Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
File: 8Oacx506DEnCkf1Af7K-3CPqeok.mft (raw, json)
Hash identifier: rGWxQus/LV8GdmA7kLBsmanZB+SoJyCrY42JllSbmnM=
Subject key identifier: 5D:44:68:30:8E:A5:F9:7F:81:C4:F0:38:60:6B:E4:53:1D:47:79:AA
Authority key identifier: F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
Certificate issuer: /CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Certificate serial: 0197B7EA37617C776BDE4AF84EA78AB5A22B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
Manifest number: 09F0
Signing time: Sat 28 Jun 2025 19:01:09 +0000
Manifest this update: Sat 28 Jun 2025 19:01:09 +0000
Manifest next update: Sun 29 Jun 2025 19:01:09 +0000
Files and hashes: 1: 8Oacx506DEnCkf1Af7K-3CPqeok.crl (hash: g5P0oPTojctP6AI8us8xiP7L0Uuzz0qFql2liemZT5U=)
2: fN8SYZ83oc_gHjiIm2H8fBBsylM.roa (hash: ITxtpDSVYxcGXneNxnFdZuRlc/rmrmnyY6/WYXyAU60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:37:61:7c:77:6b:de:4a:f8:4e:a7:8a:b5:a2:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0e69cc79d3a0c49c291fd407fb2bedc23ea7a89
Validity
Not Before: Jun 28 19:01:09 2025 GMT
Not After : Jun 29 19:01:09 2025 GMT
Subject: CN=5d4468308ea5f97f81c4f038606be4531d4779aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b9:18:99:be:b2:0d:95:43:52:3f:ae:3a:cc:
ad:da:e7:b4:af:cf:e9:36:a1:c5:51:ed:11:2f:e8:
1a:c7:26:ec:ad:54:4b:8a:ad:cc:a8:75:61:9e:62:
ad:36:6b:ff:5a:63:26:6a:4f:f9:3c:a3:d6:2f:f1:
1b:0d:16:bd:97:8d:9b:b1:41:91:02:a4:a3:37:60:
a1:08:44:cf:be:98:2c:9b:e2:e1:f4:5e:65:5d:eb:
fd:09:71:1f:b8:99:48:f8:1e:f7:dd:d2:b7:cf:31:
26:4d:82:c2:66:5a:27:af:97:73:0b:b4:9b:1c:c4:
d9:72:b7:45:62:03:46:49:e6:de:85:b4:81:69:95:
39:ee:44:41:ed:14:97:4b:b9:9e:47:f9:2e:17:15:
57:33:20:22:8f:eb:22:9c:8a:d6:df:10:4f:a1:32:
09:d9:f0:bf:96:71:9d:60:36:aa:13:27:b2:29:55:
e0:69:df:ee:de:0b:e9:93:f9:b9:b6:bd:d9:ad:5b:
4c:92:cc:b8:f0:18:da:57:cf:63:bb:14:46:13:25:
15:45:db:41:d0:cc:f5:d7:8f:61:fa:49:d9:28:6d:
9d:10:de:60:65:52:b5:d8:c7:8e:cb:a9:51:af:b5:
b6:1b:69:61:a6:8d:c8:f1:62:71:31:fe:cb:00:b0:
67:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:44:68:30:8E:A5:F9:7F:81:C4:F0:38:60:6B:E4:53:1D:47:79:AA
X509v3 Authority Key Identifier:
keyid:F0:E6:9C:C7:9D:3A:0C:49:C2:91:FD:40:7F:B2:BE:DC:23:EA:7A:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Oacx506DEnCkf1Af7K-3CPqeok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/1a8b06-9fda-4115-be48-8df71ba03915/1/8Oacx506DEnCkf1Af7K-3CPqeok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f4:3f:4a:1e:80:5b:09:9b:bb:dc:b2:b3:d6:d6:4e:9a:38:
ab:c7:96:a5:a3:8e:61:77:da:94:05:a8:a7:ea:96:7b:a2:f9:
a8:48:72:5d:ed:27:aa:98:77:d9:21:0d:9e:6d:b9:91:37:d1:
5d:c8:5c:f9:36:87:3a:de:4f:5f:e1:72:6b:59:1c:d5:f7:0e:
49:07:58:10:8e:17:fb:aa:4d:90:81:b9:02:17:e4:94:c9:47:
21:c8:d6:d4:97:68:c5:ec:56:06:d0:cb:74:3c:b5:04:fe:25:
32:8c:04:0e:ff:fc:ea:13:76:66:72:df:8f:31:13:07:12:e4:
e0:66:71:1b:0f:fb:0e:1f:32:0c:df:24:a8:76:76:90:d7:c3:
0d:cc:6f:c5:3e:2d:63:e5:65:6c:1a:d3:c8:10:07:0e:2a:85:
1b:04:e1:02:12:f7:a6:a2:fc:a8:dd:e2:8b:ab:2b:a9:81:f6:
c0:38:7c:11:86:ec:3d:70:57:8a:66:c8:97:97:45:37:71:66:
39:d4:f1:77:4d:ea:29:76:da:f3:5a:37:e0:6d:63:36:8b:30:
6b:68:55:a3:e0:0c:a8:99:2f:a7:6d:06:0c:a7:31:db:c5:32:
20:8a:78:14:1c:4d:41:be:1b:f4:bc:f9:4f:a6:f5:a7:ab:67:
6b:64:4d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:44:19 2025 by rpki-client