Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
File: 8dpnE1tzfKnS39e5f-WXi48wDWs.mft (raw, json)
Hash identifier: Eb75D9WYB2z3slQKKLeJGIxHbo7UZrUgqEkfOZgM5Nk=
Subject key identifier: 15:1B:DB:59:A9:01:4F:E2:F9:8E:8B:94:01:3E:CE:0A:37:F2:7D:1C
Authority key identifier: F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
Certificate issuer: /CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Certificate serial: 0197BBFDC644E8A1545B64C56D26B971B406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
Manifest number: 0A37
Signing time: Sun 29 Jun 2025 14:01:00 +0000
Manifest this update: Sun 29 Jun 2025 14:01:00 +0000
Manifest next update: Mon 30 Jun 2025 14:01:00 +0000
Files and hashes: 1: 2Utz6EvNmTYHORm-GQMKm69p8WI.roa (hash: j7FVQ06WFgxEJj//G5Co8Dizh+fdctkzSaSmR5/2mVM=)
2: 8dpnE1tzfKnS39e5f-WXi48wDWs.crl (hash: yZUgCJVNRw8Vn1yU3t4YD5jNmk3MjrKGL7k/LWxmnHY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:fd:c6:44:e8:a1:54:5b:64:c5:6d:26:b9:71:b4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1da67135b737ca9d2dfd7b97fe5978b8f300d6b
Validity
Not Before: Jun 29 14:01:00 2025 GMT
Not After : Jun 30 14:01:00 2025 GMT
Subject: CN=151bdb59a9014fe2f98e8b94013ece0a37f27d1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:88:72:74:1f:4a:7c:91:7f:fc:ae:ef:c3:d8:
b8:5c:c8:8f:e0:f1:1b:b3:1f:6e:85:b9:f0:9d:47:
bd:a4:08:55:12:b7:a1:60:22:a3:8b:50:6e:71:25:
c2:c6:2f:7a:f5:e0:14:96:cb:37:a1:1f:44:3b:e9:
dc:96:4b:f7:1b:ea:d1:2c:3d:d4:d1:a3:d6:15:d3:
f6:c8:a5:25:9b:d2:6e:7f:29:f0:af:d0:06:0c:f0:
c8:00:e3:e8:21:68:04:51:0d:a7:a9:c6:11:7f:62:
30:fa:7e:8c:b4:bf:9f:de:25:e7:c2:32:75:39:9d:
5b:9f:f4:38:87:07:99:e9:1d:e3:9f:a2:0a:01:0f:
a9:89:aa:93:03:62:53:cd:c3:1a:d6:a0:0e:53:15:
24:e8:24:97:cf:73:c9:a0:a3:a6:8e:1e:80:42:40:
9d:58:bb:22:f8:4c:8e:39:9c:d3:ca:96:4d:13:ef:
cc:01:27:29:48:36:f3:52:20:ba:bc:4d:70:af:8e:
9c:fa:90:6f:50:79:7c:f8:ab:e1:9f:22:6d:da:0c:
40:ab:4b:0c:cf:5c:a4:a9:bd:3e:fd:8b:02:27:7f:
6f:e5:21:fd:20:68:ec:1e:62:29:4b:9f:4c:c8:b0:
70:78:b0:87:19:a9:7b:35:fb:48:67:b1:52:96:02:
ed:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1B:DB:59:A9:01:4F:E2:F9:8E:8B:94:01:3E:CE:0A:37:F2:7D:1C
X509v3 Authority Key Identifier:
keyid:F1:DA:67:13:5B:73:7C:A9:D2:DF:D7:B9:7F:E5:97:8B:8F:30:0D:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dpnE1tzfKnS39e5f-WXi48wDWs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/a2ccb1-a728-4f04-9641-fc112ae63ea4/1/8dpnE1tzfKnS39e5f-WXi48wDWs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a7:d3:66:dc:82:44:0f:7f:4c:86:ca:03:ba:47:c9:e4:a6:
49:41:be:69:01:c4:20:d5:d8:9d:41:b2:ca:40:f5:78:71:12:
0e:b6:74:df:9f:6b:b9:99:70:3a:18:c7:76:ec:94:39:ea:b5:
da:a5:89:7c:7d:d2:c8:9f:a2:35:51:08:12:12:27:2e:45:d4:
8e:4f:4a:30:b1:6c:9d:6a:b8:d8:70:57:f0:4c:87:64:df:cc:
35:b8:ab:4d:72:e4:20:b8:ac:9c:de:f1:13:16:6c:0d:9c:5b:
2c:9d:f3:9a:6d:22:17:93:5a:9d:a3:19:de:45:dd:44:51:84:
50:ea:2a:0b:fe:0e:75:6f:77:eb:db:94:a1:84:14:81:32:9d:
c9:fe:f0:bb:d9:2e:cb:d6:22:a8:e6:10:ab:67:f3:39:c6:8d:
a3:44:0a:0d:f1:65:b2:83:50:8f:aa:ef:89:4b:21:da:45:f2:
19:0e:c7:19:e7:fb:22:f2:fb:0c:52:17:e3:c1:03:e4:62:0e:
85:7b:47:fb:8d:09:21:3e:67:d8:bd:6b:e0:42:51:70:9e:e0:
2a:1b:3a:e5:0b:33:78:02:03:35:69:b9:32:d8:d7:5f:9c:e7:
fc:b4:6f:14:2f:c4:f0:b5:8e:c3:9f:88:b0:08:b7:7f:f4:19:
46:b8:f3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 16:55:32 2025 by rpki-client