Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
File: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft (raw, json)
Hash identifier: 9PjQdbUjyIdoVBF12T8L9k3nHiKGTbFkBa15YWyQgTQ=
Subject key identifier: 65:10:A9:4B:56:96:FA:21:8C:65:7C:35:2D:2F:1E:2C:31:EF:49:6E
Authority key identifier: F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
Certificate issuer: /CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Certificate serial: 0197B6D75F0B84542A68D72FE04F003A96A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
Manifest number: 0CAC
Signing time: Sat 28 Jun 2025 14:00:57 +0000
Manifest this update: Sat 28 Jun 2025 14:00:57 +0000
Manifest next update: Sun 29 Jun 2025 14:00:57 +0000
Files and hashes: 1: 8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl (hash: 1i6lvVZT3C9OBI/WLZREa++AT7rWuHLXgIFrjXq5v88=)
2: oQ6iu5R4Fpm0Yjxuw1qLXncI4SY.roa (hash: H/akZoh4Ps4IHkjkrhcdXyi2oc0+hPspNWAd57bgzLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:5f:0b:84:54:2a:68:d7:2f:e0:4f:00:3a:96:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f145d44a1ee05853cd5892654334b1f21ce826d4
Validity
Not Before: Jun 28 14:00:57 2025 GMT
Not After : Jun 29 14:00:57 2025 GMT
Subject: CN=6510a94b5696fa218c657c352d2f1e2c31ef496e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:71:db:15:07:7f:72:84:ea:9a:66:c9:4b:57:
6c:04:b2:90:09:28:00:bd:eb:91:12:c3:6a:f7:05:
87:a7:d6:dc:e8:92:98:d4:ef:33:c9:b0:81:8d:16:
b6:af:2c:f5:d6:f8:c6:33:0d:ce:24:e6:3c:6d:12:
96:82:e1:38:43:82:b5:9c:c2:3f:b8:ac:55:8e:5d:
37:bb:11:c4:ef:d4:58:19:ea:41:21:ad:12:67:87:
2c:b0:21:36:e2:a2:e2:77:6f:0a:2d:52:da:96:19:
3c:cb:1f:af:ac:2b:7e:50:09:2b:c9:92:fb:36:67:
1d:2f:7a:5b:1f:b2:99:35:b8:93:64:db:90:bf:b9:
f0:0d:f1:cf:29:0e:6a:98:c4:d0:22:69:fd:70:38:
49:2f:9a:12:b7:94:df:38:f3:bf:4d:b5:5e:cd:71:
61:8f:76:46:f7:da:bb:41:40:2a:61:50:69:4c:6b:
7d:08:82:aa:16:8c:88:1a:58:0e:4a:0f:f6:d6:43:
0d:f8:28:2b:1a:9c:6d:ff:96:81:6c:d1:66:83:1e:
8d:1f:1a:66:e1:9f:ed:bf:75:95:4f:ef:e2:b4:31:
33:32:d8:a2:ee:2d:a3:3b:ac:66:f5:e0:80:5c:cc:
3a:b6:88:bc:0b:85:75:05:d8:b4:90:43:24:13:79:
fa:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:10:A9:4B:56:96:FA:21:8C:65:7C:35:2D:2F:1E:2C:31:EF:49:6E
X509v3 Authority Key Identifier:
keyid:F1:45:D4:4A:1E:E0:58:53:CD:58:92:65:43:34:B1:F2:1C:E8:26:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/4f8135-aa24-44a4-a546-3dbcdf779f24/1/8UXUSh7gWFPNWJJlQzSx8hzoJtQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a3:bd:20:6a:b3:d5:1d:2b:64:ee:f2:d6:68:b3:3c:bb:15:
9e:11:5c:71:b1:fc:4d:18:20:0e:f0:f3:60:3b:15:10:b7:54:
78:73:0f:fa:77:3d:98:ac:7a:62:be:4d:63:3f:40:6f:e9:0a:
d0:83:4f:36:a6:6a:9f:ea:7d:26:01:3f:ac:af:7b:b6:b6:e9:
0e:a5:bc:e3:1f:dd:d9:74:2a:e9:fb:fc:34:75:c0:c0:11:4d:
43:8d:d1:0c:f8:a1:32:c1:62:b9:55:7d:be:b2:3f:85:7b:fb:
0f:e3:9a:22:21:b2:55:c4:07:18:d8:43:ed:3e:9d:0f:ee:e3:
1c:cc:5b:c5:a9:c8:0f:5a:84:da:61:ca:08:5d:2b:c8:d1:a6:
92:e9:4e:b7:d9:7d:80:b7:a1:0b:58:58:a1:67:e4:06:cf:82:
14:7f:a2:ff:65:22:c3:41:e3:ed:52:e0:a8:4d:f1:81:17:38:
68:6c:ca:d3:4e:a8:b7:3c:73:65:84:e1:34:5e:33:6f:fb:d9:
9d:85:df:af:8d:42:4c:10:3f:b9:f6:7d:93:db:d0:14:04:1f:
f4:68:ea:28:2d:99:cd:e7:30:9d:b2:ad:19:51:40:d3:f6:ee:
ea:5a:69:6f:d2:bd:8d:bf:e1:ed:b7:c1:20:55:94:47:3b:e8:
d5:04:26:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:11:00 2025 by rpki-client