Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
File: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft (raw, json)
Hash identifier: bxHDhicfKhKcfGSetVAEUkRyCdDyMI4eGix1IkFveUs=
Subject key identifier: 21:4B:D3:F3:E7:B5:15:47:7D:DC:21:5D:2A:2F:B7:30:B8:0E:63:FA
Authority key identifier: F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
Certificate issuer: /CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Certificate serial: 0197B70E5AD00341771C6DCF4DC457F7E81D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
Manifest number: 155C
Signing time: Sat 28 Jun 2025 15:01:00 +0000
Manifest this update: Sat 28 Jun 2025 15:01:00 +0000
Manifest next update: Sun 29 Jun 2025 15:01:00 +0000
Files and hashes: 1: 8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl (hash: upizSEhAdve8lgA30z3PVtQwwcbqCZRgUNjgpZ+HqKI=)
2: f4A325yGj48RuMfkjcKdx35IWgg.roa (hash: j8y8oC78Ayis+Zl1DL+FUWPv5N+us3D0FIOg/cZJpDI=)
3: g4Nm3zw7BZCf660L7J2wB5s2-SA.roa (hash: +YfoAh+I7x70vYXeLBN3w6ZRtj/Ii78yrIjM344/IWs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5a:d0:03:41:77:1c:6d:cf:4d:c4:57:f7:e8:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2fe6f2a937838df2b15da1743bcd9fb0e29cf2e
Validity
Not Before: Jun 28 15:01:00 2025 GMT
Not After : Jun 29 15:01:00 2025 GMT
Subject: CN=214bd3f3e7b515477ddc215d2a2fb730b80e63fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:35:f3:2d:75:24:c0:bd:bc:57:d6:0d:ac:f0:
f6:30:05:b9:b5:d4:4d:ee:66:54:f6:7b:eb:c2:9e:
b6:09:08:68:e3:f7:76:56:91:5f:de:e6:02:7a:fc:
fc:6f:f3:31:46:27:c3:1e:79:84:fd:33:4c:72:f9:
e7:3e:10:0f:b0:3a:74:92:79:21:63:f4:ce:58:bf:
7b:ab:ee:69:ff:58:40:c6:db:b5:61:c7:9e:3e:89:
a2:b7:24:22:18:7c:3b:98:61:b4:3e:a6:43:a8:3c:
ba:b5:3a:93:2e:63:b4:6f:1a:e3:e8:32:2d:b2:fc:
93:1a:19:5e:d9:ab:8e:8e:4b:6e:0d:70:7f:b7:7a:
4f:70:5b:58:77:fa:f4:32:4d:d1:22:a4:17:e0:04:
eb:d1:79:fe:cc:0c:8c:56:79:ec:3d:6c:3d:08:72:
04:09:79:09:f0:71:23:02:d7:3d:ff:b8:86:99:29:
0d:10:f0:0e:58:c8:43:6c:e1:43:c6:6d:34:80:67:
d3:af:c5:f7:88:7a:d3:d7:36:0c:91:a4:16:37:51:
da:8c:e2:0b:da:ba:1d:1e:57:20:0c:7d:60:70:89:
4d:36:4e:52:c9:48:40:82:a2:7a:4e:01:de:61:f5:
31:8f:16:c7:4b:3a:ca:b5:0e:21:13:0c:39:25:9b:
54:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:4B:D3:F3:E7:B5:15:47:7D:DC:21:5D:2A:2F:B7:30:B8:0E:63:FA
X509v3 Authority Key Identifier:
keyid:F2:FE:6F:2A:93:78:38:DF:2B:15:DA:17:43:BC:D9:FB:0E:29:CF:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/2ab785-2f86-489e-ac1c-b72557668b01/1/8v5vKpN4ON8rFdoXQ7zZ-w4pzy4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:f6:bd:e4:0c:3d:d4:ee:f3:42:b7:5f:78:6c:2d:dc:dc:97:
06:f8:78:8b:40:72:11:5f:10:7d:32:75:fe:0e:18:34:5c:18:
34:69:13:64:23:2c:dd:0b:ba:c7:10:ac:ac:8a:16:bd:a0:a6:
8a:d7:d4:69:1a:70:ee:a8:f4:ea:6b:00:da:74:bf:9b:c0:11:
2b:46:1c:95:1b:61:5f:77:8e:67:37:08:8c:c4:50:67:04:44:
01:7d:da:ff:25:f5:4f:a2:89:09:69:ee:aa:fc:65:32:0c:32:
1f:2b:b3:06:a6:ad:f9:b5:59:77:05:ba:6b:93:0d:24:f7:01:
13:70:70:aa:c6:7d:f9:19:4d:02:62:e3:00:ff:59:f5:e5:d6:
18:21:b5:09:f0:6a:ff:bc:aa:8b:60:0b:a6:89:b1:45:3f:3d:
15:3b:a1:ba:c7:76:86:71:0b:31:90:4c:c4:cf:48:50:5e:91:
a8:cd:a4:4f:15:a4:65:38:72:28:f1:f6:4f:39:56:b1:6d:49:
aa:f5:59:32:26:c5:81:40:60:e0:c9:b9:39:61:e1:38:38:d2:
49:a6:d7:85:ac:9a:e9:be:fc:dd:37:2b:f1:13:a3:2d:da:07:
ad:5f:be:74:58:39:58:87:eb:a5:35:aa:da:26:d3:7f:5f:72:
78:96:b9:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:00 2025 by rpki-client