Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier: YeOv662Le4GxEMBLzJO3qhIsZwAFbEaZ74FudzKDLB0=
Subject key identifier: D4:00:CF:FE:8C:18:01:5B:98:56:E0:29:A5:64:FE:11:81:2E:9E:8E
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial: 0197B70EF53DE83227AD08411FF410B50E75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number: 08AB
Signing time: Sat 28 Jun 2025 15:01:39 +0000
Manifest this update: Sat 28 Jun 2025 15:01:39 +0000
Manifest next update: Sun 29 Jun 2025 15:01:39 +0000
Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: 9vInk6nvSjR2cYSLZzZ/r4Kf3dBS9X0ZbisFg8FjECI=)
2: dqNNte5TVfV2tDh9E3yBjcN5L9k.roa (hash: ZCWWVAbkz+YG+QqwhLTaaD7cWJwvtiRAyhgAtKdQ9Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f5:3d:e8:32:27:ad:08:41:1f:f4:10:b5:0e:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Validity
Not Before: Jun 28 15:01:39 2025 GMT
Not After : Jun 29 15:01:39 2025 GMT
Subject: CN=d400cffe8c18015b9856e029a564fe11812e9e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2b:dc:44:27:0a:32:76:f0:98:cd:ed:e6:6e:
56:a3:60:63:1b:36:e9:d7:96:ae:af:85:93:65:55:
31:ed:1e:f8:4b:89:55:fd:47:9e:3b:d5:e7:90:e5:
14:a2:ce:4f:46:df:27:43:b8:b4:55:66:8e:22:83:
9b:f0:f7:61:90:29:fc:05:c9:77:b1:fd:91:b9:9e:
e4:b0:84:ab:99:a4:de:0d:ce:5d:d3:7f:7f:3c:28:
01:47:6e:dd:56:71:35:45:9a:2e:79:d1:dc:bb:84:
6d:99:8a:5f:cd:31:9f:e4:1d:e2:0d:aa:e7:44:98:
b1:c1:22:4d:54:54:2e:ce:21:9e:5f:b4:78:ed:14:
03:f0:fe:7b:54:18:d5:1b:7a:fb:b2:2e:2d:c2:32:
d7:73:94:af:d5:58:d7:6d:c5:cd:ca:c4:fc:5f:58:
9f:ff:b2:78:72:1f:51:1e:2b:b7:08:68:bb:b3:84:
54:8e:49:66:a9:ad:c3:fa:36:5b:6c:55:0b:0f:a2:
00:91:5b:74:b1:44:a1:9e:b3:5f:29:c2:83:38:93:
1c:af:79:ed:26:d6:e2:da:ff:3c:39:05:b0:6b:4f:
c4:0c:2c:68:9e:82:a2:de:57:c4:cc:76:67:af:37:
7b:7d:10:f2:a3:ba:6b:b0:12:cb:62:9e:4c:d7:2d:
d0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:00:CF:FE:8C:18:01:5B:98:56:E0:29:A5:64:FE:11:81:2E:9E:8E
X509v3 Authority Key Identifier:
keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:99:57:fb:37:0a:1f:f1:d0:aa:c5:d0:a9:95:8d:27:92:b3:
a2:53:44:61:8c:44:21:02:78:a9:16:aa:e1:1f:7e:46:38:ac:
f7:db:cd:3e:c0:71:e7:0f:ee:bf:90:5c:10:ad:10:0d:37:5f:
dc:ec:ed:55:85:af:fd:5d:14:2d:cc:54:e2:95:8b:49:5a:bf:
06:93:92:0e:fa:45:bc:e4:54:24:ca:7e:59:eb:1e:4b:b6:8b:
7b:c4:52:f5:17:f7:86:f0:95:52:88:b5:16:d4:30:c8:de:aa:
a8:68:b7:4d:8d:55:5e:10:7f:7c:9e:e0:49:01:21:10:a9:b1:
91:ad:e5:0d:3a:44:bd:03:11:a0:71:73:5c:78:eb:10:36:1a:
22:68:e7:ed:b2:c4:75:c8:3a:fd:4f:fa:80:c6:50:91:4c:f9:
11:e0:7f:d1:6c:b5:e1:81:95:28:db:71:e2:ff:b7:6d:94:4c:
2f:84:e2:8b:88:40:63:1a:89:b8:1f:d8:67:f9:83:ad:48:75:
6b:d1:41:4e:0c:44:d9:b0:f3:97:4c:67:c7:0c:27:1f:2c:6b:
de:62:88:7c:ae:aa:54:20:75:85:07:e4:d9:2c:d5:19:37:13:
73:cb:be:23:03:1f:46:19:d1:ee:22:ff:aa:74:f7:58:59:05:
95:f1:2e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:39 2025 by rpki-client