Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
File: 8o-houRJGJHBmw8QsIb2VZhPWHk.mft (raw, json)
Hash identifier: 6+lnFhZmRWk5K3WdB1ehsnaIWIRL8bwwIQSr+PyzSqc=
Subject key identifier: C8:A9:A5:69:9C:77:D5:14:2E:10:BF:7A:92:EA:01:BD:8A:45:AA:0C
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Certificate issuer: /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial: 0197B6A0451EF9F9A2ACA7D2B98E0E3DEDDE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
Manifest number: 0A06
Signing time: Sat 28 Jun 2025 13:00:46 +0000
Manifest this update: Sat 28 Jun 2025 13:00:46 +0000
Manifest next update: Sun 29 Jun 2025 13:00:46 +0000
Files and hashes: 1: 8o-houRJGJHBmw8QsIb2VZhPWHk.crl (hash: hiZGuCVKqx6oqT+EZx31mA7ZCr+H5j0lvnG3oXqoeMM=)
2: IAJBt24rgV_us-DgHGqft-brDOM.roa (hash: EYG4N8j/B/VmDjgrJQXF6wEvv1LkIhmvGFmYVI9Ke7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:45:1e:f9:f9:a2:ac:a7:d2:b9:8e:0e:3d:ed:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Validity
Not Before: Jun 28 13:00:46 2025 GMT
Not After : Jun 29 13:00:46 2025 GMT
Subject: CN=c8a9a5699c77d5142e10bf7a92ea01bd8a45aa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:fc:25:b4:13:23:66:99:fe:c2:bf:84:18:
07:7e:e8:95:6d:be:ed:a2:a5:27:74:d3:35:b1:14:
11:98:2d:46:42:65:a7:2d:bd:71:9e:d8:da:a6:b7:
35:a4:bb:91:89:b7:a9:34:9a:d9:00:4f:27:0d:42:
09:32:5b:8f:ba:78:8d:ea:71:fe:aa:0d:98:31:2a:
ab:b6:d6:b7:ae:78:51:27:6f:08:08:67:7a:7a:fc:
66:f7:14:07:e7:b0:eb:44:63:28:de:07:0b:34:4f:
f1:35:79:54:a4:74:b3:86:af:db:60:24:07:b8:c7:
67:f8:31:bf:b0:ce:52:ee:b4:44:29:00:cd:5f:9f:
9d:a1:8f:d5:f5:48:ea:bc:86:f2:76:e8:c9:c3:d9:
dd:cf:f6:eb:1d:48:0a:7f:01:50:8d:85:43:18:ca:
8f:44:dd:fd:80:6b:29:5a:92:f2:78:58:69:d1:09:
e9:bd:07:34:79:87:7a:52:40:5e:ec:1e:06:e4:ca:
73:a4:a4:3e:58:aa:42:a9:b6:5d:54:31:c7:a0:d2:
75:46:9c:72:d4:87:e7:64:41:57:78:57:f9:09:2a:
16:49:b3:6a:50:e7:13:db:e0:12:0f:a1:91:64:f0:
b0:fc:e1:bd:44:bf:44:23:c3:ae:7e:f2:c6:4b:74:
b4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A9:A5:69:9C:77:D5:14:2E:10:BF:7A:92:EA:01:BD:8A:45:AA:0C
X509v3 Authority Key Identifier:
keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:de:fa:a8:db:e6:29:0c:64:8e:30:ac:d3:60:69:2d:d9:a8:
df:98:95:0c:f8:fa:b4:45:b2:c3:c5:1c:9f:89:cc:35:3b:5b:
25:79:fe:b5:be:48:1c:07:48:c7:ad:7d:c1:34:90:a7:e3:fc:
3d:ca:65:7c:e4:dc:80:05:3d:2b:56:c8:28:f2:0f:fb:1a:46:
95:56:0a:6e:ab:ef:be:52:e4:43:bc:46:80:21:2c:c8:36:65:
55:81:e4:45:a8:27:14:6c:6c:af:d8:b3:cb:e7:ce:8e:f7:aa:
62:e2:27:65:9c:d7:f8:a3:dd:60:e4:98:06:c1:8f:a4:09:b0:
25:23:04:0f:13:55:4b:98:4a:0f:13:0b:ee:fd:35:d9:1f:e5:
24:7b:2b:8d:de:f1:c0:74:80:41:03:de:f7:c3:0f:bd:fd:9f:
61:34:ba:24:b8:b7:2a:5c:ce:2d:d9:4e:5d:e5:54:bf:b6:58:
8a:76:2b:b5:f5:2b:5d:4a:70:82:3c:a9:82:87:b3:0d:6f:c6:
a5:0a:e4:6c:7d:fb:29:e8:88:7a:b9:bb:a3:79:a9:e6:d1:8f:
d5:a0:78:ce:bd:9e:af:f8:58:72:00:f5:11:97:e5:81:8d:94:
18:69:48:02:56:8b:dd:fc:3a:71:17:ec:b7:16:af:06:1b:06:
25:40:85:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:08:19 2025 by rpki-client