Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
File: 8xDFDSzIe9v6W7URoYoid7oAumg.mft (raw, json)
Hash identifier: e9d9ipeXziBccbq2iaSJyZAOyqR+wabHhIrBZBIrNTA=
Subject key identifier: FB:67:B2:92:8B:CC:62:B8:0E:4B:42:17:5F:5B:E7:CF:F0:F2:A3:90
Authority key identifier: F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
Certificate issuer: /CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Certificate serial: 0197B933D2750D87F7C0F58A66E21A4C0E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
Manifest number: 122A
Signing time: Sun 29 Jun 2025 01:01:10 +0000
Manifest this update: Sun 29 Jun 2025 01:01:10 +0000
Manifest next update: Mon 30 Jun 2025 01:01:10 +0000
Files and hashes: 1: 8xDFDSzIe9v6W7URoYoid7oAumg.crl (hash: +nxZrJ4Mg/0h+o60hgfVKQgnTAVQ2VS1PzTnS759Pd4=)
2: xInS4OBZE4XZhCIYPtcEJ4L0sW0.roa (hash: KkBHzYhuSu08Rz0qev1AtQ0vsja7TfnwTOncPO/urxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:33:d2:75:0d:87:f7:c0:f5:8a:66:e2:1a:4c:0e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f310c50d2cc87bdbfa5bb511a18a2277ba00ba68
Validity
Not Before: Jun 29 01:01:10 2025 GMT
Not After : Jun 30 01:01:10 2025 GMT
Subject: CN=fb67b2928bcc62b80e4b42175f5be7cff0f2a390
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:18:81:41:98:85:31:e8:c5:81:fa:ab:c9:55:
08:1e:ed:7d:d1:8d:b8:86:d7:1a:f2:8d:ef:6a:09:
9e:1c:1f:05:01:a2:09:4b:d8:d8:86:49:53:f4:a6:
fb:1d:29:3a:65:71:49:29:1c:1b:09:fc:d7:bb:64:
12:f1:43:2f:33:22:56:13:cf:26:80:50:5e:2e:00:
6f:80:be:ff:9f:6a:3d:1b:10:e0:7a:28:8b:eb:05:
10:db:50:ca:2c:24:dd:81:2e:2f:a5:35:b2:f3:50:
c0:bc:f7:64:d8:11:5e:b7:b8:83:ae:de:45:42:52:
9f:1c:1d:dc:66:40:1f:57:7b:d7:cd:f5:08:7a:76:
d8:46:ef:c8:1b:00:45:05:32:a5:4c:fd:61:f6:8b:
76:47:43:ee:2e:93:e4:67:5e:32:f8:68:63:96:90:
c3:36:13:5d:9b:b4:5a:4b:20:e1:6b:5f:0c:46:0a:
25:5e:d1:5e:bd:5d:ca:cf:1e:e8:f4:f7:ca:6a:85:
fa:fb:9c:44:01:a4:6b:31:62:99:4a:78:4a:9a:3b:
c2:fa:a9:0e:80:36:64:f5:cd:a1:88:95:c1:07:1f:
59:3a:18:5a:d2:f4:50:c4:f1:ff:dc:f5:2d:cd:45:
90:bf:cb:d5:99:63:b7:5e:8c:ef:19:57:06:46:1d:
11:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:67:B2:92:8B:CC:62:B8:0E:4B:42:17:5F:5B:E7:CF:F0:F2:A3:90
X509v3 Authority Key Identifier:
keyid:F3:10:C5:0D:2C:C8:7B:DB:FA:5B:B5:11:A1:8A:22:77:BA:00:BA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8xDFDSzIe9v6W7URoYoid7oAumg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/0ea4a4-2774-4545-805f-1e9f0bdeb532/1/8xDFDSzIe9v6W7URoYoid7oAumg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:03:65:53:e7:84:d4:96:00:94:93:2b:43:5c:82:8e:5b:cd:
87:c1:48:96:e9:c1:e7:23:db:84:e9:35:e7:d5:bb:eb:63:b5:
42:bb:29:9e:42:cb:8c:57:cd:da:59:03:e2:35:be:77:9d:ab:
fa:73:a7:52:ec:c4:be:d9:ed:88:a4:d1:26:e1:2e:a4:8b:fe:
9d:d6:eb:8a:ee:d9:d4:29:03:36:42:06:dc:bd:be:9e:b2:14:
97:8a:04:2f:bb:aa:e3:d5:1b:89:98:c5:25:5d:a1:c4:88:25:
45:6b:11:8b:cc:40:37:14:06:c5:ef:53:e1:3e:57:f4:20:2d:
5b:fa:18:28:50:0e:07:10:d7:c4:1f:d9:5c:ff:95:6c:c6:d4:
d4:74:5d:c3:35:81:72:55:60:8c:83:4c:fb:c7:82:86:c2:24:
0a:0e:ec:1f:29:eb:02:8d:45:12:6c:99:a3:30:b0:52:f6:0e:
35:56:ce:40:7e:61:34:cd:45:2f:0f:18:4f:62:fd:94:3e:2c:
a6:1b:2d:ad:9c:05:d2:fd:fc:2a:b5:73:d6:b1:83:db:52:4d:
db:19:28:69:56:1a:4e:b0:8d:65:2d:5c:d8:37:9c:e1:72:d7:
90:4b:53:41:7c:fa:53:8a:02:ae:04:80:ce:42:d9:24:39:d1:
e4:7a:55:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:35:22 2025 by rpki-client