Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
File: 8lxlPGBUhmBCpwb3F7JLIf35gag.mft (raw, json)
Hash identifier: Grm1YG3gu0bGZRSySpNtS+8FhwXb4nxbKkVZdbnVYWQ=
Subject key identifier: BA:5B:B9:79:67:1C:EB:0A:95:3F:F6:BC:2D:BE:15:3D:A8:B3:38:72
Authority key identifier: F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
Certificate issuer: /CN=f25c653c6054866042a706f717b24b21fdf981a8
Certificate serial: 0197B77CDB311FE6D8F088FD18DC2EB78347
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
Manifest number: 05B6
Signing time: Sat 28 Jun 2025 17:01:42 +0000
Manifest this update: Sat 28 Jun 2025 17:01:42 +0000
Manifest next update: Sun 29 Jun 2025 17:01:42 +0000
Files and hashes: 1: 8lxlPGBUhmBCpwb3F7JLIf35gag.crl (hash: k+1/dkRJ+8naV+3BWCKLCzu6gyA8lUo1XjBYO2QUlzg=)
2: SAkp88S54aJN6C-GCtNeqgpkjzs.roa (hash: xdHHAbJE3WiWjdXV3cBquprUR130i7lr4362iYiFT8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:db:31:1f:e6:d8:f0:88:fd:18:dc:2e:b7:83:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25c653c6054866042a706f717b24b21fdf981a8
Validity
Not Before: Jun 28 17:01:42 2025 GMT
Not After : Jun 29 17:01:42 2025 GMT
Subject: CN=ba5bb979671ceb0a953ff6bc2dbe153da8b33872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:bb:c2:d1:cb:10:08:5a:71:a5:02:e1:ee:9c:
64:be:11:41:6a:69:48:b7:da:ed:71:de:71:b1:2d:
d4:29:5f:57:28:74:06:99:2e:de:36:80:d4:29:a8:
2f:a4:0c:3b:8c:f0:95:5b:67:88:d3:b1:af:ec:70:
df:fd:b2:af:bd:87:37:a7:ed:25:13:ee:f9:ca:6e:
40:26:98:d7:9e:40:b6:2f:95:04:87:26:f9:90:3e:
17:30:82:74:85:ec:d3:10:a3:54:07:52:16:9d:fc:
0c:06:75:a1:b3:5f:52:ea:55:e2:23:df:2a:24:13:
d2:85:9c:8a:b2:28:d0:8a:f2:73:ba:f6:bf:a3:3b:
dd:bf:67:af:23:36:a0:cd:da:d3:53:20:08:d4:cf:
8d:19:85:bd:48:c4:03:d8:4b:c5:0e:31:cf:d4:f8:
0d:ce:5d:f7:ff:e5:eb:48:9d:cf:97:a0:76:d6:30:
45:80:cf:5c:42:2b:c9:ec:c3:3e:54:8b:85:19:21:
53:d4:43:e3:a5:63:ab:cf:f1:e6:ae:07:42:63:f3:
6f:7e:de:90:a0:8d:ee:2d:57:ee:d7:1e:c9:61:0b:
db:d1:96:fd:c8:16:5f:a4:96:cf:77:67:36:bb:e4:
f9:aa:07:69:15:7b:02:18:e5:b6:29:e3:c3:9c:5b:
a3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:5B:B9:79:67:1C:EB:0A:95:3F:F6:BC:2D:BE:15:3D:A8:B3:38:72
X509v3 Authority Key Identifier:
keyid:F2:5C:65:3C:60:54:86:60:42:A7:06:F7:17:B2:4B:21:FD:F9:81:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8lxlPGBUhmBCpwb3F7JLIf35gag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/fb2998-51f9-4adb-a323-f07a218e1cc7/1/8lxlPGBUhmBCpwb3F7JLIf35gag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9a:84:6c:5d:58:ea:3d:b8:0f:9a:b1:a0:60:2f:2e:37:6a:
23:58:4b:2e:57:00:3b:6a:82:1d:97:4a:40:74:14:e5:b8:c4:
73:dd:73:95:ce:68:b6:11:42:05:12:76:98:5f:93:1d:65:28:
62:86:00:59:92:90:cf:e3:e0:3a:0f:dc:5c:f3:20:63:ae:8a:
e5:c8:9d:19:7a:97:44:08:e5:b7:e4:67:97:d7:8a:11:be:6b:
16:0a:03:46:b2:95:17:12:b8:5f:1d:05:a1:55:16:72:84:f0:
88:e3:91:69:73:53:b5:4b:c8:67:32:f7:cf:8f:d4:eb:27:3e:
f7:e1:20:1f:a7:e2:67:71:7c:b2:dc:41:4b:b0:9b:14:9c:73:
ba:ab:9c:95:8c:ca:36:7a:8e:43:35:1f:71:75:a9:8c:0b:fe:
f0:7a:73:47:86:13:eb:f1:07:c4:68:e0:8c:82:09:d2:d8:1a:
f5:6d:be:e3:0b:1e:da:92:ac:de:54:ac:f6:5c:e4:eb:ae:0b:
0d:d3:dc:68:68:e2:bb:b2:e3:95:0a:1c:20:ee:50:bf:5a:d6:
e7:06:be:95:18:d5:c4:04:0f:bf:f4:d2:39:be:6c:04:43:4a:
1d:e2:07:50:f5:67:f4:bd:66:aa:71:70:d4:b3:ec:c5:9b:6f:
7a:0d:c8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:31:40 2025 by rpki-client