Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: DiGuyadDQR1oWSglJCZiHrspHVL+1Xziep31MVbQ7B4=
Subject key identifier: E2:47:B4:C8:2C:B1:B4:DC:2F:72:8C:2C:49:D9:14:69:A2:C9:A1:79
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 0197B820F4D4ED08B9CBE0C6AA16F9ECD91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 0EA9
Signing time: Sat 28 Jun 2025 20:00:56 +0000
Manifest this update: Sat 28 Jun 2025 20:00:56 +0000
Manifest next update: Sun 29 Jun 2025 20:00:56 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: Rp0dFmdPDcldlonC4gvVckFYOjxB1TcqGk4oPxoUmaU=)
2: alsuRe4zIZd9zoPDISZt1Bveg70.roa (hash: EWpeZ5riJCjW/KG77BSV/gky0WcGkW9H+LHjXXYnpDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f4:d4:ed:08:b9:cb:e0:c6:aa:16:f9:ec:d9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Jun 28 20:00:56 2025 GMT
Not After : Jun 29 20:00:56 2025 GMT
Subject: CN=e247b4c82cb1b4dc2f728c2c49d91469a2c9a179
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:66:a3:7c:14:7b:e3:6d:7a:95:d7:db:8c:ef:
4f:a0:0e:fa:f7:6e:d2:7c:03:89:8b:91:0a:3b:f9:
3d:c0:c1:01:17:ce:0e:cb:5c:74:90:2d:c4:4b:65:
8a:d3:86:2e:e0:bc:e8:ad:84:d1:3c:ee:df:79:83:
fb:3f:15:5a:42:5d:21:56:8e:42:1a:0f:1c:28:77:
25:b6:82:4a:b4:e7:8e:c8:26:b0:e5:c3:61:8a:26:
dc:8d:b3:f6:05:fd:5b:b9:05:12:ef:dc:bd:1e:56:
ab:df:d8:9a:72:35:f4:2f:69:b8:2b:9c:c8:69:d3:
98:b2:a2:26:1e:c7:9e:b7:20:39:36:92:a6:78:b9:
51:e5:f4:78:16:a9:f7:93:24:56:5b:f3:c3:0f:b2:
fa:7b:e1:6c:09:bc:50:54:ec:b2:c4:e0:9a:8a:fd:
61:7a:51:24:92:74:d3:f6:97:4a:1f:0e:ad:35:ff:
97:f6:3f:73:92:4e:33:66:09:fb:e0:ad:8a:21:19:
8c:1a:57:81:92:7b:d9:39:d1:eb:c7:3d:b7:e4:9f:
72:86:cc:09:f8:bf:1b:4f:a0:3f:ff:4e:56:a6:dd:
9e:97:85:9d:4b:47:8b:63:bc:58:a8:32:00:3c:9e:
bc:1b:5d:6d:8d:b3:ea:9b:af:b5:f5:2f:96:99:fd:
16:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:47:B4:C8:2C:B1:B4:DC:2F:72:8C:2C:49:D9:14:69:A2:C9:A1:79
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:d6:c3:85:85:5d:1c:71:d3:dc:00:eb:e2:22:4e:05:0c:03:
ab:0e:80:c2:6e:b1:38:da:70:0d:75:e8:60:b2:35:fe:44:f0:
0c:2f:0e:9f:e1:e7:4f:d4:3c:c6:62:02:09:a4:05:eb:2f:52:
18:33:f0:c6:1a:63:09:8f:b8:a6:7c:10:47:d8:4d:d9:ee:e6:
58:b9:fe:ec:37:e3:9f:b7:bf:80:02:b1:ae:c8:ea:96:bf:8e:
d3:e7:d8:92:cd:3c:c4:fe:75:f7:da:83:0c:f9:6e:f5:8c:d8:
f1:60:63:eb:91:75:e0:d0:a3:0a:af:41:1b:d3:28:8a:1f:0f:
b1:f0:93:b8:38:c4:5b:d6:fc:6a:b0:a2:83:9c:4e:3e:ac:4c:
81:c4:0f:9d:66:2d:12:55:83:0c:d3:c6:b7:1a:f6:22:dc:e3:
f3:1b:1e:76:b1:3b:8d:f1:9d:cd:3e:3d:36:f1:4a:d3:ec:a3:
48:58:49:0d:bb:45:a4:9f:60:81:69:af:52:e9:f8:a1:44:63:
44:bc:03:c9:c7:09:a4:50:50:11:5a:81:c1:e4:85:ba:51:26:
61:65:f6:4d:87:46:63:90:1a:59:0c:7a:df:8b:2a:33:ba:1b:
be:bb:cc:4b:bf:e5:05:b4:fd:b7:26:90:65:df:39:9d:3e:30:
17:59:84:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:22:35 2025 by rpki-client