Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
File: _8TOeKTRjKbvMQj0o2WQbaa2t_M.mft (raw, json)
Hash identifier: x6LnOs+WQcHTepkm1l9dpUT+kYDc3EU9q12kjqct8YA=
Subject key identifier: 1E:9A:F2:A0:47:A0:30:40:81:FF:01:06:71:2B:11:CA:6F:B9:55:2F
Authority key identifier: FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
Certificate issuer: /CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Certificate serial: 0197B70EF580B40B4FECB6F49B94535F81DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
Manifest number: 0CEF
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: P7RY9lh2DjXnqCca2-tY01lrUH0.roa (hash: +jPRJQIba+h4xHf7Zl1n+Q824aM0dkkFMJs23vl+wfk=)
2: _8TOeKTRjKbvMQj0o2WQbaa2t_M.crl (hash: JjC2TeXpSa7eg94xZkkn8kIptlCpwjXKi8104JKW1CQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f5:80:b4:0b:4f:ec:b6:f4:9b:94:53:5f:81:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc4ce78a4d18ca6ef3108f4a365906da6b6b7f3
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=1e9af2a047a0304081ff0106712b11ca6fb9552f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5c:2a:f5:70:ce:26:99:24:83:98:a5:40:3d:
f4:88:99:fc:b4:5e:b7:95:aa:43:a3:b9:88:ba:3a:
7c:d6:10:45:b7:c9:d0:68:fa:62:bf:a3:f9:01:f1:
fd:85:c3:1b:da:89:9f:bf:41:29:c3:dd:2e:be:56:
ac:3c:9a:2b:84:15:1e:7b:82:cd:d1:88:60:2f:04:
55:05:9e:fc:df:7e:83:5b:f6:bc:48:00:c2:6b:09:
d4:f6:08:3b:cf:87:9f:4a:e3:3c:a0:3b:97:78:73:
d8:33:bd:79:7d:d8:3e:da:a0:67:12:d9:26:3f:23:
6d:4e:fe:3e:90:36:d8:2d:34:3f:ed:5a:71:a1:42:
5a:01:d0:9c:05:fc:37:6f:73:d7:50:ff:43:f3:2b:
aa:00:66:2e:be:bf:6c:bc:da:d0:ca:6b:07:6f:74:
7d:aa:e6:98:41:32:36:96:7f:17:15:de:bb:a2:2e:
44:47:a1:cc:b8:bc:67:1d:cd:d2:60:6a:ae:5a:a2:
50:ac:c7:28:52:09:20:47:e2:32:79:60:99:69:27:
1b:42:16:b5:5a:f2:ff:4e:06:3f:ae:aa:eb:0c:7a:
e2:49:1f:e6:3b:35:4c:c6:36:a0:92:91:c3:42:08:
2e:19:00:85:e9:38:82:46:82:04:ec:85:48:9d:1f:
34:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:9A:F2:A0:47:A0:30:40:81:FF:01:06:71:2B:11:CA:6F:B9:55:2F
X509v3 Authority Key Identifier:
keyid:FF:C4:CE:78:A4:D1:8C:A6:EF:31:08:F4:A3:65:90:6D:A6:B6:B7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8TOeKTRjKbvMQj0o2WQbaa2t_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/17914b-ca63-4980-8740-8d106483e36e/1/_8TOeKTRjKbvMQj0o2WQbaa2t_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:23:04:7c:ae:92:9f:f6:8c:e7:d9:da:fa:3e:fb:e0:fa:42:
a4:c4:d9:c9:10:ca:01:96:8b:38:81:6a:15:f0:92:ec:e4:f3:
47:e5:37:61:73:be:e0:63:ff:0f:0a:2a:95:92:e5:60:25:67:
ed:48:82:3b:86:f7:31:6a:c4:c2:12:32:6c:1c:2d:55:25:ec:
6a:f0:a6:24:1e:00:d0:42:a3:7b:6e:ce:f0:13:5d:c4:73:45:
34:ed:76:a3:eb:22:82:eb:e4:29:35:d1:1d:b5:dc:bc:f7:53:
95:b7:f1:e0:fb:5f:40:f0:4e:2c:27:89:df:3e:ba:76:f5:e0:
30:49:33:aa:a5:71:a9:79:66:6f:0c:aa:f3:8d:af:3c:87:6b:
8b:27:97:6d:aa:f2:50:16:8c:62:e4:92:f0:1d:8c:43:54:06:
e7:51:19:1c:00:80:db:c9:1f:37:24:63:16:53:b0:2d:94:50:
3b:51:52:7f:d1:a2:25:b0:39:ef:62:09:bc:f8:7b:a8:db:0a:
9f:59:d9:95:af:3c:55:d5:2c:44:43:d0:e7:45:f8:59:05:d3:
91:81:12:7c:46:06:2d:ad:92:c0:7a:2e:92:df:a2:95:ba:42:
8f:7f:49:07:37:e1:24:eb:e3:8a:73:66:9d:10:e7:1f:f4:0c:
0f:c6:8d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:07 2025 by rpki-client