNFq+2Hrx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:23:80:5b:c9:30:a2:74:35:fd:fc:f4:9e:c7:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b9aecaa37dedc0f2c04f51bc963fcd2e4aaccc
Validity
Not Before: Jun 28 13:01:43 2025 GMT
Not After : Jun 29 13:01:43 2025 GMT
Subject: CN=b85fb8a4c8c0665059fd3a665d1459b0bec63ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b4:a5:99:dd:48:97:4d:d3:d6:44:11:c2:99:
a0:eb:9c:c9:77:42:52:d3:b3:dd:3b:a5:e1:33:c0:
61:8d:6c:e9:ef:5a:66:aa:54:99:8e:11:fb:fd:ca:
c4:04:a2:53:11:35:41:d1:8d:e8:9a:ce:e2:28:fb:
9c:3f:f3:f6:2f:91:fc:6f:58:dd:54:57:93:f2:0e:
a5:1e:c5:70:76:21:85:92:8d:7f:7a:3e:f2:66:0f:
80:25:2b:b9:99:6b:39:fc:25:58:53:8b:06:77:6c:
0b:d4:b9:83:01:c9:a8:18:d7:9f:5c:f7:ea:31:f1:
83:35:5c:41:62:d0:4e:20:b4:23:dc:46:1a:2b:d3:
d1:b2:ed:3a:ce:45:31:32:f1:71:39:2a:18:c6:5b:
f9:f8:c9:c2:cd:b4:e9:92:6e:f7:dd:95:98:b0:7b:
8b:27:2f:86:52:e5:52:aa:40:ca:d1:39:93:58:d0:
50:2d:9e:66:15:90:0c:76:0f:eb:0b:99:63:95:68:
3f:82:80:0a:4f:31:23:af:9b:67:60:2d:ba:78:1a:
73:46:12:b3:e0:ae:92:87:38:09:62:3a:a5:5d:4a:
46:26:ae:53:40:f1:72:98:98:15:e3:81:0e:39:7c:
24:eb:67:a6:18:c2:55:d9:ec:75:d4:0f:db:17:b8:
97:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:5F:B8:A4:C8:C0:66:50:59:FD:3A:66:5D:14:59:B0:BE:C6:3E:C9
X509v3 Authority Key Identifier:
keyid:F1:B9:AE:CA:A3:7D:ED:C0:F2:C0:4F:51:BC:96:3F:CD:2E:4A:AC:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bmuyqN97cDywE9RvJY_zS5KrMw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/4bd70c-094a-43d0-adda-04fbd681896a/1/8bmuyqN97cDywE9RvJY_zS5KrMw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:c8:91:77:0f:d5:62:87:86:75:10:63:c0:14:b2:ba:77:ae:
3e:fe:d7:e0:28:8e:12:90:e8:c9:31:2f:15:0f:84:78:77:37:
f2:0d:77:c7:12:8e:ee:2a:dc:57:33:4c:dc:63:bb:d2:ff:d9:
41:d3:09:b4:df:15:d3:73:37:07:01:7a:35:de:57:10:7e:b7:
ff:f4:7d:ea:37:bb:93:1c:6a:9f:8f:45:8b:bf:ca:3f:f8:38:
26:66:56:1c:2d:49:9e:8e:44:35:1d:97:50:0e:89:1f:7d:f2:
15:7e:b4:5f:dc:0e:8a:3a:e0:58:53:34:9e:50:a7:da:e7:60:
9f:63:0b:d9:e3:29:4c:10:dd:f1:59:76:e8:59:8b:38:60:28:
3b:75:a2:e6:9d:67:24:4f:dd:3d:ab:02:d1:05:df:81:41:55:
da:c6:33:3e:43:a9:72:c8:31:5c:f1:d3:c4:75:56:46:22:f0:
e2:bb:a2:91:cc:c8:92:07:0d:f0:92:fe:f6:ba:2e:7b:ed:a8:
fd:dd:fa:ef:01:88:25:e7:a7:8a:74:b9:ad:eb:70:c9:aa:13:
49:ea:b8:82:14:b3:0e:0e:21:fe:d5:9e:36:5b:c3:16:3d:eb:
6d:a9:10:33:54:d8:64:40:99:38:4d:e6:ab:dc:8b:e9:78:0c:
b5:39:22:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:09 2025 by rpki-client