Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
File: 8khYdchHDmqs3JR0IQXzDFl6wrs.mft (raw, json)
Hash identifier: N/F+H1keUuAny0sLOZf6iBCTmYzvLiR+aSJSgCMpCcQ=
Subject key identifier: 4C:DC:8D:7C:E1:04:B6:31:DD:AF:50:0C:B7:84:0B:F1:F0:CB:E7:F8
Authority key identifier: F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
Certificate issuer: /CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Certificate serial: 0197B70EF748668DA4C8E87E2E219977D973
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
Manifest number: 0CAE
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: 11v4ujiE85pODnajO4MIvDa-EEI.roa (hash: 899jJDpYjGC19E0C+sSPG4BflRjWNeXH81Y2tQUCHZ0=)
2: 8khYdchHDmqs3JR0IQXzDFl6wrs.crl (hash: RNQjuFhiIm28EuBDqXUQOPgbw2plp1jNykz+jxxmJuk=)
3: H5a6_PbqYpspvXprSKayoanO0T4.roa (hash: rh38nYvA7FwPR7BzdHUH02hvI8rv4wT+OqQOUSlde48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f7:48:66:8d:a4:c8:e8:7e:2e:21:99:77:d9:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2485875c8470e6aacdc94742105f30c597ac2bb
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=4cdc8d7ce104b631ddaf500cb7840bf1f0cbe7f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:48:71:b2:4a:31:94:cf:ef:ca:12:82:58:07:
56:55:a7:a2:4e:82:f4:5c:b0:cf:c9:aa:ab:bb:1f:
04:a6:1b:e2:e6:f5:d9:73:ef:ef:9c:2c:4d:05:c0:
61:e8:9c:59:12:9d:b0:99:71:5b:39:19:75:e0:86:
38:3f:c9:90:03:1d:23:fe:09:7c:71:3a:75:59:2e:
78:ff:63:4e:c2:9c:cd:d9:9a:5e:a9:62:ca:34:a9:
2c:7a:06:bf:2b:c5:fe:49:01:8f:55:19:b0:dd:fd:
1a:ee:f6:43:c5:4f:c6:4a:52:74:68:f6:e1:63:83:
92:51:ce:ef:da:77:c1:0b:55:01:27:cc:a6:b3:e9:
ed:c1:92:ef:29:87:26:99:ef:fd:6f:ab:88:a2:52:
6f:71:df:34:e8:7e:93:57:3f:0f:0f:ab:d6:18:0f:
13:8d:31:00:05:7f:9e:31:cb:d2:2a:10:44:d3:3c:
f2:f0:bd:9c:f7:9c:40:6c:7a:51:a7:b3:47:a1:71:
69:72:a1:be:dc:99:dc:f8:08:bb:42:73:bc:ce:2d:
f9:3c:6b:7b:ef:32:78:87:49:28:cf:66:d4:68:fa:
29:1b:38:e2:ce:80:66:e0:40:a8:f0:0b:28:bc:61:
f7:6d:b2:40:54:7a:37:7a:73:4d:07:13:66:6c:13:
df:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:DC:8D:7C:E1:04:B6:31:DD:AF:50:0C:B7:84:0B:F1:F0:CB:E7:F8
X509v3 Authority Key Identifier:
keyid:F2:48:58:75:C8:47:0E:6A:AC:DC:94:74:21:05:F3:0C:59:7A:C2:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8khYdchHDmqs3JR0IQXzDFl6wrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/5a3f0b-86f5-406e-91d5-8fd4c024488e/1/8khYdchHDmqs3JR0IQXzDFl6wrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:88:62:15:93:dd:a4:ff:25:4d:f3:78:5a:fd:1f:ea:7d:8d:
86:27:eb:fa:4b:e2:e7:51:43:c2:ed:8c:e1:75:27:fa:a4:93:
e2:e8:ac:12:08:d5:c0:69:72:c8:16:86:41:ec:6f:ac:3c:82:
7b:4c:ca:02:e1:c6:3c:31:2e:f5:28:d2:5f:b0:d5:6e:95:11:
f7:61:90:bf:c9:62:bc:60:0b:fd:23:78:0e:30:b0:2f:95:0b:
76:e4:36:e8:2b:82:2e:d4:9e:da:c4:a1:89:0c:f1:58:1f:c2:
cc:f8:a7:0a:e1:b1:f8:56:39:d8:dc:2c:0e:a9:9c:4e:bc:9b:
07:a9:bf:99:1e:83:cc:6d:2e:97:e6:23:e7:59:1c:74:5b:bd:
86:9f:9c:00:9d:7e:b3:6e:78:5d:58:29:3a:00:9c:22:1e:e9:
c0:5c:ba:63:e7:24:03:2f:0c:e5:c1:a3:30:6b:d2:ce:1f:ef:
f0:30:e3:ef:e4:d3:bf:40:22:94:f4:a0:51:a1:9b:86:31:e7:
b6:d6:50:c2:5a:e6:28:0d:0f:42:47:83:ee:96:02:f9:54:da:
aa:a6:97:a9:42:03:eb:6e:d0:1c:e4:97:08:7c:b7:65:fc:bd:
b3:26:17:d7:0a:be:3f:6f:b9:6e:72:b9:19:cd:f7:09:df:db:
a3:90:37:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:53:43 2025 by rpki-client