Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
File: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft (raw, json)
Hash identifier: Y3Vlj7bpA1G+mekkGGJXGT9ebDVTLlw6bydRz8UGIfk=
Subject key identifier: B6:0F:D1:AF:94:F0:D7:FE:B5:83:B5:5E:C2:47:96:F9:8A:6E:D4:A1
Authority key identifier: F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
Certificate issuer: /CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Certificate serial: 0197B7EA55E2CDA8CF299A42D0DDD346FC2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
Manifest number: 0E47
Signing time: Sat 28 Jun 2025 19:01:17 +0000
Manifest this update: Sat 28 Jun 2025 19:01:17 +0000
Manifest next update: Sun 29 Jun 2025 19:01:17 +0000
Files and hashes: 1: 8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl (hash: 3ygzrSTCg0GLnNXlYjXhb2cpZ0KyRlbjEFpD/FUskdg=)
2: FGmjTJ5BNIGcHTaYOHKezd1P2zY.roa (hash: Erq/bi/faVpdLd489gfJpnnRsTbaiEt6kPr4sQ09lTM=)
3: ZK76vlPS_FSysziBAdOIgNMogW0.roa (hash: xB77QsTFqqCgmtvQaPv1mOIqwZjp+Xnt/7UaUeOP1pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:55:e2:cd:a8:cf:29:9a:42:d0:dd:d3:46:fc:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f930e23b08a15ccd4dc9ab1829c607fedde8a5
Validity
Not Before: Jun 28 19:01:17 2025 GMT
Not After : Jun 29 19:01:17 2025 GMT
Subject: CN=b60fd1af94f0d7feb583b55ec24796f98a6ed4a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f7:d1:53:8f:f7:db:35:67:4e:87:db:f8:ad:
c0:07:36:a9:68:12:bf:fd:16:9d:ce:77:8a:a4:96:
a2:46:df:87:df:df:cc:bb:d0:8a:30:dc:c1:24:e6:
3d:ae:c5:02:11:f4:2b:c4:5f:71:60:2e:42:45:18:
a9:d2:32:ba:f9:3a:ca:9c:70:b0:8e:a3:c8:3a:eb:
a9:e1:ff:65:3e:c6:e0:89:9b:ff:37:c7:47:41:7a:
39:57:78:d0:b7:26:58:f9:9d:75:e2:ce:3d:8e:7f:
11:07:62:5b:ea:f8:ba:b5:9d:01:5a:d3:da:1b:a3:
d2:2f:b0:3c:f4:27:f2:e9:51:dc:7f:2c:f0:cb:11:
e0:fa:c8:53:62:6a:1f:3d:1e:4a:d9:c7:d6:1b:78:
3d:1e:b9:46:63:8e:42:37:7a:5b:22:98:cf:7b:07:
65:2d:38:55:b8:9d:18:bf:14:d0:75:74:63:97:34:
d7:9c:31:bb:50:3e:a4:a7:8d:4a:45:66:75:a7:9f:
87:ad:23:43:b4:9e:a2:52:01:1e:18:c8:c9:1d:76:
c3:7e:43:a8:62:7e:5a:da:06:53:63:a7:ac:5a:da:
c6:16:52:3f:34:0c:9e:cd:5e:0d:4a:21:26:e5:26:
2e:87:5a:d5:75:0e:54:6b:39:79:ab:3e:07:db:66:
45:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:0F:D1:AF:94:F0:D7:FE:B5:83:B5:5E:C2:47:96:F9:8A:6E:D4:A1
X509v3 Authority Key Identifier:
keyid:F1:F9:30:E2:3B:08:A1:5C:CD:4D:C9:AB:18:29:C6:07:FE:DD:E8:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fkw4jsIoVzNTcmrGCnGB_7d6KU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ea128c-a09d-40e8-bb11-aea714ec5113/1/8fkw4jsIoVzNTcmrGCnGB_7d6KU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:16:d6:d0:65:3a:02:11:2f:5e:4b:d3:0c:45:19:56:fb:88:
30:1f:9d:57:5c:30:1d:71:e8:c2:66:41:c4:39:d3:12:cb:47:
a9:d4:36:ce:fb:f9:34:18:bd:40:33:7a:69:87:1b:a7:30:38:
7f:0e:db:08:84:6d:31:c5:fb:2c:49:7f:28:0a:22:1b:f2:2e:
8a:66:5a:8e:6a:9f:a0:d3:b0:22:48:71:03:a7:df:89:e5:4b:
d9:24:01:9c:fb:bb:4a:0c:99:6b:5d:67:ee:ea:56:73:1b:59:
42:5d:fa:01:b5:2f:59:11:07:78:c8:c2:c2:d5:96:f0:4a:b2:
3b:74:44:89:b5:48:d0:dd:f7:c5:94:1d:a9:3f:f2:2c:1a:30:
ca:bf:8a:33:7e:9d:7e:84:a6:ec:90:fc:b0:60:ae:e6:ed:31:
e2:f0:30:56:fe:e2:2e:01:90:23:19:eb:e0:94:f2:c3:98:26:
fb:60:05:a0:ba:ab:77:4b:c1:23:e1:fc:58:a8:a7:73:73:e9:
7b:a3:ff:43:3b:93:dd:e3:16:de:2b:60:a3:59:2f:46:45:37:
ec:11:66:2f:a0:f4:c7:7c:1a:31:0e:d5:bd:3d:99:e0:c4:88:
df:6b:1e:da:7e:1b:54:4e:90:15:ee:e1:ce:61:cb:44:04:74:
e8:42:62:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:46 2025 by rpki-client