Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
File: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json)
Hash identifier: fMaJEZ97iQYm/gzaeGnH4IW3pCH07pSn4psA4UPPBBk=
Subject key identifier: 7A:EF:D5:F4:42:48:DE:4C:74:A2:30:AB:02:2E:60:28:08:C3:7A:E5
Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
Certificate issuer: /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Certificate serial: 0197B820F8BB529C790D2EF9FC28F92DF69B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
Manifest number: 0334
Signing time: Sat 28 Jun 2025 20:00:57 +0000
Manifest this update: Sat 28 Jun 2025 20:00:57 +0000
Manifest next update: Sun 29 Jun 2025 20:00:57 +0000
Files and hashes: 1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: 6zn4hCNkm7JnJ79ckObCwEOfly6sIv3LZuNmZpG5vvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f8:bb:52:9c:79:0d:2e:f9:fc:28:f9:2d:f6:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Validity
Not Before: Jun 28 20:00:57 2025 GMT
Not After : Jun 29 20:00:57 2025 GMT
Subject: CN=7aefd5f44248de4c74a230ab022e602808c37ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:0c:d1:77:a0:ee:d3:11:11:b1:2f:0c:91:
3b:51:f2:27:88:10:cd:47:41:76:b0:ee:67:a1:20:
5f:28:35:27:f3:66:34:ea:0e:e8:cb:49:92:ad:61:
79:f6:a3:84:a8:72:ea:ab:2d:68:e2:ef:55:70:bd:
cb:57:f8:86:1e:e5:96:8a:e3:4a:44:94:e9:c9:c6:
27:5b:8d:48:8f:38:6a:3b:b7:8b:ce:3c:8c:9c:2e:
30:f3:93:b2:00:f9:f7:8a:ed:92:c5:eb:16:fc:d6:
b9:0c:b3:46:7d:36:01:fe:57:9d:ab:c6:24:01:cd:
51:b0:6c:6c:f2:a2:02:22:49:c2:ad:fe:f4:05:5e:
49:25:04:4f:67:8d:0e:01:0a:d9:71:ae:3e:18:df:
0f:70:ec:08:b1:28:72:54:ca:96:f9:de:cc:26:cb:
5c:20:1c:a1:c6:6e:fd:2d:70:90:16:b4:19:7a:81:
24:e5:9f:95:f7:be:aa:22:d6:f7:65:c2:2f:fc:b7:
d3:7d:f7:b5:fa:dc:c3:f4:7d:5f:2b:e4:92:91:66:
88:19:52:9d:fe:d2:81:74:9a:80:86:da:1f:fb:c8:
8b:86:a2:cb:15:d6:29:b9:50:ff:bc:49:e6:92:0e:
d4:8f:bd:f5:33:34:91:84:79:1c:76:45:9d:e2:bd:
a0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:EF:D5:F4:42:48:DE:4C:74:A2:30:AB:02:2E:60:28:08:C3:7A:E5
X509v3 Authority Key Identifier:
keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:5e:f7:9d:4f:b1:5d:d0:d8:f2:ac:5f:5e:44:b8:f3:3e:b5:
09:f1:36:85:08:02:56:57:b5:b9:2d:25:75:58:9f:e6:90:eb:
5f:8b:a8:78:90:34:9c:fc:9b:44:0c:ea:01:a2:65:20:0c:c5:
00:80:b4:01:80:08:14:6b:bf:e7:0e:04:6e:19:db:98:f2:49:
dd:a0:46:88:31:33:83:f9:21:90:05:70:13:1b:b9:c0:83:22:
49:db:ea:20:a9:dd:d1:64:42:54:a8:ec:a6:b0:7f:44:f0:df:
94:03:e5:ac:8e:6c:39:ca:68:cc:65:3f:26:bd:4f:9d:8d:b1:
53:cd:c3:5d:9f:1f:d2:89:b5:0a:78:c4:db:a7:5c:ed:60:ca:
1d:e9:7f:a6:8b:96:e3:e2:04:5b:36:25:1a:31:c1:c2:ed:cd:
71:f6:7b:d6:ff:75:ff:47:ab:59:d8:46:51:bc:ec:e2:c2:86:
75:fe:0a:8f:2f:49:c2:7d:84:1e:fd:6b:9f:e7:25:a7:53:2c:
7d:4d:3e:0c:1e:b6:46:f4:9e:2a:18:7e:bb:84:e0:f2:ff:36:
4a:20:21:00:14:2a:db:00:a9:52:28:77:02:4c:c9:b7:8c:d0:
94:f1:c1:d8:cd:f9:5d:fa:ea:80:31:a8:c4:a6:73:d3:43:16:
5a:d8:36:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:22:13 2025 by rpki-client