Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
File: 08ixCjj4HGTiASB7_DVEwpcq9fM.mft (raw, json)
Hash identifier: mN0FxsCEN0kLS1XsEeMw48AedKqTT4PQWVOo0Niqn80=
Subject key identifier: 38:32:3B:75:8B:31:09:B8:68:4B:CC:12:4A:E5:5D:62:94:F8:D3:0D
Authority key identifier: D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
Certificate issuer: /CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Certificate serial: 0197B88EB43F66AFD55CBA3A611A34F787A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
Manifest number: 0F76
Signing time: Sat 28 Jun 2025 22:00:49 +0000
Manifest this update: Sat 28 Jun 2025 22:00:49 +0000
Manifest next update: Sun 29 Jun 2025 22:00:49 +0000
Files and hashes: 1: 08ixCjj4HGTiASB7_DVEwpcq9fM.crl (hash: cgFDpxZo1QIJPej+nZgzGVMroAf3t8d9P3kGe8SyQnU=)
2: 0hYdVdTdrSs-d6BXtENWomMQM6A.roa (hash: Qi+45gX4AdRetJwFY+wBMXn8X8pOs16SCJ6qQzqdA+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:b4:3f:66:af:d5:5c:ba:3a:61:1a:34:f7:87:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3c8b10a38f81c64e201207bfc3544c2972af5f3
Validity
Not Before: Jun 28 22:00:49 2025 GMT
Not After : Jun 29 22:00:49 2025 GMT
Subject: CN=38323b758b3109b8684bcc124ae55d6294f8d30d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a1:36:e1:8c:04:46:70:9d:16:5a:52:7c:b4:
5d:76:f0:53:f8:bf:7e:a2:02:08:b6:b8:bc:3d:0c:
fb:8a:5a:af:0c:f5:95:5b:d5:02:ed:34:93:1d:81:
33:70:c8:72:a7:18:fc:55:54:48:b6:ca:ad:12:53:
86:d2:79:4f:95:4a:ad:12:e9:87:0a:fa:c5:b8:a1:
93:2c:23:f1:06:27:5c:5e:22:cc:cb:22:6f:e7:d9:
51:28:d2:fd:f4:dd:65:14:11:53:0f:e2:0f:ce:f9:
a0:09:70:d3:8c:d7:ff:11:d2:6d:4c:65:92:83:f1:
5a:c2:3e:02:7a:91:15:24:ee:5d:66:3a:38:fb:ad:
a9:3c:4b:f4:5e:1a:c9:14:7a:23:4d:a8:2f:80:e5:
06:f2:b3:79:74:ee:84:b9:77:17:63:3b:65:8b:5e:
69:44:4c:1f:33:81:30:8b:10:95:d8:d8:f1:a7:1e:
49:d5:4b:5c:4e:be:b7:51:22:4a:7b:74:65:61:bd:
57:c4:e2:02:e5:27:5d:75:1d:46:de:0f:af:3a:89:
72:b6:7a:01:7b:7a:a1:bb:28:05:98:46:5a:ee:12:
d2:e2:7c:e0:02:99:76:cf:3e:24:7f:a6:ef:1e:a4:
27:6b:24:3c:9f:e3:d1:bf:a9:ad:a9:18:90:00:58:
08:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:32:3B:75:8B:31:09:B8:68:4B:CC:12:4A:E5:5D:62:94:F8:D3:0D
X509v3 Authority Key Identifier:
keyid:D3:C8:B1:0A:38:F8:1C:64:E2:01:20:7B:FC:35:44:C2:97:2A:F5:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08ixCjj4HGTiASB7_DVEwpcq9fM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/64d4d0-6c98-4eec-bba1-37aa35e69dc1/1/08ixCjj4HGTiASB7_DVEwpcq9fM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:ed:96:09:2f:79:cd:48:24:cb:75:52:36:de:19:2d:2b:25:
c9:f3:60:fe:83:d0:63:83:a3:e5:2b:b0:66:d8:de:3a:f3:78:
57:85:24:08:bf:1c:28:00:40:62:8e:ee:e4:61:f4:31:2f:92:
6f:bb:24:71:bf:e2:c4:55:e7:8a:2a:fa:1b:f3:18:d1:d7:02:
48:ba:2c:02:c9:22:59:71:51:ce:76:61:2b:5f:dd:c5:9a:c7:
9d:d8:01:88:ab:bf:d6:79:63:98:b5:6b:70:0f:08:00:82:18:
0d:5c:e6:9e:71:b5:f1:12:af:36:df:d7:df:98:f1:53:96:42:
72:a9:47:40:cb:1d:5c:d7:e7:d7:09:0c:f0:d0:2c:4e:b0:98:
a8:98:e9:58:df:b6:31:d3:89:63:1f:37:a1:a9:64:dd:91:e1:
fc:59:36:c9:8d:fc:bc:83:1a:02:29:1f:d2:d4:9b:e8:2f:c2:
4b:a9:70:cc:80:b2:6b:cc:e4:69:95:4c:0c:9f:d2:8d:6e:a1:
88:8e:2d:7b:12:fd:45:30:d5:f9:77:d3:af:2c:e3:e0:8f:0b:
d6:00:63:2a:8e:43:c4:ed:00:2d:85:55:33:07:8d:9e:9e:b3:
c8:d4:f8:40:83:cd:8c:76:d4:10:7c:a2:48:2b:93:f4:bd:a2:
29:a7:4a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 00:29:15 2025 by rpki-client