Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
File: 84Yn42pOFr3DnwtVDXT9ceRC0sI.mft (raw, json)
Hash identifier: EjyDbKavgDYTUMtAJJzD1VkqlWHY6UJYRCm7ME7ZLHQ=
Subject key identifier: 58:80:CC:27:B7:26:A5:C6:A9:53:1D:63:11:84:9F:45:BB:85:C7:AD
Authority key identifier: F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
Certificate issuer: /CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Certificate serial: 0197B6A0DB6EB4C1F32628FAED04DAC9BCAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:24 +0000
Manifest this update: Sat 28 Jun 2025 13:01:24 +0000
Manifest next update: Sun 29 Jun 2025 13:01:24 +0000
Files and hashes: 1: 84Yn42pOFr3DnwtVDXT9ceRC0sI.crl (hash: on17av4DPAXsyO0dcuZ+ZNzrFeEoN3C6BmZYRj83rZU=)
2: lIHvPze8MhW65ATICPZrXtfvWLg.roa (hash: bg+JonT/EML15sUdW/ANznJHTOv/3C3HqVEO6q5ovAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:db:6e:b4:c1:f3:26:28:fa:ed:04:da:c9:bc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38627e36a4e16bdc39f0b550d74fd71e442d2c2
Validity
Not Before: Jun 28 13:01:24 2025 GMT
Not After : Jun 29 13:01:24 2025 GMT
Subject: CN=5880cc27b726a5c6a9531d6311849f45bb85c7ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4f:4d:3f:3e:12:85:80:b6:d2:c0:13:ab:79:
de:2c:12:25:e9:a5:f9:5f:bf:22:27:3c:5f:f3:c1:
2f:ee:db:7e:f9:49:54:5f:1d:72:36:f1:e0:e0:e3:
60:e7:a0:40:7c:1a:10:27:5e:b6:f4:df:44:3f:fd:
5f:2b:3a:ad:e0:88:14:e4:71:5e:29:e6:94:99:f0:
9c:a6:18:4f:45:ee:5e:ab:d3:54:75:cf:61:78:aa:
34:39:fb:76:ed:00:6a:56:cf:98:56:c0:b0:e0:dd:
14:64:65:92:af:d6:d6:94:44:30:54:3e:86:ef:b7:
7d:09:e7:68:77:10:9d:b1:74:d8:e1:a3:99:3f:0d:
df:39:64:1a:77:3b:1f:e8:84:c8:e1:48:e1:a1:c5:
96:b6:3f:2e:b8:68:ee:80:d5:be:04:5b:46:24:62:
eb:91:06:f8:65:2b:ad:36:6f:1a:69:53:9e:51:e5:
b0:dd:e8:32:6c:d3:7e:29:0e:7f:06:d4:98:90:8c:
a3:fe:fc:9a:bb:aa:54:e3:06:6b:41:ad:a3:bd:55:
59:8f:54:f5:8e:75:8d:6c:54:95:bd:89:ae:b1:40:
0d:d6:f0:5c:b8:98:da:14:bc:84:16:22:fb:3d:d2:
a6:49:49:96:c7:01:22:39:67:e9:17:94:65:51:1d:
78:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:80:CC:27:B7:26:A5:C6:A9:53:1D:63:11:84:9F:45:BB:85:C7:AD
X509v3 Authority Key Identifier:
keyid:F3:86:27:E3:6A:4E:16:BD:C3:9F:0B:55:0D:74:FD:71:E4:42:D2:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84Yn42pOFr3DnwtVDXT9ceRC0sI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/3a8e4c-9217-4b1f-b6fd-842437d27279/1/84Yn42pOFr3DnwtVDXT9ceRC0sI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:80:03:6a:b6:26:0c:c6:39:de:23:cf:55:d0:12:00:75:90:
f5:9f:e7:53:2a:de:bc:28:b3:0e:cb:2b:0f:6f:b1:21:c7:ac:
21:8b:8f:fa:c8:9c:0b:53:dd:3f:b8:96:1a:f1:62:53:db:e4:
9b:2d:3e:fd:ac:6e:0d:66:3e:4f:0a:74:9e:df:69:60:34:a4:
4e:91:0b:80:97:e7:d7:f2:7a:7a:48:56:9b:83:59:1f:a7:14:
f8:79:51:17:5c:8e:c5:46:ec:18:f1:9a:dc:fb:03:e0:bc:ae:
f0:50:8b:06:0b:05:e3:90:b1:02:bd:7b:60:18:e8:2b:38:08:
2b:c7:55:43:20:df:76:f0:37:1a:f6:91:28:9f:c4:1b:3c:9f:
1f:88:9e:07:57:36:6f:ae:4b:6a:37:e5:81:7d:11:c3:79:28:
cd:03:2e:fc:79:4f:88:5c:72:62:a1:b0:e2:22:55:db:c8:1c:
1e:8f:9f:6a:22:ec:6f:e3:5b:5c:0f:ad:38:5a:43:b3:26:9c:
c0:5a:ae:8d:b4:a7:e2:da:89:d6:8c:da:27:8a:75:ef:de:a2:
5e:55:d8:12:4b:c1:c5:af:0e:28:a5:84:95:87:6f:f7:7a:69:
1d:29:c2:f9:64:82:5f:d1:31:c0:c1:94:aa:a1:36:d8:10:f0:
a7:56:8d:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:04 2025 by rpki-client