Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
File: 8NXf3eTWeccRzOBu30A2yk5cwQM.mft (raw, json)
Hash identifier: VXkHRKh8qThVcv3vs4MF0J8R+y0N3PcE1qRavsYYrYo=
Subject key identifier: F1:C0:EA:EA:A6:A8:5F:6C:7A:9E:3C:F7:E1:0E:C2:06:F6:6A:43:5B
Authority key identifier: F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
Certificate issuer: /CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Certificate serial: 0197B5C4F1B1071D8A68B835A1B51C85638F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
Manifest number: 0D42
Signing time: Sat 28 Jun 2025 09:01:12 +0000
Manifest this update: Sat 28 Jun 2025 09:01:12 +0000
Manifest next update: Sun 29 Jun 2025 09:01:12 +0000
Files and hashes: 1: 8NXf3eTWeccRzOBu30A2yk5cwQM.crl (hash: HSd8wELqpEwAvW3rsTXoBq/vHzHy/k2MwCAHG1/En7M=)
2: Nh04CLMcck1XHS9AATe9hyD29NE.roa (hash: KRd9oxirDVyH2M186/c3VQHXMTtIMq/vRs5kMb4jBs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:f1:b1:07:1d:8a:68:b8:35:a1:b5:1c:85:63:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d5dfdde4d679c711cce06edf4036ca4e5cc103
Validity
Not Before: Jun 28 09:01:12 2025 GMT
Not After : Jun 29 09:01:12 2025 GMT
Subject: CN=f1c0eaeaa6a85f6c7a9e3cf7e10ec206f66a435b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7b:08:6c:9f:5e:45:f7:e4:d5:e5:79:f8:d0:
39:2c:05:2c:73:d7:75:c4:e8:d8:ba:41:7a:fa:af:
82:9e:e4:4d:f3:b7:3e:25:7a:50:02:a8:8a:f8:dc:
ce:1f:85:4b:e3:07:aa:6d:91:27:a9:34:b8:37:28:
ae:ff:05:36:67:f4:50:94:5a:2b:9b:85:d2:4a:0b:
a5:1c:af:75:89:96:64:38:66:4d:1c:9e:8d:3f:60:
7c:6e:4a:45:1f:1f:a6:e5:01:f2:ee:ee:d1:ef:d3:
5d:56:ca:05:19:36:da:6b:13:9e:34:94:f3:56:d7:
d2:bb:47:83:e6:e7:78:20:37:35:aa:e8:46:2b:84:
91:49:d0:b9:ff:d0:38:c0:07:57:49:b4:11:50:c8:
df:75:97:f6:62:31:78:d7:5f:b0:3b:15:96:59:e3:
02:5e:5f:2c:07:9e:37:63:8f:db:ba:13:c7:77:41:
e3:09:79:47:95:88:f0:6b:a1:10:40:0a:81:cf:d6:
1f:96:e9:d5:6d:73:b0:95:f8:db:3c:5b:eb:74:93:
d0:10:fa:db:33:13:ff:b1:78:bc:58:50:af:8d:12:
0e:f3:d0:ed:42:7d:76:18:26:ab:fd:c9:e0:c0:f5:
f3:44:ed:f3:4a:8e:a9:27:f6:64:b1:61:48:50:70:
ba:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:C0:EA:EA:A6:A8:5F:6C:7A:9E:3C:F7:E1:0E:C2:06:F6:6A:43:5B
X509v3 Authority Key Identifier:
keyid:F0:D5:DF:DD:E4:D6:79:C7:11:CC:E0:6E:DF:40:36:CA:4E:5C:C1:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NXf3eTWeccRzOBu30A2yk5cwQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f2ecf8-7c5c-45ab-83f7-e74d4490af6c/1/8NXf3eTWeccRzOBu30A2yk5cwQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:b1:3b:6f:e3:ae:e3:dd:86:0f:bf:05:90:07:86:59:7f:9a:
6a:51:d8:4c:48:ff:ae:e5:df:23:03:a5:72:15:19:11:d2:29:
47:54:de:9e:10:1b:23:03:e3:7f:c3:c3:37:51:2f:1d:87:35:
51:62:1f:02:39:65:7e:f2:16:61:43:bc:6f:77:03:d3:96:15:
57:f0:35:23:75:62:52:3c:b6:20:b2:e3:bb:60:18:b9:b8:7a:
ea:e5:d2:f8:8b:60:0f:6d:d2:32:64:ad:9f:ce:75:15:1b:47:
e8:ea:56:1a:6e:f8:b9:4a:35:ed:dd:d4:0d:9f:6b:76:d4:2a:
b3:7d:23:45:da:b7:40:58:13:c9:39:fb:b0:9a:37:5d:f9:d9:
6d:a2:5a:ea:13:42:ba:8c:65:ab:26:60:70:b8:a9:98:18:18:
a9:0c:66:fc:8a:c9:f0:c9:97:50:4c:5d:f5:2f:b2:d1:83:59:
98:15:74:8b:90:fa:3d:d3:24:13:13:02:44:b5:4d:00:78:25:
d4:ea:ea:08:b8:6b:a3:fb:09:4f:af:be:18:de:1e:0b:73:d3:
da:a6:81:fd:35:14:cd:b5:d2:67:0c:69:97:85:4c:47:77:b4:
f8:db:0f:a1:83:05:55:62:6d:79:0b:c5:58:0f:7a:b7:c7:5e:
14:3d:11:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:13:50 2025 by rpki-client