Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
File: 8NREvH1TNNoU3oBRcrJiXpgwdj8.mft (raw, json)
Hash identifier: jV++Xy9wrrge73R40a8SRKdbvw/NbFq/DW7K/KmFyyU=
Subject key identifier: 78:08:C1:34:A3:1D:7C:A9:12:4D:C9:A2:C8:20:39:0A:4D:E5:F7:71
Authority key identifier: F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
Certificate issuer: /CN=f0d444bc7d5334da14de805172b2625e9830763f
Certificate serial: 0197B6D743B3952C598B72260ADDC1473085
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
Manifest number: 0535
Signing time: Sat 28 Jun 2025 14:00:50 +0000
Manifest this update: Sat 28 Jun 2025 14:00:50 +0000
Manifest next update: Sun 29 Jun 2025 14:00:50 +0000
Files and hashes: 1: 8NREvH1TNNoU3oBRcrJiXpgwdj8.crl (hash: Gm+3chV/ZezKxx0kwIugsu3f+t38id4HlYd+4cUZTAU=)
2: CGcYt6qx267X0glJTA7aL9VX3lc.roa (hash: C7Akg4uPsnwTrDUVpipPgKYJ70rbAz3rIOj8sk4nXFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:43:b3:95:2c:59:8b:72:26:0a:dd:c1:47:30:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d444bc7d5334da14de805172b2625e9830763f
Validity
Not Before: Jun 28 14:00:50 2025 GMT
Not After : Jun 29 14:00:50 2025 GMT
Subject: CN=7808c134a31d7ca9124dc9a2c820390a4de5f771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:22:2e:e3:8a:5e:9f:b0:71:1b:b0:b0:1b:f5:
0f:56:a2:be:13:4f:73:0e:3b:c3:28:6d:4d:fa:82:
b0:89:9b:26:01:78:86:e3:fb:71:d2:71:88:6b:42:
1d:b9:ed:d1:c8:32:d6:73:c5:46:ef:19:38:3d:c7:
e4:db:9c:45:7e:f3:bd:da:3b:34:46:92:85:17:2b:
df:10:ef:cf:bc:31:b5:c7:e4:5b:0f:2f:64:c6:fc:
ea:ac:06:39:cf:bb:d4:29:0b:ab:95:42:75:b6:3e:
6d:64:c3:56:ec:1e:00:65:b9:0e:fa:8f:1a:20:5f:
fb:a8:9d:39:8f:cc:9c:e8:bf:c1:22:d9:3a:e9:c2:
e9:bf:f8:cb:ba:9c:60:f2:9a:6a:90:15:69:60:ed:
99:fc:d1:9a:53:24:1e:4c:24:0a:dd:19:b4:92:bf:
75:b2:97:4a:03:e4:1d:0f:8b:59:0e:ed:59:87:f2:
fb:ba:d2:35:6f:68:67:d7:c3:3e:08:2a:9f:cb:e3:
2b:18:0b:28:0e:ea:38:a6:69:71:0a:67:a4:1e:b0:
74:fa:d7:0b:dc:d3:0b:b6:ac:70:f5:24:0b:ac:c8:
c3:e2:6c:83:a6:d8:11:5c:c1:a5:b0:71:83:c9:1e:
1f:08:bf:02:cd:59:96:8f:11:bb:d6:5d:b5:93:88:
c8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:08:C1:34:A3:1D:7C:A9:12:4D:C9:A2:C8:20:39:0A:4D:E5:F7:71
X509v3 Authority Key Identifier:
keyid:F0:D4:44:BC:7D:53:34:DA:14:DE:80:51:72:B2:62:5E:98:30:76:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NREvH1TNNoU3oBRcrJiXpgwdj8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/5dc27d-5adb-4df3-99c2-98d9c4257fc6/1/8NREvH1TNNoU3oBRcrJiXpgwdj8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:82:2f:78:19:ba:30:8d:aa:cb:2c:20:5b:21:d7:73:22:cc:
e2:7e:3e:c5:0d:d6:8c:20:f3:14:cf:f9:4a:91:ae:58:c9:81:
67:ad:ba:cc:dc:f6:e2:58:d3:b2:a8:6e:e0:90:0c:5c:2e:fa:
cd:fe:3b:13:4b:ac:69:ce:c2:8c:58:cb:16:11:5f:be:3e:75:
aa:a7:1d:48:f7:23:4f:1f:39:73:e0:28:98:f7:ed:17:09:78:
22:c2:04:fa:6c:ce:fa:a1:84:87:5c:30:5b:1c:ab:ac:ce:e7:
fb:12:45:32:c3:06:19:7f:2b:ff:f6:20:37:29:2e:53:97:15:
f5:61:51:4a:9f:e9:0d:bf:bc:98:b2:54:13:de:e9:08:b0:63:
b8:cf:5e:5c:2a:f1:ef:f8:ec:84:9a:d4:9c:f9:12:06:89:a2:
48:22:aa:57:00:6f:91:29:a7:bf:5c:4a:b5:89:90:93:03:42:
4c:b2:d8:e9:16:63:bc:4b:37:4b:36:a4:61:00:4f:f6:97:f8:
3c:f1:68:b7:15:d6:cf:1b:73:e4:66:c0:de:49:a9:29:d9:8c:
d1:e1:13:06:61:76:43:b1:ef:0b:e5:33:57:32:c2:b5:6e:67:
ec:24:73:ae:de:9a:63:64:60:5b:18:4c:5c:37:35:f2:21:a2:
5d:c4:da:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:24 2025 by rpki-client