Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
File: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft (raw, json)
Hash identifier: UjO9/27PFBn2q2l4xLjFmmPjnmnc1tzDW6+RGJ3MdLc=
Subject key identifier: BD:72:D3:19:E5:8B:98:6E:6E:88:CB:93:AF:16:E4:A2:AC:03:52:E6
Authority key identifier: F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
Certificate issuer: /CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Certificate serial: 0197C537E7A555C229CCC98965FD4AB9F3BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
Manifest number: 0AB4
Signing time: Tue 01 Jul 2025 09:01:04 +0000
Manifest this update: Tue 01 Jul 2025 09:01:04 +0000
Manifest next update: Wed 02 Jul 2025 09:01:04 +0000
Files and hashes: 1: 8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl (hash: KNjNPWI5fPpHjnxFBDWfzzvkMGOZM0RWoNiLru6j6Go=)
2: JlLzYa369BmhHhkMkkOAbFVKIEk.roa (hash: VUooec9+T4XmPm3CalNwGe0fyN77tnkbi4PQVdbwdIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:37:e7:a5:55:c2:29:cc:c9:89:65:fd:4a:b9:f3:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f4609d0d053aec0307da44b0e678c388f641a4
Validity
Not Before: Jul 1 09:01:04 2025 GMT
Not After : Jul 2 09:01:04 2025 GMT
Subject: CN=bd72d319e58b986e6e88cb93af16e4a2ac0352e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c6:0c:b8:c0:71:30:ad:38:f6:40:fe:84:41:
3d:3b:01:d6:01:de:2f:e8:eb:05:a5:61:7f:61:2c:
d6:d6:e4:20:0f:55:f4:e6:2a:92:5a:ac:7b:e7:3a:
c5:9d:8b:87:4d:6f:a4:40:f0:0c:e5:99:fc:3e:3d:
bf:70:21:02:aa:79:35:2e:dd:db:03:57:8a:3c:eb:
66:a4:14:08:eb:e9:48:9e:66:df:88:6a:b0:e4:7c:
76:80:f5:a6:e2:1b:1c:c0:95:7e:4e:aa:07:bf:d0:
53:97:ed:72:0e:af:79:65:0c:f6:5c:7a:94:b6:90:
06:7c:5a:5c:fe:2a:8d:fd:8c:bb:07:6c:2e:43:ea:
c0:ba:9c:35:ab:66:a0:c6:ff:73:82:c5:a5:d4:0e:
6e:d9:25:0e:9b:6e:6a:77:76:b8:0c:cb:c1:54:c7:
e1:a0:52:ee:99:f3:ea:d6:ce:3c:3c:a9:ca:bc:a8:
bb:85:b7:4a:f3:7b:87:46:8d:5f:51:a8:d2:82:af:
84:52:93:2e:a9:bc:e2:7d:14:3b:5a:8e:cc:0e:69:
ca:52:2a:aa:d3:67:bb:5f:a0:3c:18:c6:12:16:94:
74:28:92:03:e9:51:75:aa:3e:3d:48:17:a5:4c:a6:
2c:b5:59:3c:76:f6:34:5f:86:c6:19:b2:2c:28:82:
d0:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:72:D3:19:E5:8B:98:6E:6E:88:CB:93:AF:16:E4:A2:AC:03:52:E6
X509v3 Authority Key Identifier:
keyid:F1:F4:60:9D:0D:05:3A:EC:03:07:DA:44:B0:E6:78:C3:88:F6:41:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/9a18ad-087b-4d12-9f69-8cbf903e91cd/1/8fRgnQ0FOuwDB9pEsOZ4w4j2QaQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:1d:b8:63:6c:4b:8e:02:15:f1:dc:99:24:2d:53:cc:dd:2e:
60:1d:02:d3:96:52:6c:41:ad:d6:70:04:ed:91:d0:1a:d0:b8:
e3:ed:4d:f3:8b:a1:6b:c2:9a:a0:49:07:be:82:c7:5b:d8:7b:
57:95:15:0c:5e:65:39:52:97:9d:c6:28:de:ab:55:e0:dc:02:
26:c0:92:82:d8:dc:dc:27:33:2a:d5:78:0e:78:ae:10:c5:bb:
3d:17:d4:3a:df:49:4d:38:30:bc:a2:9c:26:1b:87:5e:0f:5e:
0a:c3:b4:91:1f:a9:da:0a:1a:6e:87:82:e5:8f:db:12:f6:68:
89:1f:73:d8:75:90:8f:08:fe:d6:e2:d9:9a:63:12:f9:98:92:
25:80:a1:03:31:06:00:35:fe:fb:06:b1:b8:44:1b:6c:3a:74:
54:19:2f:85:b0:52:58:e2:17:a6:8e:dd:e5:76:e7:26:05:a1:
ec:4d:27:b3:b3:91:eb:29:f0:7a:b8:f9:9e:6e:d2:e2:1d:a6:
a8:7c:8e:75:e7:c0:12:6a:a9:49:37:e4:ff:bb:6e:37:71:fb:
1d:5f:df:f0:30:2b:8b:56:72:38:40:1f:aa:90:6a:a0:e2:ef:
2c:17:29:af:37:65:dd:04:3f:ff:6f:30:db:3a:3e:bb:ee:6d:
8c:e9:42:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 13:10:46 2025 by rpki-client