Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
File: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft (raw, json)
Hash identifier: pYO+j9hCQ430FDScgJNv9hBTArYHGJbCrDgUDvsd+Nc=
Subject key identifier: 28:87:E1:FD:12:B0:3D:A8:82:A6:B4:6E:C1:75:16:C4:06:51:A5:DC
Authority key identifier: F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
Certificate issuer: /CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Certificate serial: 0197B6D7948BAA11601F129E52A184548BAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
Manifest number: 0560
Signing time: Sat 28 Jun 2025 14:01:10 +0000
Manifest this update: Sat 28 Jun 2025 14:01:10 +0000
Manifest next update: Sun 29 Jun 2025 14:01:10 +0000
Files and hashes: 1: 8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl (hash: IzvS5J/oenaFZPrw9SBmCA7+ZgVS7ooSYq78NievlKQ=)
2: Tm2nsqR26Dl9LeV6Cyt_JHr-v8Y.roa (hash: uihaqn4cl1EUm9BC8+JYEwJFvxEP94e45YDqvyFRac4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:94:8b:aa:11:60:1f:12:9e:52:a1:84:54:8b:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22d5f17636a1f14efa8a0e4099b3d335ff84dd3
Validity
Not Before: Jun 28 14:01:10 2025 GMT
Not After : Jun 29 14:01:10 2025 GMT
Subject: CN=2887e1fd12b03da882a6b46ec17516c40651a5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:e7:ea:ad:da:06:4a:5e:9a:46:91:3e:47:
a6:8a:0f:ca:51:13:55:2e:6b:56:2f:01:6c:0b:e6:
93:6f:c5:83:31:a0:c3:20:d8:7a:c5:96:a2:88:33:
35:df:f8:ca:57:b6:2e:8f:da:47:59:f9:78:9f:cc:
a0:e7:e6:97:25:89:66:10:c3:4c:be:3e:d0:78:2a:
8e:67:b8:ec:35:76:6e:3d:ff:8e:db:1b:51:a0:36:
8b:21:a2:6e:b7:c1:ca:67:70:7a:67:0a:eb:32:1a:
87:e1:1c:71:82:58:96:52:5d:b4:ac:df:03:8e:93:
fc:21:9b:6e:10:65:a0:7d:cf:0e:72:d2:b2:e4:a9:
1f:68:af:3b:d0:2d:2d:8d:fb:38:e2:3c:f7:b2:be:
e3:a8:70:57:e3:61:44:6b:fd:4f:ad:9f:32:48:a2:
41:8a:6c:c6:00:8c:5a:53:2c:05:56:83:f1:78:82:
48:5c:e0:c2:8e:07:59:22:ce:70:ef:9a:3a:56:be:
c1:a0:52:36:3e:7e:5b:b3:63:12:38:2a:7c:a1:a4:
b3:d4:37:d4:ed:96:94:c5:dd:16:37:17:f7:32:21:
6a:e2:e2:32:69:6b:75:29:55:a3:8c:05:79:4a:5c:
90:3a:9b:87:91:e5:a6:94:6a:7c:72:f1:83:63:f6:
ed:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:87:E1:FD:12:B0:3D:A8:82:A6:B4:6E:C1:75:16:C4:06:51:A5:DC
X509v3 Authority Key Identifier:
keyid:F2:2D:5F:17:63:6A:1F:14:EF:A8:A0:E4:09:9B:3D:33:5F:F8:4D:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8i1fF2NqHxTvqKDkCZs9M1_4TdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/3d3986-6d42-4b3d-9fc0-611a2a1b8224/1/8i1fF2NqHxTvqKDkCZs9M1_4TdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d2:91:f8:4c:fe:21:fe:cb:02:b8:08:68:fd:0f:dd:12:3b:
eb:f3:b7:40:08:44:e7:ba:a0:d8:c0:58:37:83:a2:01:c4:24:
41:97:15:5a:bf:51:46:a4:8f:5e:d2:66:0b:97:5a:0e:83:57:
57:a6:50:9d:11:13:d9:be:cc:83:19:ad:1b:e3:c1:86:83:6d:
9c:a2:85:7a:8b:5d:e1:67:05:3f:45:17:a4:82:9f:95:44:52:
b3:18:30:19:8a:d9:88:69:d8:0f:cd:e1:7a:5b:39:4d:46:3f:
56:7f:e2:54:77:7d:69:51:1e:d6:c2:3d:38:65:79:93:56:4c:
a2:ec:e7:02:66:83:64:84:37:09:31:3a:65:0c:09:8f:38:38:
2a:e3:90:88:08:3a:d3:2e:f2:83:b7:1b:4c:44:3e:71:5b:cb:
c6:d2:98:b8:c1:5d:e3:a8:1f:79:65:14:8e:a0:e8:c9:b5:84:
04:20:5c:e7:d1:6e:9b:19:11:44:1e:25:1f:bb:2b:c9:2b:0d:
2b:ac:5b:6c:90:0f:16:31:28:f2:10:f6:5f:c9:d2:e3:be:57:
20:e0:e4:d8:d5:c0:61:9e:63:9e:4f:ff:1a:ba:db:1a:77:8a:
cf:b4:25:c5:26:4a:48:36:ec:55:70:b6:1c:46:bc:82:9f:7f:
cf:23:3a:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:12:57 2025 by rpki-client