
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
File: 8MScIXjoL9wfQZ9afFFyHfU9ekg.mft (raw, json)
Hash identifier: soESim8TacfPpxlD4vdUwEoFhbeI4nsYcS3nyAFopww=
Subject key identifier: 4E:48:5F:28:68:88:60:DE:0B:D8:B6:63:F3:85:61:54:A4:5C:F8:3B
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 0197B6D734B02B735A551A26F79C6C7D723A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
Manifest number: 149F
Signing time: Sat 28 Jun 2025 14:00:46 +0000
Manifest this update: Sat 28 Jun 2025 14:00:46 +0000
Manifest next update: Sun 29 Jun 2025 14:00:46 +0000
Files and hashes: 1: 8MScIXjoL9wfQZ9afFFyHfU9ekg.crl (hash: XqaMNj2FweKoG9t8EFJnxHAAEEJJNowRikyCOfQMGCQ=)
2: E1bqejAdTN3uYMBTKCwH33KmoEE.roa (hash: /XRVb9kLwHV21UKOVZ0MM6evc9apWkwvTlQRZL1Tohg=)
3: gAbWpwUUphvqV25CUB0maQ_pAx0.roa (hash: BLsk+LJxA+WagSmLj3Bzfhh4p3QvCZDF/XVfmTYGdec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:34:b0:2b:73:5a:55:1a:26:f7:9c:6c:7d:72:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Jun 28 14:00:46 2025 GMT
Not After : Jun 29 14:00:46 2025 GMT
Subject: CN=4e485f28688860de0bd8b663f3856154a45cf83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:4f:83:49:2c:aa:e3:03:fe:09:e2:f8:29:9c:
f8:a0:e9:50:cd:81:79:46:eb:b7:61:77:29:05:3b:
07:71:a7:58:d3:ad:ea:c0:bb:da:bf:b8:6d:91:17:
87:81:59:1d:6b:b1:99:dd:ba:f0:fe:12:b7:4c:dd:
d1:fb:ad:98:6c:40:39:41:03:fc:7d:bc:a0:25:bb:
7e:b3:43:cb:5c:e1:31:65:2d:5b:0b:8e:4b:53:53:
7c:0a:ae:ab:2a:57:71:2a:aa:3e:a0:23:51:22:9d:
1d:76:cf:25:4c:e7:fe:92:93:39:ab:66:0a:b4:97:
18:c1:da:f8:be:87:e0:00:f9:79:4d:03:05:96:68:
eb:a8:f4:d0:6c:4f:54:a4:0a:09:f1:36:92:a1:14:
14:40:ec:43:47:96:83:09:ef:8b:23:49:b3:a3:98:
7d:83:c7:89:08:2f:36:63:a8:bd:e7:d6:93:12:87:
c9:58:59:0a:ae:46:e8:ab:65:58:ca:f6:57:2e:f7:
0d:b8:b6:d5:24:12:43:de:09:80:5f:20:6b:02:f2:
79:84:b4:96:f0:2f:04:15:bc:8f:b3:3e:b4:72:8b:
cb:57:75:97:46:81:d6:50:20:f1:b7:80:57:c3:16:
d7:03:92:ff:69:e2:c2:e3:fd:78:c0:0d:36:c3:f7:
e5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:48:5F:28:68:88:60:DE:0B:D8:B6:63:F3:85:61:54:A4:5C:F8:3B
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:51:89:7c:39:44:6b:7b:b8:77:a7:21:62:73:07:54:f8:40:
bf:65:b6:29:95:b8:20:2b:bf:d2:b5:39:aa:3c:e0:8c:1b:ff:
67:64:d2:0c:ea:e5:46:d1:18:39:33:2e:d9:8c:46:3d:f4:1b:
24:29:1e:7a:76:ca:47:43:87:e2:76:17:68:18:77:71:7a:ad:
77:80:71:04:83:6f:01:ee:3b:c9:80:3c:72:f4:c1:a2:75:7a:
8c:30:53:12:bf:2f:0f:62:59:8e:6a:64:2c:26:2b:81:66:5c:
68:53:5d:a4:db:3a:6f:31:09:80:46:f8:40:65:c9:d5:cf:32:
8f:28:22:62:e3:8d:68:69:83:c7:7e:0e:2f:4e:2d:7e:49:10:
be:42:cc:2d:a9:8f:b3:4d:d8:1f:ef:0f:d2:5d:9e:ab:80:0f:
35:2e:a8:f8:54:c6:04:c0:2c:2a:e6:f5:7a:db:68:81:c8:7d:
60:f5:99:10:45:08:b6:06:7e:7c:69:90:52:c8:a6:83:cb:0e:
f9:ba:d7:03:31:85:dc:49:60:80:a3:47:c8:2c:a0:b2:36:a7:
ca:77:06:3b:7a:7c:e0:25:66:f0:b6:61:e6:26:e3:3a:76:c7:
2b:10:75:9c:fb:3a:a6:76:38:a2:da:fd:fb:36:34:83:92:20:
04:5c:c4:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:20:58 2025 by rpki-client