Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
File: n8IY9nJDtH2gIf2j_rRBR0s865Q.mft (raw, json)
Hash identifier: rIeeyp9lIWnanPb+GMx2/0KbQzgi/Te2rWbKzKji7GM=
Subject key identifier: D5:3F:87:8E:4A:44:29:AB:F1:23:60:DE:1A:5C:84:C9:0C:53:F7:33
Authority key identifier: 9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
Certificate issuer: /CN=9fc218f67243b47da021fda3feb441474b3ceb94
Certificate serial: 0197B6A16AAB8DBF8EFB1E6A58AC93293AB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:01 +0000
Manifest this update: Sat 28 Jun 2025 13:02:01 +0000
Manifest next update: Sun 29 Jun 2025 13:02:01 +0000
Files and hashes: 1: n8IY9nJDtH2gIf2j_rRBR0s865Q.crl (hash: 2W2ySEuvQ1aEsq3yNzAlEVQUFNBtjMkNns1IMCIj2Ig=)
2: sYA6KeIU16Bd58c84OvJJaCKPKU.roa (hash: tX4ZljxiPaFmNoY3hS/p0i7eqE1TuxWDswzU5ZDhiFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6a:ab:8d:bf:8e:fb:1e:6a:58:ac:93:29:3a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc218f67243b47da021fda3feb441474b3ceb94
Validity
Not Before: Jun 28 13:02:01 2025 GMT
Not After : Jun 29 13:02:01 2025 GMT
Subject: CN=d53f878e4a4429abf12360de1a5c84c90c53f733
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:57:f9:a4:b1:8d:c9:21:d3:a3:a2:a0:0c:2c:
5c:f9:c7:92:d2:2d:4b:4b:d4:ac:61:11:d6:36:22:
63:3e:dc:93:7a:f4:ca:d3:69:6f:68:72:d9:7e:67:
7a:4b:52:1d:97:8e:0a:c4:28:db:4d:55:3b:6a:b7:
35:78:12:07:73:fd:b4:82:b4:5e:45:46:eb:fa:e3:
44:db:58:21:37:b1:a1:6f:4e:66:c0:dd:77:36:bc:
4f:81:77:b1:f1:5e:de:b7:80:52:03:d4:8b:fb:95:
4d:23:c7:68:54:98:fa:a4:83:2d:47:df:f8:64:4a:
2e:70:c9:95:56:f4:d1:91:49:d0:51:74:e5:a4:c6:
ad:8d:23:4b:2f:0b:58:f6:dd:ef:0c:07:0b:6e:05:
21:c1:12:41:c9:02:41:72:d0:99:86:e2:84:7b:72:
07:db:57:5a:75:6c:34:b7:d7:74:b7:b0:4e:2c:6e:
c8:18:41:cd:9d:44:2e:96:6e:92:c2:68:9b:02:ab:
61:bb:38:8c:b1:2d:c5:33:4d:8e:06:84:20:f2:9b:
f8:3a:73:d8:d0:57:f0:ef:33:3e:e0:f4:96:25:d5:
5b:22:f5:d2:8b:63:38:cb:f8:05:0e:8b:04:7a:46:
bb:c7:b4:8c:16:d8:8f:8e:82:bb:e2:e9:d9:e8:ab:
65:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:3F:87:8E:4A:44:29:AB:F1:23:60:DE:1A:5C:84:C9:0C:53:F7:33
X509v3 Authority Key Identifier:
keyid:9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:6a:8b:9a:9e:2d:0f:9f:0a:74:ae:35:c1:ae:2d:ab:36:3c:
4c:a9:8e:a5:56:c1:f7:a0:f4:b1:f6:db:f7:81:8b:32:bb:dd:
6c:bd:25:37:39:cb:56:bf:48:eb:05:95:f1:f5:a6:9c:b3:36:
be:a8:bc:f6:9d:28:56:85:f9:ae:e5:91:70:13:5c:2e:65:91:
f3:1b:ec:7f:a9:f2:58:a7:cc:37:f7:bd:a1:b3:5f:b5:5b:7b:
08:14:5b:d3:58:94:3d:a1:77:ab:2b:19:aa:47:cf:08:57:cc:
8a:fd:33:bc:17:f6:df:ce:44:de:a5:48:ae:84:77:0d:eb:d5:
cb:8e:06:a1:55:f0:c8:14:b8:82:43:43:63:e4:9e:ed:80:86:
13:f9:da:33:84:c5:a3:87:97:b6:81:f3:99:81:59:25:82:39:
b4:5c:92:91:e1:cf:4e:55:04:30:1b:65:0b:2c:f7:35:94:c3:
e8:d5:ed:50:46:24:bf:13:62:a2:cf:1e:b1:1f:7d:74:d4:32:
2e:b0:f7:be:62:01:36:c7:81:1c:ee:11:5d:34:90:7a:71:fe:
f9:14:57:da:ca:ff:7b:14:37:c8:be:c8:d9:6f:d7:a6:6c:44:
dd:73:f4:c3:28:33:b3:43:1e:b5:6a:4a:f3:d0:b1:91:e0:93:
67:a5:d6:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:21:26 2025 by rpki-client