Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: QxLga+TKmcGsky5tKeQAixbG+ulxyyp7wrSnkxqHl7Q=
Subject key identifier: B8:AE:AC:4C:40:4A:7C:8A:4C:C1:65:F8:BC:33:86:AB:A0:CF:8B:34
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 0197D0296A472A584D91B86C2A41175BFF4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 0F1A
Signing time: Thu 03 Jul 2025 12:01:04 +0000
Manifest this update: Thu 03 Jul 2025 12:01:04 +0000
Manifest next update: Fri 04 Jul 2025 12:01:04 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: v96oqZ+1jcubipjnrNuCUnSIYR6NobeWOiVPrzZIRQo=)
2: ju7OLwWOvoLnlAHiuO4kBTFVzwY.roa (hash: e9FAsffXnl64K8Cv3+KjxTUevpgUYG3UY/wewoBEVBQ=)
3: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d0:29:6a:47:2a:58:4d:91:b8:6c:2a:41:17:5b:ff:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Jul 3 12:01:04 2025 GMT
Not After : Jul 4 12:01:04 2025 GMT
Subject: CN=b8aeac4c404a7c8a4cc165f8bc3386aba0cf8b34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:e3:bf:a1:50:a9:19:31:51:ec:4c:65:04:0c:
a0:71:5d:2f:3b:b3:54:48:71:0a:51:5e:3f:bf:ef:
3b:cd:7c:0e:15:74:8c:cc:fe:4c:9b:31:5a:93:d2:
5a:bd:b8:ae:8e:6a:26:74:4b:49:38:5d:49:80:ff:
e9:b5:b1:0f:e4:ac:00:a2:74:ab:5f:1f:c4:e4:d8:
2c:c0:ab:09:2f:9e:56:09:f0:03:38:cd:0e:81:f0:
d0:a6:7e:b1:a6:ad:13:f8:98:90:01:49:62:db:21:
9e:a8:bb:75:ec:2a:fb:54:4e:c3:6b:a5:8e:70:28:
d0:30:b3:c1:8d:9f:77:bb:bd:a9:49:73:5c:3d:82:
a3:17:13:61:e3:04:f1:c9:6b:ee:88:2f:dd:87:cd:
ca:bb:fa:60:88:70:32:cc:78:54:36:3c:46:c5:79:
da:64:96:6f:b5:34:63:05:b7:5a:32:20:c6:a3:94:
62:54:1c:f5:ec:0d:39:7c:43:c5:46:86:ba:14:a1:
60:b4:33:32:5d:a1:04:f7:bb:ba:92:6c:55:e9:59:
f2:5d:07:40:72:57:dd:8c:16:83:24:9a:e6:93:45:
32:03:74:ef:6b:4b:db:81:ac:8d:81:78:78:ef:10:
86:d3:e4:bb:e2:2a:31:21:40:99:62:16:0f:6c:f5:
c1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AE:AC:4C:40:4A:7C:8A:4C:C1:65:F8:BC:33:86:AB:A0:CF:8B:34
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:6e:ad:4e:67:27:c6:8d:a2:a2:f1:9c:ff:bf:38:b8:4c:76:
89:7d:c9:8d:36:63:84:34:e1:44:f0:40:c2:80:fb:fa:c4:6b:
31:60:51:b2:d9:30:aa:a8:fe:4d:8c:3d:da:22:f0:57:1e:83:
b8:fe:9c:b4:37:de:42:de:9c:3e:05:82:01:f2:fc:c9:ca:ac:
59:75:c9:c8:59:17:03:0c:fb:bf:e3:5b:2a:3c:42:e9:c0:2e:
28:e7:d4:2d:d3:86:be:7e:b9:5b:89:5d:eb:6e:63:79:01:f0:
8b:4b:ac:4c:28:58:f4:6a:ce:7f:9f:51:cd:f6:39:e0:2e:96:
71:07:85:42:ac:fa:8c:e3:ed:b8:b1:f1:b7:4f:ae:f5:9e:96:
a3:f5:db:84:57:78:44:18:61:73:c3:73:42:2c:be:a2:ce:7d:
8b:b1:18:a6:1a:c3:8e:36:21:12:22:18:07:95:16:8c:bb:e8:
de:35:38:36:a5:64:48:3a:4a:43:6d:13:4e:8d:8b:40:94:13:
89:fa:20:4f:d9:64:d6:d7:7a:cc:dd:74:e7:03:f9:2b:24:43:
a8:49:eb:32:66:93:41:51:ef:c1:fe:6a:04:7e:df:25:8c:ca:
20:e7:80:91:9c:a4:4a:3d:d0:ee:b1:ed:ed:9c:d2:8c:d4:c3:
4b:f9:45:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 13:40:21 2025 by rpki-client