Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
File: 8C4yJOPjKSgZJijSZIfVAPJwd2U.mft (raw, json)
Hash identifier: V+gIPOAWN23kLkR2lX1MOBohvTisOBD5Aa06oLirOk0=
Subject key identifier: 95:D0:6D:51:EE:71:E2:C3:94:28:F9:EA:B7:CE:AD:5F:88:47:0E:D5
Authority key identifier: F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
Certificate issuer: /CN=f02e3224e3e32928192628d26487d500f2707765
Certificate serial: 0197B5C4B8AB3A28C2F8638A6DDA1A78BF99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 09:00:57 +0000
Manifest this update: Sat 28 Jun 2025 09:00:57 +0000
Manifest next update: Sun 29 Jun 2025 09:00:57 +0000
Files and hashes: 1: 3-RywYSjpl9yuamrGaiHfk5Mz6o.roa (hash: khi3zX71hfk8spUUIwuIJwDTfe1y2tzgOMplAgujSag=)
2: 8C4yJOPjKSgZJijSZIfVAPJwd2U.crl (hash: Ml/ZbRq0u/uefGbO+3XR2B8LEs3torpkjTwaTt15WGE=)
3: qmufYg21c7b0gdjuY1ziryDKce0.roa (hash: cPNs19EWQmBAO/qKhHL4tQL9v8RMF/40vmmVOD5n7Ds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:b8:ab:3a:28:c2:f8:63:8a:6d:da:1a:78:bf:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02e3224e3e32928192628d26487d500f2707765
Validity
Not Before: Jun 28 09:00:57 2025 GMT
Not After : Jun 29 09:00:57 2025 GMT
Subject: CN=95d06d51ee71e2c39428f9eab7cead5f88470ed5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:e1:94:84:59:e7:02:69:d2:60:53:8e:44:03:
ca:32:71:25:99:9b:2b:2b:17:be:23:97:81:32:35:
cf:9b:d4:23:3a:a1:d8:1e:37:cc:8c:4d:a1:f6:76:
6a:fe:f2:1d:df:59:0d:e0:61:52:e9:d5:39:ee:64:
15:96:5d:69:ff:89:59:bf:23:0b:7e:d4:0a:a0:fc:
8a:6d:37:89:6f:8a:5c:84:1d:ff:f4:85:65:a2:5d:
c9:35:53:b2:ee:24:36:af:46:0b:0d:49:32:10:45:
a9:43:bf:e7:73:9f:da:63:67:9e:31:7f:fd:c1:71:
c0:74:a1:5f:be:98:e4:7f:46:9f:f1:f2:4e:13:9a:
67:92:4c:15:e3:6e:75:fe:f9:23:72:d9:a6:77:dd:
3b:31:d7:57:4c:a3:06:35:54:67:2b:e5:df:cd:ce:
2f:f2:e1:db:26:a1:3d:0d:fd:cf:9b:f0:aa:0e:6e:
9f:51:7b:42:c9:a9:a5:e3:4c:a4:43:3c:e1:5d:a3:
7e:ef:e2:cd:b1:ef:38:16:3d:cb:08:31:59:9d:93:
a5:d2:9c:5d:99:8d:ce:a3:1d:99:93:d6:0f:8f:3e:
ac:cf:f5:8f:f5:d6:a5:82:53:d2:7a:1d:91:10:65:
4e:8b:98:af:cd:73:18:82:41:db:24:61:7e:c8:71:
ca:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:D0:6D:51:EE:71:E2:C3:94:28:F9:EA:B7:CE:AD:5F:88:47:0E:D5
X509v3 Authority Key Identifier:
keyid:F0:2E:32:24:E3:E3:29:28:19:26:28:D2:64:87:D5:00:F2:70:77:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C4yJOPjKSgZJijSZIfVAPJwd2U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/268890-d509-451e-b9ee-fb9953c07f15/1/8C4yJOPjKSgZJijSZIfVAPJwd2U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:27:4a:8d:e3:ef:fd:96:56:ed:28:77:08:23:54:b3:31:b8:
18:1a:9f:b4:27:cf:ef:ed:4c:8c:28:e8:50:f5:1f:90:bd:d0:
c3:68:f1:8a:6d:25:cc:ae:db:05:28:8c:d3:9d:e6:66:de:a0:
1c:19:80:d2:3f:96:68:76:ca:9a:c6:fb:cb:19:6f:6f:36:cb:
74:2f:c7:2c:65:f2:b9:72:fb:71:3e:a5:8e:df:97:f9:1b:a3:
f1:4f:49:3f:db:5e:a6:c3:29:30:0d:32:43:c4:27:a7:e2:64:
f7:97:5c:b0:80:e5:df:14:a4:05:3a:cf:64:dc:29:52:4d:0c:
08:ed:7e:9d:68:68:12:75:87:41:3b:65:d6:88:3e:82:fb:95:
f8:aa:a2:73:ee:b5:58:47:7a:5a:d4:0f:9c:35:72:61:33:d1:
6b:b1:ac:fe:7b:e7:5f:31:65:2b:06:fc:e7:f5:a3:9f:99:85:
cf:17:ad:cf:27:88:3a:63:ed:40:ce:6f:13:c9:07:5c:df:1b:
2a:fe:4d:d5:47:17:04:3f:94:dd:ac:6f:98:83:51:01:8f:01:
a5:f6:66:cc:9f:39:18:f8:d1:47:92:20:ef:7f:d7:17:15:39:
12:9b:61:cd:74:18:13:5d:ab:68:72:60:1d:84:ec:65:09:b1:
82:7c:0c:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:00:32 2025 by rpki-client