Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
File: 8SsbaOoQk7zueNBxkubYw_cDAs8.mft (raw, json)
Hash identifier: TOoBMNLo27/IU+4T1Zlq2CgPuYF4Xt3twj/UHpRH+mA=
Subject key identifier: C5:F7:9B:5D:11:DD:0F:28:C6:13:5E:11:F2:E4:A4:F6:49:20:5C:F4
Authority key identifier: F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
Certificate issuer: /CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Certificate serial: 0197B6A06979475524017C101914F7C02471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
Manifest number: 14A1
Signing time: Sat 28 Jun 2025 13:00:55 +0000
Manifest this update: Sat 28 Jun 2025 13:00:55 +0000
Manifest next update: Sun 29 Jun 2025 13:00:55 +0000
Files and hashes: 1: 8SsbaOoQk7zueNBxkubYw_cDAs8.crl (hash: jVJAqUb3a8tJvCVbVyhIMzK5wOPFqTPrsLNyi84tcn0=)
2: bKPhCw0mFqwfHuOY5bTkew_cDWA.roa (hash: GZO9dwOguzhoWcajFIoo6bMBVjK4nlEVTDqTZEZzar4=)
3: u_s4QKsF9p1kSN0KedlqNHJpJkI.roa (hash: 8YDGRlWAcN7f5DRHYPeywi/SAyIqYgv/xJQxk+e27Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:69:79:47:55:24:01:7c:10:19:14:f7:c0:24:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12b1b68ea1093bcee78d07192e6d8c3f70302cf
Validity
Not Before: Jun 28 13:00:55 2025 GMT
Not After : Jun 29 13:00:55 2025 GMT
Subject: CN=c5f79b5d11dd0f28c6135e11f2e4a4f649205cf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fc:8c:cf:1c:d6:1d:77:66:57:fb:8e:72:4c:
c5:21:cf:0b:6b:d0:b7:77:15:4b:93:5a:84:33:bd:
a9:39:2c:57:e2:a2:79:b1:5c:57:ce:c0:8c:40:22:
1d:4d:dc:06:3e:0b:71:4d:8b:75:09:9e:42:87:d0:
24:18:df:41:50:ed:a8:64:73:7b:c3:33:64:a2:8b:
25:20:03:2f:1f:9d:65:18:40:3c:51:95:d6:4b:4c:
58:45:6f:ec:f8:aa:d4:a4:d7:9f:8e:84:7c:a6:c5:
8e:44:c9:f5:8e:cc:32:7d:f7:f8:04:f2:62:49:a1:
20:5b:c4:56:42:6a:cb:d8:65:a6:08:6e:4c:39:38:
67:07:0f:b6:e1:61:06:c6:57:8a:d3:b0:fd:1c:6a:
ce:2d:f3:d1:82:c8:ae:aa:1e:cd:1c:90:5a:1a:ab:
51:6c:bd:97:47:52:ea:1f:4b:78:75:77:79:0b:1e:
04:e7:b3:0c:70:cd:19:1d:f4:c8:d2:fb:9c:cc:a8:
d1:8f:35:2f:a5:68:2b:06:a9:35:cc:fd:fe:09:ad:
d1:47:b2:31:8b:d4:75:18:32:ac:b9:1a:58:5e:fb:
89:cf:2e:81:60:23:9c:90:ae:80:1e:09:29:53:0f:
48:5b:ed:6f:c8:76:98:6a:f0:dd:92:90:db:22:8e:
66:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F7:9B:5D:11:DD:0F:28:C6:13:5E:11:F2:E4:A4:F6:49:20:5C:F4
X509v3 Authority Key Identifier:
keyid:F1:2B:1B:68:EA:10:93:BC:EE:78:D0:71:92:E6:D8:C3:F7:03:02:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8SsbaOoQk7zueNBxkubYw_cDAs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/24875c-f159-464f-a8a7-1119b7fedfec/1/8SsbaOoQk7zueNBxkubYw_cDAs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:5f:0c:76:03:55:0c:ad:87:ab:b4:bd:f0:e4:97:d4:42:ef:
9e:e0:1c:88:20:bb:30:6f:14:e1:b0:13:bc:c1:69:4e:eb:c8:
96:81:0b:24:62:e2:73:09:f9:c0:46:b6:ea:aa:8d:42:e5:e4:
11:d7:15:70:f7:8d:9e:ba:2a:d3:43:79:87:e9:21:18:e5:19:
40:64:d3:31:aa:82:d6:b3:98:57:cb:3c:78:ea:64:b9:49:92:
d4:bb:64:dc:5a:eb:de:5f:fc:57:4c:02:34:af:06:08:5d:97:
b1:a8:16:4d:3d:29:7e:53:e1:f0:3b:82:19:8a:56:c3:a1:6a:
e0:93:10:17:53:b8:16:43:f9:6b:6e:cf:14:b1:e7:ea:9b:df:
59:25:ee:7a:ac:1f:82:5c:dd:e8:1b:57:11:5e:a3:3c:0a:fa:
f2:16:e7:d4:bc:1e:db:1f:2c:b5:9e:07:70:ee:ab:a6:19:ab:
78:61:b2:cb:e0:65:cd:e3:77:85:9a:26:a8:0c:8b:8c:69:9f:
8f:1f:20:3c:1d:a3:16:dc:4e:69:ea:1f:1a:78:9e:9d:07:8b:
d9:b5:f3:79:9d:2e:eb:eb:21:f9:e3:30:00:32:e3:82:59:0b:
e1:5a:40:c2:45:c8:57:d3:49:d6:74:29:6e:c9:74:c5:bc:e9:
c6:11:b4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:07 2025 by rpki-client