Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: 170tK/8Z2ziB1kAiP9K93OIUj+NuBs8BDLn7g93xeRk=
Subject key identifier: 0B:A5:52:5C:DD:69:FE:16:69:5B:7B:E9:9C:86:7C:2A:72:A2:ED:72
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 0197B74528B867AFE202BADF7D53FEBF7100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 0FFE
Signing time: Sat 28 Jun 2025 16:00:52 +0000
Manifest this update: Sat 28 Jun 2025 16:00:52 +0000
Manifest next update: Sun 29 Jun 2025 16:00:52 +0000
Files and hashes: 1: 3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa (hash: pOZz2o1zgseBlXSeMbMTXOoQ45eoVXgqdP67Uo4BTQg=)
2: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: g7q1vNnVH0mGYZ0hj3nkhIlYPmRbDBH47WHkKOMozWQ=)
3: I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa (hash: pAX53nRh4A+NdTng//otyGRQizgrDPu6+ERbaPVic0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:28:b8:67:af:e2:02:ba:df:7d:53:fe:bf:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Jun 28 16:00:52 2025 GMT
Not After : Jun 29 16:00:52 2025 GMT
Subject: CN=0ba5525cdd69fe16695b7be99c867c2a72a2ed72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d2:7b:e5:ba:0c:df:a4:2a:1e:e8:a1:8a:52:
76:b4:3c:7a:13:bc:71:fa:8b:02:45:1e:b1:e8:b8:
4a:55:91:37:9a:f3:0f:28:c0:ac:d3:86:94:f4:35:
f9:89:1c:d7:ac:78:d7:a4:a8:c6:27:19:ea:88:b5:
71:66:04:e9:05:ef:3e:31:8e:68:8e:79:84:fa:75:
d0:5a:55:e6:44:19:2c:b0:15:da:9a:c2:1d:aa:79:
9e:e3:39:f8:e9:61:b3:c6:9a:f1:e8:df:0d:4d:3e:
d7:04:46:82:89:ea:f9:50:b8:bd:d6:6f:0e:05:b7:
fc:15:bd:99:25:e4:d5:2e:cb:94:7c:41:d7:02:fa:
73:53:cf:e4:e5:c0:df:13:e8:24:73:fc:5f:ae:3a:
b3:a1:5a:12:92:00:24:3e:34:20:88:a3:2b:9a:26:
b7:8b:49:a0:b8:20:73:27:80:3a:cd:5c:9c:14:7f:
f3:e2:8e:93:3f:68:01:e2:6b:f3:c7:8c:1b:0c:e6:
b2:cf:98:44:c9:60:ac:d6:13:d0:dc:dd:6a:c6:da:
99:a4:87:b8:d8:26:13:8c:70:09:05:d4:2a:b6:e5:
7e:a6:f1:34:d6:95:70:a2:13:61:03:14:0d:21:1c:
e3:98:5d:9c:b4:89:fc:9d:55:67:5f:10:6e:b2:b5:
e6:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:A5:52:5C:DD:69:FE:16:69:5B:7B:E9:9C:86:7C:2A:72:A2:ED:72
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:3d:51:fa:7d:73:d7:fb:77:ab:47:52:08:6f:5f:1b:71:f0:
ef:55:9e:46:97:63:31:65:f6:35:23:b4:dc:d8:b6:47:1a:0a:
f6:4e:c6:19:5b:0e:1e:64:f4:76:94:bb:5a:3b:d6:44:53:0f:
5b:ef:49:b0:51:46:56:6f:a7:14:a4:38:0f:35:de:bc:dd:ee:
e9:28:40:f9:7d:87:d6:e3:7b:d4:d7:4c:64:49:4e:e9:56:c5:
9d:e6:71:3f:ae:9f:e9:58:03:32:de:21:06:54:77:59:ec:f6:
4a:8d:83:7b:10:0c:cb:f1:f4:a4:1e:bf:50:4b:30:b3:9b:9b:
f3:fa:85:b2:40:f4:f5:c6:aa:ba:2b:d1:0b:a4:f8:4b:0e:14:
43:54:7c:46:34:81:41:53:77:b1:a2:39:58:41:76:99:66:cc:
8b:e0:84:c2:67:24:64:69:68:4e:c3:d1:f4:b7:d4:d9:d7:c2:
b0:6f:5d:b0:45:b7:24:7e:0d:01:4c:d0:fb:fa:dd:96:81:37:
dc:d2:70:61:0f:2e:9c:35:4d:1d:fe:80:a1:1e:7b:2c:d9:26:
a3:69:e0:bf:b3:1f:81:39:c7:28:99:b4:9a:73:49:39:6c:ac:
da:62:3a:cf:03:91:42:e9:67:40:b7:7c:77:db:e2:9e:6e:9c:
3c:07:7d:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:24:29 2025 by rpki-client