Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: QhvEjtI1danUSoatO02R5nrgklZfhAK1EXFsNFhynhU=
Subject key identifier: 29:71:45:40:88:CF:A4:57:6F:B3:2D:58:DF:5A:AC:FF:C9:0E:98:B5
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 0197B6D780562F8283E6DFD129A82FD0F548
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:01:05 +0000
Manifest this update: Sat 28 Jun 2025 14:01:05 +0000
Manifest next update: Sun 29 Jun 2025 14:01:05 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: LUt4LoT7h4AFnaH6mOZ3VrEG9mRLX9ffLnrmEs4OtzI=)
2: gNeiVk2m8BNFP8OBLSZLGLMl51E.roa (hash: Pvly8BuBxC0TCqmwqCY2YQ1zQ+UXFXDzJobqg59BS7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:80:56:2f:82:83:e6:df:d1:29:a8:2f:d0:f5:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Jun 28 14:01:05 2025 GMT
Not After : Jun 29 14:01:05 2025 GMT
Subject: CN=2971454088cfa4576fb32d58df5aacffc90e98b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:34:2a:d5:8a:b5:8c:ee:f2:af:8f:29:f0:
fb:26:93:f5:9e:13:76:46:e3:fa:9f:1a:c5:18:2a:
64:de:8c:2e:25:0d:d4:c3:5f:5f:e1:e7:94:2f:7b:
38:e0:bb:2e:ed:92:b1:17:49:42:b7:ef:91:d6:40:
47:99:39:97:01:8f:72:ea:d5:cb:c2:c2:2c:0a:ca:
34:0d:99:99:e5:78:e3:38:e3:cd:a5:68:32:3d:4b:
57:a2:f2:b0:94:1d:01:36:dd:ff:e3:4c:54:c3:96:
d2:fd:52:55:97:93:5f:93:03:36:10:e7:aa:64:00:
92:e7:fa:44:26:3a:f2:b6:cf:f6:fa:4c:23:cf:fe:
23:84:67:06:aa:12:11:e5:d6:36:93:91:6e:12:d5:
f4:b1:94:84:96:4b:c2:56:ac:b7:06:f9:65:ce:ec:
10:42:8e:84:a8:3a:53:02:b6:d3:c8:b2:ce:57:81:
b1:d8:ee:86:31:3b:47:08:de:17:0d:07:31:90:d6:
03:e5:b5:92:9c:2a:c3:cc:ad:7a:fc:bf:d8:d8:91:
ea:95:e9:86:76:19:b7:06:f0:43:e5:b3:2c:78:63:
62:84:37:aa:69:8c:26:7b:f1:15:50:aa:12:6e:d2:
60:f0:7c:6e:82:39:58:4d:73:64:ef:9a:9d:37:e2:
e9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:71:45:40:88:CF:A4:57:6F:B3:2D:58:DF:5A:AC:FF:C9:0E:98:B5
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:f5:0a:db:fa:a8:11:62:f9:af:37:55:93:fb:22:ed:2c:34:
47:14:b9:e4:4b:0a:71:a7:97:7e:cb:a7:0d:85:31:fc:26:77:
3d:c1:95:38:71:05:b9:68:2d:af:a0:5b:12:1a:60:96:b6:7b:
30:67:d0:84:63:35:1b:0b:e1:e8:45:1c:d5:8a:86:f6:ff:37:
bb:66:f7:51:3e:5c:c6:e5:fb:57:5c:28:80:94:28:34:fb:78:
45:8f:ad:b4:9c:e3:61:8d:99:1f:bd:c3:b8:4a:db:8c:d9:45:
17:34:b6:a7:93:32:02:f7:60:32:1a:4e:d1:74:9f:88:0b:fb:
95:88:df:68:3c:fd:e5:f2:64:28:b1:60:1a:b6:1f:8f:a0:3e:
51:26:48:d8:1b:ad:d3:a4:ac:e2:7d:f0:b9:0d:a4:08:7c:5c:
88:c8:7c:a7:b4:f2:9f:55:01:9b:c3:ad:23:bb:b1:1d:1c:09:
42:94:91:a1:24:bb:ed:77:c2:a8:d3:24:11:6d:93:ff:e8:f7:
7f:8c:3d:6a:e6:c2:09:2f:06:bf:c4:eb:e7:88:20:88:dd:59:
09:2f:73:22:87:f9:83:01:e8:1b:16:c3:54:8e:4d:75:0b:0a:
20:ba:99:fd:ad:5d:34:56:94:a6:90:ba:e7:8e:b9:88:0a:2e:
2c:0c:21:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:08:28 2025 by rpki-client