Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
File: a8GtFnaioypFoM85L3-cXqaOLeo.mft (raw, json)
Hash identifier: G+Tu7LAg+owDMwXrtV5IB7DWB38D3SeBAKOjQjwjXPM=
Subject key identifier: 80:61:F5:BF:18:A2:93:52:2E:BF:C2:4A:AF:03:19:88:81:E4:DB:DA
Authority key identifier: 6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
Certificate issuer: /CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Certificate serial: 0197B6A0D190068B3E440B9B61ABDACCA3D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:01:22 +0000
Manifest this update: Sat 28 Jun 2025 13:01:22 +0000
Manifest next update: Sun 29 Jun 2025 13:01:22 +0000
Files and hashes: 1: CkA5P7l5ePDJ8YtVI5RwljhHN3I.roa (hash: Rv4CNPYpNEer366FC8TAHEAISsXVQ6rJf8w+ppgPPgs=)
2: a8GtFnaioypFoM85L3-cXqaOLeo.crl (hash: P6KXMSxPeKGS8S49jAJVzskRNkOQIlnf48eR1XWhWAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d1:90:06:8b:3e:44:0b:9b:61:ab:da:cc:a3:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bc1ad1676a2a32a45a0cf392f7f9c5ea68e2dea
Validity
Not Before: Jun 28 13:01:22 2025 GMT
Not After : Jun 29 13:01:22 2025 GMT
Subject: CN=8061f5bf18a293522ebfc24aaf03198881e4dbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:64:a1:77:b9:15:7b:f8:f5:5c:bc:37:5e:df:
d7:a7:ac:15:b8:01:37:6d:f8:8d:77:41:5e:ae:00:
86:8a:30:20:18:3a:a6:24:32:ad:a9:e0:e4:70:39:
66:4c:c8:a7:79:58:a4:a0:cd:7c:f4:e8:1f:06:79:
3f:89:f0:5f:f4:6a:74:39:d9:c6:23:bd:c2:7c:05:
bf:5a:9f:bb:5b:13:be:aa:65:22:f1:97:a3:61:6b:
1e:f4:99:7c:85:45:e9:5a:54:73:24:6b:a1:f7:23:
bc:26:2f:f0:2b:b5:c0:1e:72:9d:85:98:3e:97:a8:
00:01:a2:66:fe:4c:25:e8:07:55:dd:9a:19:d2:2e:
75:bb:cb:c2:f1:2b:68:a5:ea:31:bf:44:15:86:2d:
00:c0:79:87:d5:15:ed:4d:73:b9:be:8d:64:0b:47:
71:2c:4d:e4:8e:e5:09:c3:fa:3a:71:47:a8:66:cc:
7b:22:db:39:c9:a8:e1:6b:b8:c3:c9:85:34:2b:80:
ad:95:04:fa:b3:b1:ae:e9:b5:0b:4c:a1:53:51:eb:
33:57:b1:6f:cc:8a:4f:08:c5:46:50:4c:66:b0:bc:
a4:b7:e3:a9:35:9d:7e:cb:c9:8d:25:9e:5e:54:b5:
81:3c:37:9e:ad:fa:a8:66:32:2a:71:c9:53:fa:28:
90:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:61:F5:BF:18:A2:93:52:2E:BF:C2:4A:AF:03:19:88:81:E4:DB:DA
X509v3 Authority Key Identifier:
keyid:6B:C1:AD:16:76:A2:A3:2A:45:A0:CF:39:2F:7F:9C:5E:A6:8E:2D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8GtFnaioypFoM85L3-cXqaOLeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/22392e-aa67-4588-b809-ef1aaaabfe2b/1/a8GtFnaioypFoM85L3-cXqaOLeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ac:73:20:1b:5b:21:3b:1c:04:8b:46:cb:56:d5:e9:08:8e:
2b:e1:bb:78:4a:ad:59:e4:b9:b0:97:62:b1:1a:ac:dc:ae:39:
e2:e9:d8:ab:e4:d3:83:68:f8:da:2a:8f:d9:d1:8f:96:c3:44:
13:ed:8c:68:dd:bd:52:86:21:4e:9f:14:d7:6e:27:2e:d5:67:
68:e4:5e:c2:61:aa:3d:95:b2:6a:74:d1:9b:ff:b2:22:98:9d:
61:04:4a:5d:85:e0:31:40:6d:c9:16:d3:5d:d2:8f:4c:a9:4e:
35:25:b3:31:67:a2:24:3f:e8:ee:f0:6a:72:94:b9:f0:7e:58:
79:c7:64:ad:68:69:d3:b2:ca:62:9f:bc:94:9c:40:bf:e2:14:
ec:cc:78:42:be:07:10:22:14:f7:29:01:d0:35:e9:50:19:28:
a2:73:55:5a:26:a3:5e:c3:58:75:41:f6:8d:d2:fc:04:70:3f:
23:69:2c:6e:12:fe:01:ef:bc:b0:aa:69:56:46:6c:44:0a:48:
d3:b1:d6:8b:fc:c3:f3:e4:df:f1:f4:4c:f1:ca:71:74:ff:cc:
70:27:c4:22:56:0f:e6:b7:b9:9f:c4:88:8e:93:7e:45:ad:31:
99:43:e8:7d:db:9b:01:aa:32:28:58:c3:26:97:0e:a7:50:47:
82:97:26:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:02:17 2025 by rpki-client