Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
File: 8q7r5B0FGChKujpPXl2gXPq9b3Y.mft (raw, json)
Hash identifier: FzR+LNcDZKS9AUmbdJBR9aJ2pbb09wXzvqwXa8FbuGA=
Subject key identifier: 54:60:9D:AE:4B:1A:17:F3:FC:AF:D2:7A:BD:6F:24:3B:F3:67:27:F8
Authority key identifier: F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
Certificate issuer: /CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Certificate serial: 0197B6A0D5DEC800124FBDBFD153C1DF6D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 13:01:23 +0000
Manifest this update: Sat 28 Jun 2025 13:01:23 +0000
Manifest next update: Sun 29 Jun 2025 13:01:23 +0000
Files and hashes: 1: 8q7r5B0FGChKujpPXl2gXPq9b3Y.crl (hash: tmK7qPcFfABx6ATEhd6g73Kk9Os25DwN/NdHrBX43+k=)
2: M0x4P-eqDOpLCOY_5rdYfIPAYXc.roa (hash: Hz1NV4C1yE6vehHnBgkxV2TE2v53JgdybplNGjL2XYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:d5:de:c8:00:12:4f:bd:bf:d1:53:c1:df:6d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2aeebe41d0518284aba3a4f5e5da05cfabd6f76
Validity
Not Before: Jun 28 13:01:23 2025 GMT
Not After : Jun 29 13:01:23 2025 GMT
Subject: CN=54609dae4b1a17f3fcafd27abd6f243bf36727f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:89:e9:4a:7b:26:d1:39:83:17:ad:8d:d9:78:
0e:33:bb:25:13:39:78:39:1a:be:1e:f3:8f:80:f9:
a0:91:81:2d:2a:c8:9f:50:18:a4:23:8c:67:ae:d9:
1f:4d:18:fa:3a:2f:ff:ab:f7:6d:f6:e2:a8:77:27:
94:7f:2f:03:76:8c:b4:fb:5b:8c:a8:00:59:7d:67:
97:ff:0f:d7:0c:d6:19:71:a2:e0:a6:f6:17:4a:6d:
44:a2:7d:25:2c:b8:64:cc:6d:16:0e:3d:77:a4:21:
97:9a:a7:e6:8a:15:3f:77:58:cd:5d:92:25:9b:bd:
fc:0b:89:ff:ea:d7:20:3f:8f:dc:fb:db:4a:af:c7:
f9:32:63:42:d9:3a:be:f8:ae:79:a7:2a:79:05:81:
4b:56:1a:1c:4d:9e:c9:69:74:c8:7e:98:2f:5c:a0:
72:66:90:32:9b:28:0c:b7:cb:07:92:17:52:d3:63:
8e:44:f2:fe:83:2a:37:27:9e:a4:42:57:93:eb:43:
c6:f5:cd:51:cb:13:af:78:cc:94:19:87:b9:5d:f3:
63:10:70:2a:5c:4d:ee:4e:7d:70:ed:6b:02:5d:c9:
62:44:7f:ca:d8:d1:50:66:78:9a:a0:89:b8:a4:8c:
e3:52:86:9f:48:75:f9:61:28:74:c6:db:49:fb:33:
46:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:60:9D:AE:4B:1A:17:F3:FC:AF:D2:7A:BD:6F:24:3B:F3:67:27:F8
X509v3 Authority Key Identifier:
keyid:F2:AE:EB:E4:1D:05:18:28:4A:BA:3A:4F:5E:5D:A0:5C:FA:BD:6F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8q7r5B0FGChKujpPXl2gXPq9b3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/cfc1ba-9c78-4c3d-8ec3-c0ad74ca5d9b/1/8q7r5B0FGChKujpPXl2gXPq9b3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:b7:ce:7a:35:d5:09:d8:e3:50:66:45:12:a1:10:11:b7:10:
f3:14:ed:67:dc:01:16:c2:00:46:c7:8e:b7:66:95:1d:09:12:
44:9e:79:72:3e:04:f2:ec:ce:a6:8b:83:d8:79:43:58:5b:eb:
cf:17:15:d6:8f:99:be:ea:8f:3b:9c:72:2e:c5:b9:38:0e:a8:
71:55:a4:01:6b:2e:f3:1e:43:3f:5d:f6:ca:b4:fb:3b:c5:52:
27:00:24:44:d9:2c:ee:20:21:77:65:08:c5:c2:ce:2d:22:e1:
9a:a7:66:a6:00:98:a6:f9:82:bf:6e:71:73:cd:d2:50:e4:f7:
e3:bb:c8:f6:4f:b4:bf:20:b2:61:d3:78:10:4d:68:1e:1b:b0:
d4:aa:12:da:18:a1:39:4a:54:e1:4d:cf:b8:31:22:19:c7:c0:
91:d9:41:60:a0:47:ca:3b:7d:ea:3e:cb:8c:f0:fb:da:82:85:
ea:b9:71:c6:c3:9f:4f:62:75:16:00:fe:71:94:3d:0d:a7:68:
e1:c0:5b:e0:d8:5d:23:04:0b:eb:62:67:51:51:1b:8c:5a:3b:
b1:7e:df:14:45:0a:0a:f4:2a:00:f8:50:07:a7:f9:93:e6:e2:
96:4a:2b:08:16:6d:de:51:04:bf:7c:4a:69:5e:d1:92:70:ab:
2d:01:c0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:46:22 2025 by rpki-client