Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: SI6X+L0Qdp1K3EwcBQGZ41yvURqKNPLDn2zgTbynQtQ=
Subject key identifier: ED:9F:F0:80:F4:78:4B:DE:07:DD:AD:35:E3:9E:C1:34:61:FB:03:32
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 0197B6A1CB0231F7A8EC6B2F684214A5E88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 13:02:25 +0000
Manifest this update: Sat 28 Jun 2025 13:02:25 +0000
Manifest next update: Sun 29 Jun 2025 13:02:25 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: sqDEwxWIi5Nbb4QRds+b2d269dr1Dp8H/K9J76qkLz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:cb:02:31:f7:a8:ec:6b:2f:68:42:14:a5:e8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Jun 28 13:02:25 2025 GMT
Not After : Jun 29 13:02:25 2025 GMT
Subject: CN=ed9ff080f4784bde07ddad35e39ec13461fb0332
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:5d:e6:fe:ab:3b:60:72:72:94:6f:52:72:85:
77:79:ef:04:f9:9d:80:cf:ec:a1:36:8a:f4:06:b2:
2d:e5:f8:52:70:28:eb:3a:6d:39:f6:56:16:72:63:
9e:36:a7:55:f7:d9:c2:19:d2:ca:30:48:ca:46:e8:
36:07:e8:af:98:94:9d:28:01:e0:d6:8b:0f:b5:1d:
fe:b1:88:86:ad:5a:c6:07:93:d1:a4:ce:09:3a:db:
75:63:80:68:68:fd:a9:ea:52:01:4a:66:2d:f6:e2:
19:3d:d1:6f:aa:a1:f2:db:aa:83:3a:e1:57:15:10:
e0:2a:9f:68:3d:3f:d5:17:d6:5b:de:86:1e:97:39:
48:6e:df:22:0f:36:e1:1e:f3:c4:30:54:c9:80:f3:
48:1c:68:b4:aa:02:9c:fd:b9:e2:82:f1:03:45:07:
f4:9d:5c:81:5e:3e:21:da:1e:c0:de:37:f7:d8:0c:
41:56:bb:33:5d:fd:ac:2e:23:45:ed:29:cf:73:55:
53:73:93:cf:a0:6c:39:96:12:fd:dc:2e:6c:b8:b2:
f7:17:ed:c0:ca:18:80:b7:91:f7:90:05:95:74:d0:
3a:d2:b0:39:9e:7f:01:2e:d9:41:5f:a6:a8:dc:a0:
17:32:87:54:78:e0:26:63:80:e3:09:9c:71:f1:f6:
5d:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:9F:F0:80:F4:78:4B:DE:07:DD:AD:35:E3:9E:C1:34:61:FB:03:32
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:50:85:ec:3c:84:96:f0:8f:dd:14:08:97:e5:9d:87:8a:26:
38:8f:4f:a3:00:74:1a:6f:94:d3:49:25:be:9a:ca:eb:fc:1f:
d1:5f:cc:1e:c8:c6:f5:a4:30:97:7d:97:70:ee:e5:c4:90:d6:
3c:be:d7:6b:77:6e:83:1e:41:7f:ce:4b:61:59:70:d3:de:ea:
fe:57:04:b4:f6:53:aa:96:35:dd:fb:33:2b:9a:3d:29:cb:d7:
88:77:6a:34:7f:8e:cc:b0:93:be:56:45:06:9a:6a:23:61:03:
c9:33:b5:a6:51:98:d0:d3:8e:87:24:19:55:1c:5d:75:95:08:
9c:7c:e7:f8:7f:9c:4c:e0:81:92:b9:74:f4:0f:0e:a7:5d:c5:
11:e3:0f:c1:3b:06:cd:c0:e6:c9:90:25:c8:2a:d4:84:01:60:
c3:5c:d4:52:5d:6e:cf:18:99:10:0c:98:6a:31:32:52:85:56:
eb:10:fc:d2:38:c3:50:45:44:b2:83:44:3f:68:d4:35:86:c2:
ec:33:cb:33:a2:39:eb:b0:5f:2a:27:ce:b3:21:1e:70:86:1f:
fe:e3:90:d2:13:8a:32:d2:32:84:b6:ad:bc:81:b1:80:43:8b:
11:b8:77:83:f7:df:69:5d:e2:b5:cf:b3:a5:b6:f1:59:2e:65:
ba:ca:4b:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:15 2025 by rpki-client