Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
File: hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft (raw, json)
Hash identifier: L1/+83Z+b6/0mZSgorgF8u2mNrSUyNlayZsIhWKWEtY=
Subject key identifier: 78:5B:BF:4A:24:E1:D1:BA:7F:A7:66:F3:BA:62:2D:FE:13:37:71:8B
Authority key identifier: 84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
Certificate issuer: /CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Certificate serial: 0197B74508B02441D13E7253BBA6F09106BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
Manifest number: D8
Signing time: Sat 28 Jun 2025 16:00:43 +0000
Manifest this update: Sat 28 Jun 2025 16:00:43 +0000
Manifest next update: Sun 29 Jun 2025 16:00:43 +0000
Files and hashes: 1: Nz0U1MS6Vp6ENiK7Qgw_NtnW0Zo.roa (hash: 4kJwTGIfTzijYFZnWzmKmdRlWFcf9MpzIIKmNecHiDM=)
2: hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl (hash: l/TfaIqbY9/rEbshmCBgzYBL1D68fTahWxoPWy5P8XM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:08:b0:24:41:d1:3e:72:53:bb:a6:f0:91:06:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84af98aee37a12815b44bfd6beb4be64ac0ef6e5
Validity
Not Before: Jun 28 16:00:43 2025 GMT
Not After : Jun 29 16:00:43 2025 GMT
Subject: CN=785bbf4a24e1d1ba7fa766f3ba622dfe1337718b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:4c:67:a6:8c:0a:3e:1b:2c:9e:54:3a:e7:e2:
26:24:59:97:35:de:64:be:6c:a4:70:59:f9:be:de:
45:ae:ab:78:f8:b4:a0:22:26:b6:2c:6b:e3:6e:6e:
04:dc:cf:24:17:fd:38:da:04:1e:cd:ef:d5:69:46:
e2:f4:10:81:a0:bc:6e:56:05:7f:29:67:25:1f:0c:
9a:b1:e8:e5:96:98:6d:07:f4:6f:44:5b:63:9c:05:
82:a6:84:65:5c:48:fa:3a:05:28:16:ea:77:79:d6:
22:64:c4:84:10:ba:c5:65:5d:74:be:3e:07:71:6c:
5a:c6:0d:74:50:67:15:01:65:67:71:57:d6:f6:09:
79:db:49:ed:ee:36:f2:5b:5e:39:74:22:ff:e4:45:
8d:07:45:8f:22:ef:bc:2f:06:61:b2:69:e1:33:b7:
4e:a5:d5:91:77:f6:65:0d:51:df:52:c3:88:fc:d0:
f8:c0:a8:88:59:b0:3c:57:23:6e:e1:e5:59:a5:0a:
ea:42:ca:f1:d3:f9:0d:24:8c:fb:4e:2e:bc:67:64:
a0:9e:a7:3d:1a:ef:0a:f9:b9:89:bf:e8:03:43:70:
75:f5:b6:ca:ef:b6:97:8a:d0:c0:a4:1f:90:c9:2b:
9d:37:cc:61:a9:a3:ef:db:80:21:f7:c6:20:93:b8:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:5B:BF:4A:24:E1:D1:BA:7F:A7:66:F3:BA:62:2D:FE:13:37:71:8B
X509v3 Authority Key Identifier:
keyid:84:AF:98:AE:E3:7A:12:81:5B:44:BF:D6:BE:B4:BE:64:AC:0E:F6:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hK-YruN6EoFbRL_WvrS-ZKwO9uU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/e28a8a-664e-473c-8255-74e10099f81c/1/hK-YruN6EoFbRL_WvrS-ZKwO9uU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cf:9c:d7:83:05:db:e2:40:51:8b:60:0e:45:89:bb:1f:c5:
58:07:52:52:5f:65:3e:0a:4f:f0:bf:2d:04:fd:8c:9f:d9:6b:
bc:1d:46:a0:13:ac:e6:aa:4c:b5:32:95:55:e4:29:54:71:a1:
86:39:e5:0e:4d:ba:7b:aa:2a:e2:69:f7:df:91:03:05:c0:92:
fa:d9:de:7f:f3:b4:67:70:34:cc:7c:f5:93:95:b3:66:30:34:
e7:47:55:d7:43:2c:d3:15:27:30:2d:5c:1e:89:18:7f:28:4f:
6b:ad:28:1a:2e:4e:4f:8a:62:ff:6e:76:67:5f:9a:28:c2:b7:
99:99:0a:76:6f:f2:77:42:56:01:a1:c7:de:88:01:b2:64:41:
fd:65:79:e8:e7:ac:3d:97:19:f2:54:01:eb:01:42:50:19:21:
2a:2e:37:a2:9a:60:e2:c0:64:ee:04:21:5d:33:9a:0f:15:de:
4d:0b:2a:30:cf:0d:fa:b6:c7:a1:ae:b1:d7:39:63:dd:a1:62:
30:c6:2d:82:7b:25:9d:b6:eb:ba:a2:8c:99:48:c7:b1:55:77:
1d:db:73:05:ef:6f:4a:7e:5f:70:a7:8c:c0:76:fd:af:49:46:
8d:0c:ab:7c:2e:1b:65:64:5c:ef:20:6d:88:32:04:4a:a8:5e:
be:5f:07:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:36:50 2025 by rpki-client