Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
File: 8PY2_se1stGN43l-aYTAaVXnFtc.mft (raw, json)
Hash identifier: 6Rb84oufNYR+kSRa88/NefLArWz182h4lTN6ZfZoyl0=
Subject key identifier: 5B:53:2C:0F:1F:2D:D6:39:34:8A:63:F9:0B:BE:3B:D5:48:91:B7:D1
Authority key identifier: F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
Certificate issuer: /CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Certificate serial: 0197B6A062E8229ADFCC638BAFAF43741B18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
Manifest number: 15B9
Signing time: Sat 28 Jun 2025 13:00:53 +0000
Manifest this update: Sat 28 Jun 2025 13:00:53 +0000
Manifest next update: Sun 29 Jun 2025 13:00:53 +0000
Files and hashes: 1: 8PY2_se1stGN43l-aYTAaVXnFtc.crl (hash: PChLo59fX2z9YZmd/epo6QCRDsuP1fswdwulUHKrle0=)
2: N4NsUcZuS_9XiBDgAfw6eryV7HU.roa (hash: tpgeA/zfOVEAg9H115FFWM358l26uFQNlABFRgvWlU4=)
3: yV4dNy3NsBZVUNWCmHTLsnrsaLM.roa (hash: HeRl5vH7gTSirrF3z1irtqiGbkDXqM3OvljtYndKLgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:62:e8:22:9a:df:cc:63:8b:af:af:43:74:1b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f636fec7b5b2d18de3797e6984c06955e716d7
Validity
Not Before: Jun 28 13:00:53 2025 GMT
Not After : Jun 29 13:00:53 2025 GMT
Subject: CN=5b532c0f1f2dd639348a63f90bbe3bd54891b7d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:6d:eb:5d:ed:f7:00:78:60:37:44:bb:72:
fc:8a:44:5a:98:e7:71:f2:69:cd:33:81:ba:cf:aa:
a0:1a:1e:31:12:a3:06:32:e2:00:1f:4b:95:98:9c:
a5:7a:b6:96:66:c8:b8:53:27:b0:2a:23:01:16:75:
67:4f:d0:78:32:6d:3d:d4:e9:80:6a:9d:7e:6c:cd:
68:10:fd:d9:70:7f:01:b0:32:73:93:55:e0:89:62:
44:75:68:2e:53:d4:c2:dc:31:13:28:9e:e9:6b:80:
92:6d:aa:3c:4d:ae:65:bd:1b:3d:85:5e:43:0d:8f:
23:31:fc:7a:a3:77:c0:8e:78:0a:b8:fb:83:41:5d:
26:f0:56:ca:25:1c:08:d2:4a:86:dd:53:2b:68:33:
c5:0f:a1:09:7b:d4:e5:eb:54:3d:a6:7c:64:95:cc:
ba:96:34:7b:ac:72:94:43:a7:1c:a6:e2:84:d9:48:
a7:28:4e:e5:b8:13:28:9a:4d:2f:d0:7d:55:b2:de:
6b:78:7c:9f:92:28:e0:b3:ea:35:28:fb:30:41:21:
6f:e9:d2:d2:e1:fa:5d:67:2e:12:45:8d:f5:e2:e4:
b2:6f:c8:a5:60:8e:f8:14:07:4f:8c:6a:02:ae:da:
45:19:53:33:25:3a:30:62:de:0b:7b:0c:c3:d1:ac:
a5:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:53:2C:0F:1F:2D:D6:39:34:8A:63:F9:0B:BE:3B:D5:48:91:B7:D1
X509v3 Authority Key Identifier:
keyid:F0:F6:36:FE:C7:B5:B2:D1:8D:E3:79:7E:69:84:C0:69:55:E7:16:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PY2_se1stGN43l-aYTAaVXnFtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a01acd-a3de-4839-9d02-643c1fe38385/1/8PY2_se1stGN43l-aYTAaVXnFtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:6a:0d:c2:89:6c:36:9e:d6:80:de:5f:8b:1a:5e:9f:80:b3:
67:28:fc:07:cf:70:b3:23:33:ea:ac:68:01:a3:33:ed:39:c8:
0d:0b:a9:20:64:a5:2d:67:c5:9c:26:b8:59:5d:50:04:d1:94:
ad:97:25:f1:7d:31:7a:60:2d:ec:f8:d8:fd:78:26:2c:a3:ef:
7c:30:75:10:3f:46:f7:aa:6a:09:b8:f5:f0:51:7e:1f:c9:40:
c3:c6:bf:76:2e:9a:d6:57:68:cb:fb:e7:b4:19:d6:95:47:f3:
14:8e:08:2c:a3:4c:c1:1b:31:c7:3e:59:75:c2:f3:e5:1d:ae:
1b:ae:ac:63:cd:f0:e3:f0:ab:8f:1f:59:b3:04:f9:13:4f:ba:
6d:d1:fd:53:c9:73:8f:72:fc:6e:83:8f:54:e3:83:e7:ee:71:
80:9e:d3:cf:de:8a:28:0c:00:f5:56:16:94:81:79:21:29:ba:
76:4c:f9:ca:ac:ff:de:f6:51:73:2a:e6:21:42:0d:53:e4:06:
bd:e2:4b:bd:cb:23:94:f9:95:66:88:e9:7e:71:44:a0:91:ac:
c9:36:fd:ce:92:3c:3b:dd:45:9a:d8:30:e3:54:93:58:b1:f5:
18:bd:0b:2c:a6:89:7b:51:04:57:63:59:1b:12:6b:d4:12:a7:
db:eb:e3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:12:24 2025 by rpki-client