Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
File: 8o4LdYvnOh3b-1F-6LXk-GOiH54.mft (raw, json)
Hash identifier: WZsjA0OCN8yN0SlEwGY1MXcZ6hgsAvqPZojHYYedIDM=
Subject key identifier: C0:CD:FA:E4:79:EA:33:F8:1C:EE:8D:E1:7B:F3:C5:0D:CC:AC:44:A0
Authority key identifier: F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
Certificate issuer: /CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Certificate serial: 0197B77C436AEC21EC50FF30C3D5F705F84B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
Manifest number: 105F
Signing time: Sat 28 Jun 2025 17:01:03 +0000
Manifest this update: Sat 28 Jun 2025 17:01:03 +0000
Manifest next update: Sun 29 Jun 2025 17:01:03 +0000
Files and hashes: 1: 8o4LdYvnOh3b-1F-6LXk-GOiH54.crl (hash: svvz/XqJmXgxRtcd3RdIOv3xnRJ54gWXvwjloIc2y1Q=)
2: mre0Sbb8szBBX4GresgiiwdF634.roa (hash: KGpatw4GtK16xXPbD1RSTnF7RbGtyhCDwaJXsQ0f2K8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:43:6a:ec:21:ec:50:ff:30:c3:d5:f7:05:f8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28e0b758be73a1ddbfb517ee8b5e4f863a21f9e
Validity
Not Before: Jun 28 17:01:03 2025 GMT
Not After : Jun 29 17:01:03 2025 GMT
Subject: CN=c0cdfae479ea33f81cee8de17bf3c50dccac44a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:66:0b:6b:5a:14:21:61:28:c6:17:3d:8f:d7:
b5:4a:dd:62:85:78:e0:24:2a:35:a6:bb:c6:ff:ea:
63:20:60:2e:41:45:64:8e:b7:a2:0d:13:44:b5:5a:
ee:1d:bc:07:e7:77:70:7d:fa:c1:68:90:80:cf:a3:
a8:59:57:38:77:ee:5e:21:eb:97:82:02:1e:4f:b5:
89:83:d4:21:39:bd:0b:58:11:b8:6a:24:4a:ef:bd:
27:c4:bf:72:66:a1:73:40:ef:48:ac:71:05:20:64:
ca:b6:11:52:3f:63:29:a6:e1:c9:12:fd:6e:df:a2:
6f:f3:7a:0f:33:2a:9c:73:9a:ca:0a:5c:f0:79:d3:
2c:9a:c4:b6:49:39:ab:5b:a5:f1:46:79:25:fe:c4:
69:d7:3f:1d:b2:9a:68:49:92:7d:12:a5:22:57:e1:
7b:17:5d:cd:b9:af:33:cb:f7:ef:40:5f:26:71:67:
75:ef:e7:ce:26:49:ee:4c:9e:26:14:be:7c:9e:a9:
9a:4f:94:17:9b:f9:64:9f:0a:2e:36:ca:68:21:ff:
3a:ae:b8:ad:bc:56:95:c8:92:e2:99:38:bf:f2:e5:
af:41:0f:99:95:c1:22:51:2e:4a:2b:3c:09:7c:96:
f4:ac:cc:1b:f9:39:6b:f0:58:ab:9e:5a:58:a4:7c:
04:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CD:FA:E4:79:EA:33:F8:1C:EE:8D:E1:7B:F3:C5:0D:CC:AC:44:A0
X509v3 Authority Key Identifier:
keyid:F2:8E:0B:75:8B:E7:3A:1D:DB:FB:51:7E:E8:B5:E4:F8:63:A2:1F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o4LdYvnOh3b-1F-6LXk-GOiH54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/08128a-690a-4f08-8865-69e3d0866ef6/1/8o4LdYvnOh3b-1F-6LXk-GOiH54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d6:d0:1f:5f:f2:81:bd:6d:1e:c1:f6:34:2f:4e:af:27:06:49:
a7:55:40:8a:35:36:96:5b:22:8e:53:a6:45:d4:d7:41:f2:5c:
a2:8c:7f:10:d4:46:4d:43:3e:7f:fc:58:8e:ac:80:5f:36:fa:
a1:34:b6:91:94:83:33:89:25:e6:43:d8:d5:6c:73:b6:af:b9:
cc:76:04:41:76:b3:d6:f4:18:05:d9:70:e2:81:94:a6:fe:65:
03:84:1f:69:2a:da:fc:34:9f:fb:1e:94:da:6f:97:36:fa:b7:
2b:40:29:e1:47:9c:16:a3:b7:20:91:ba:21:3b:be:b3:85:94:
ed:02:ec:79:aa:6f:40:dc:fe:70:c6:3b:9d:c7:5a:0b:ad:f3:
3e:30:96:e8:39:7b:41:65:c7:1a:9b:69:52:78:ed:a6:d8:76:
d4:5a:9f:14:42:a0:d5:6e:bf:38:5c:f1:aa:d5:ea:1d:36:67:
b4:9e:99:45:88:fa:05:85:72:26:b6:bd:cf:00:37:75:e9:1c:
70:34:9b:f7:8c:e4:19:7b:2f:db:a0:37:95:4e:fc:55:99:e9:
c8:12:0b:79:e5:64:97:c5:29:68:34:97:02:43:a5:07:a0:e1:
3b:30:ba:a1:26:fa:e4:b6:7f:22:1f:92:1d:d5:62:0e:41:6f:
69:c5:c6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 02:10:46 2025 by rpki-client