Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
File: 8nyT3bGhcVHFbyLcrzHdgilGN0I.mft (raw, json)
Hash identifier: IzDhnOvZgYzm1j5u2yJiM13Nk62x5Kevrd7q1x4SV8c=
Subject key identifier: 90:4C:2B:EA:30:C3:AC:8C:4A:AB:DE:CE:0B:54:CB:C4:55:7B:67:56
Authority key identifier: F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
Certificate issuer: /CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Certificate serial: 0197B7B31B79CBDB3D0272120B0566FD326A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
Manifest number: 0C11
Signing time: Sat 28 Jun 2025 18:00:57 +0000
Manifest this update: Sat 28 Jun 2025 18:00:57 +0000
Manifest next update: Sun 29 Jun 2025 18:00:57 +0000
Files and hashes: 1: 4eZ-orLf3Sw1i9FoVC_BgUuV6yY.roa (hash: Hm2QNZ0IWwgkGkpS2MI3Rx4rLkOrxRzbQrRfD6XRt60=)
2: 8nyT3bGhcVHFbyLcrzHdgilGN0I.crl (hash: 7I62s8Jx9YbOIMqxO1pTGRPhTWKmXccvuSqFKswvnE0=)
3: PvG7RaoFWA1C7HlDkfB4Ix4UWSE.roa (hash: 3vQKjjJTEuiCPTgwApvaXGsOiHre5b8+kVP9FzsOJUw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:1b:79:cb:db:3d:02:72:12:0b:05:66:fd:32:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27c93ddb1a17151c56f22dcaf31dd8229463742
Validity
Not Before: Jun 28 18:00:57 2025 GMT
Not After : Jun 29 18:00:57 2025 GMT
Subject: CN=904c2bea30c3ac8c4aabdece0b54cbc4557b6756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:44:2f:0a:33:0e:6e:82:52:52:8f:d4:87:c2:
4c:36:89:d6:e5:1b:65:05:32:90:b6:6f:4e:fc:b4:
6b:a4:1b:56:d3:7b:74:a9:ca:94:21:c0:76:b9:53:
9a:12:d7:e9:c2:e3:f0:55:1c:1c:26:26:08:f9:4f:
a6:ea:df:2d:a3:1c:b4:51:75:c9:39:fb:14:7e:d7:
c1:d2:2f:19:6c:6e:38:43:9f:96:87:97:e4:c6:fc:
87:a9:38:bf:4e:7b:4d:40:21:a1:e4:18:0e:eb:05:
e0:4b:8c:e7:5c:56:5a:bf:f1:84:6a:16:21:12:35:
ae:d6:c2:51:64:02:c2:69:e5:03:40:3d:89:22:b6:
c0:23:25:c8:49:90:d5:d3:14:41:7e:cd:6c:2b:17:
58:3c:f3:39:33:e2:46:66:eb:ca:7f:94:e6:7f:14:
2f:a6:3a:c7:ff:2b:68:ed:a1:f0:f2:69:1a:74:61:
8b:49:c5:0e:ed:0e:21:f9:4d:d5:81:d8:e5:b1:06:
7d:5b:db:99:8f:4b:da:95:a0:96:6c:e6:9d:59:e8:
09:de:6e:26:87:e2:04:3e:a8:bc:16:85:e8:4e:58:
f1:ad:b2:cf:85:07:dc:8e:12:9e:2f:84:dd:47:f3:
86:25:04:06:a9:d0:7b:a8:47:b0:0b:60:2e:1b:3b:
8b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:4C:2B:EA:30:C3:AC:8C:4A:AB:DE:CE:0B:54:CB:C4:55:7B:67:56
X509v3 Authority Key Identifier:
keyid:F2:7C:93:DD:B1:A1:71:51:C5:6F:22:DC:AF:31:DD:82:29:46:37:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nyT3bGhcVHFbyLcrzHdgilGN0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/944f09-406e-4985-9929-36e0c8afe26a/1/8nyT3bGhcVHFbyLcrzHdgilGN0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:ca:5e:99:26:00:99:ab:3a:a2:28:9d:9b:5d:17:ff:e0:38:
2c:39:08:ff:bb:7e:ac:44:30:94:cd:a3:34:a5:66:9a:94:c7:
31:73:7f:86:87:56:d3:ba:39:d4:11:e2:3f:8a:52:18:49:8b:
52:54:6a:f7:e4:1e:8f:b3:57:80:6b:da:9f:8c:02:7e:93:b6:
59:53:34:40:bf:41:aa:29:d2:a0:fc:23:de:e5:dc:51:db:57:
86:30:f9:50:63:8d:c7:df:01:ce:49:90:52:a4:bc:a6:b3:37:
b0:48:4c:2c:c1:d0:ea:48:8a:b8:61:14:9b:2f:17:6c:fa:76:
b6:f6:84:f7:59:d2:c8:03:d9:31:15:d8:57:21:e3:a1:98:75:
e8:d0:7a:29:b1:0a:1e:2d:02:9c:26:c5:d5:71:82:9a:11:5c:
45:20:3f:6d:f9:95:ba:07:c7:e8:16:1e:4c:bf:41:da:cb:97:
fe:73:8d:75:5d:22:8b:47:54:78:a7:89:35:6c:dc:b3:b3:02:
77:1e:1e:cf:ce:84:1d:f8:28:45:a0:24:a1:17:67:74:7e:ef:
37:79:71:d3:97:cf:dc:e5:27:da:44:7d:6c:06:9c:32:0c:cc:
8c:0d:ab:f5:63:8c:b6:58:4e:a1:14:53:36:1d:a2:c5:71:b1:
cb:6a:f1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:47 2025 by rpki-client