Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
File: 8fGG6XCXyEF9lDfXDP38UnMxtag.mft (raw, json)
Hash identifier: Ghrr3M9yNscb+0aw6B88tlZagT+hFu9N87OyIpR1ko8=
Subject key identifier: 4D:CD:29:25:09:0E:73:4C:ED:68:B5:FD:1F:5C:05:BE:90:85:D0:DB
Authority key identifier: F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
Certificate issuer: /CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Certificate serial: 0197B7B304E81D59B79962313803CCE3E7F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
Manifest number: 0A3A
Signing time: Sat 28 Jun 2025 18:00:51 +0000
Manifest this update: Sat 28 Jun 2025 18:00:51 +0000
Manifest next update: Sun 29 Jun 2025 18:00:51 +0000
Files and hashes: 1: 8fGG6XCXyEF9lDfXDP38UnMxtag.crl (hash: YFea903Ekzb2eRcBHYkc1kw7tIL77C4lC9IsnTYOReQ=)
2: Bb-dCG0MYANSL8Bk5tQCjYBHu7I.roa (hash: 0dT55FR6gYNAR7wtBsJy+EY1xVBw/famE9UI3Od2H8A=)
3: K5Oof9CYQW5Wc9ghK1PUdN-aFTY.roa (hash: 2dlcOZzL+Eim7W+NTEiKqnv/Tt9OOEdX1RMt+wWQD9U=)
4: hwiO597jiOerCy1jD6kKNf_z4mE.roa (hash: At2Ig8rywEMbpAnMXYd8IjR4QLHdmR+nptBnEkQohjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:04:e8:1d:59:b7:99:62:31:38:03:cc:e3:e7:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f186e97097c8417d9437d70cfdfc527331b5a8
Validity
Not Before: Jun 28 18:00:51 2025 GMT
Not After : Jun 29 18:00:51 2025 GMT
Subject: CN=4dcd2925090e734ced68b5fd1f5c05be9085d0db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:ed:9e:16:a0:b5:2a:76:3e:51:33:4d:c4:
98:30:fc:91:17:da:07:c5:a8:2f:1c:b0:c5:44:04:
d2:75:cf:72:d4:8c:94:64:ef:5e:b6:50:d2:cc:06:
74:64:75:d5:19:04:58:7a:66:16:6e:6e:47:75:4e:
e9:66:11:b5:e6:4f:68:80:0c:92:45:43:eb:45:ed:
7d:86:20:4e:d0:62:5c:11:aa:20:a0:71:dc:27:76:
19:fb:eb:67:98:5e:c6:bd:df:d9:c6:74:77:57:b7:
20:8f:8f:28:1a:13:cf:26:80:7d:d1:13:58:64:92:
58:ec:c4:77:c2:65:04:bc:c7:cf:99:91:39:02:33:
26:d3:cc:b8:c2:89:bb:e8:09:e8:e0:a0:be:c9:d7:
29:ac:90:ec:d5:c0:68:cf:54:52:f4:b1:29:a4:55:
45:64:05:2a:c6:35:08:67:f9:3b:84:12:ef:d9:68:
b1:ea:9c:0d:6e:c2:a5:ff:18:a5:fa:b6:6f:89:24:
ef:ef:b1:1c:40:6a:23:4d:e7:90:39:2f:3d:a7:9a:
56:8a:b0:ef:2b:0a:0e:a0:cc:22:26:cd:0a:88:77:
19:18:25:47:ea:51:3c:54:af:8b:36:7c:56:8a:20:
f2:fe:3b:56:b0:13:8d:e1:8e:17:6e:1c:ac:9d:95:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CD:29:25:09:0E:73:4C:ED:68:B5:FD:1F:5C:05:BE:90:85:D0:DB
X509v3 Authority Key Identifier:
keyid:F1:F1:86:E9:70:97:C8:41:7D:94:37:D7:0C:FD:FC:52:73:31:B5:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fGG6XCXyEF9lDfXDP38UnMxtag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/5c3b99-b8ef-4ed1-857c-b65cd136262e/1/8fGG6XCXyEF9lDfXDP38UnMxtag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ed:a7:68:47:4b:de:28:55:5d:fe:06:eb:75:fc:ae:4b:c9:
55:df:db:7e:05:0b:85:dc:00:25:05:08:45:f6:25:88:86:ba:
2e:1b:d4:4c:3c:e9:7e:12:21:ea:fe:bb:9d:99:ac:5b:d6:61:
98:1d:7c:ad:55:48:3e:50:c2:10:b8:c0:00:d8:bc:0d:35:7b:
2b:c7:02:d8:a4:0c:c9:4d:e0:0f:27:17:5d:51:c9:5d:90:fd:
a0:88:5a:e7:30:37:dd:44:8e:40:99:64:b6:2a:67:9b:85:34:
40:f6:dd:e1:26:b9:19:38:11:2d:26:d5:84:dd:3a:9d:39:3a:
3e:17:44:ad:53:3d:d6:3a:09:b7:99:c0:33:2f:5d:fa:b9:9a:
39:50:9c:d1:85:75:da:50:63:e8:9d:8c:86:9e:8e:c8:f6:76:
e4:7a:20:3c:2b:2a:af:bd:0f:7e:80:33:95:00:2a:27:ef:da:
1b:81:fc:97:ce:f4:26:18:dd:4a:c7:d3:36:c4:66:da:ca:13:
d2:70:91:6c:96:76:05:27:0e:65:e1:e5:16:0e:ab:f6:0d:76:
b9:6f:33:3d:fb:49:1c:de:5a:bf:1c:da:a9:97:d7:33:fe:b7:
77:8e:4f:7b:66:af:ca:57:62:c3:fa:2e:ad:a3:d1:48:c4:b8:
7b:0f:31:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:36:54 2025 by rpki-client