Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
File: 8J3iYg0i-mnFTL68by9IUFbOL-U.mft (raw, json)
Hash identifier: GwXZ+atJA+KbjNCAPn/fQ8J6GVxkanaEpNmA8NiM+rg=
Subject key identifier: 95:F1:79:0C:87:5F:A0:46:DA:78:A9:59:DC:73:CC:C9:5C:08:71:C3
Authority key identifier: F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
Certificate issuer: /CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Certificate serial: 0197B6A05A40EEF8C9B6DB1EAB1F48E974E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
Manifest number: 0273
Signing time: Sat 28 Jun 2025 13:00:51 +0000
Manifest this update: Sat 28 Jun 2025 13:00:51 +0000
Manifest next update: Sun 29 Jun 2025 13:00:51 +0000
Files and hashes: 1: 8J3iYg0i-mnFTL68by9IUFbOL-U.crl (hash: RgrZ83NoX9P/amUNOztHp9Fq2G/7lt3lcWERNx/sQ/s=)
2: vlbjkguhua3sXNAb4WL9C-kH7NI.roa (hash: W2Tg0b912XPXpVMo5wmJMbF6s29yN1E6dtpyPDGr82E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:5a:40:ee:f8:c9:b6:db:1e:ab:1f:48:e9:74:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f09de2620d22fa69c54cbebc6f2f485056ce2fe5
Validity
Not Before: Jun 28 13:00:51 2025 GMT
Not After : Jun 29 13:00:51 2025 GMT
Subject: CN=95f1790c875fa046da78a959dc73ccc95c0871c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:3a:b1:69:5d:f5:91:fc:50:70:31:49:7e:92:
c5:b9:ff:c3:de:26:76:57:b6:bd:b7:3e:8c:ed:e8:
98:5e:e8:73:03:6a:c3:46:fb:fd:75:ca:20:a5:82:
33:1e:c4:bf:bf:c6:f0:c9:d2:78:53:d1:83:2d:11:
70:f9:f2:62:e0:e4:11:e0:89:08:cf:7d:8a:1f:49:
90:02:19:f2:13:4a:b6:bd:86:6e:23:1e:fd:10:c5:
bb:3c:82:18:20:49:c3:3c:ca:d6:8c:fb:5d:dc:69:
08:61:35:ae:32:70:cb:f4:f5:c0:8c:d0:41:1a:5d:
6f:09:10:8b:31:70:23:0e:ab:f7:eb:29:93:00:c2:
e1:8c:21:75:d8:5f:15:55:22:5f:cd:bd:ad:1b:0d:
86:a0:15:ab:78:38:72:a7:c6:1b:c5:96:fd:44:f4:
22:4b:59:1e:d5:69:05:32:db:2d:5f:4a:7c:3d:24:
25:a8:a9:d4:01:fe:93:f7:6e:cc:c5:4a:cb:14:ef:
67:0e:98:2b:36:42:99:7f:dd:3c:80:b7:a8:55:b6:
b8:af:0d:f9:33:a5:83:7b:c4:ca:3e:0d:f8:f4:ae:
9b:cd:75:cd:f1:eb:8e:fa:86:d7:90:e5:18:da:91:
f0:6c:5b:c6:97:ce:d7:49:53:2b:26:59:36:df:a1:
16:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:F1:79:0C:87:5F:A0:46:DA:78:A9:59:DC:73:CC:C9:5C:08:71:C3
X509v3 Authority Key Identifier:
keyid:F0:9D:E2:62:0D:22:FA:69:C5:4C:BE:BC:6F:2F:48:50:56:CE:2F:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8J3iYg0i-mnFTL68by9IUFbOL-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/928593-7a0a-4312-86e2-f82d600dd4e2/1/8J3iYg0i-mnFTL68by9IUFbOL-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b9:ba:1b:eb:98:fd:1e:d4:60:4b:b6:d7:ea:b8:ea:33:85:
e7:60:91:37:51:2c:88:14:fb:98:db:05:a2:60:e5:8d:7f:29:
86:cf:2a:59:25:e7:26:f2:c3:eb:74:0b:b5:2c:40:6b:d5:6d:
2d:f2:05:71:c6:27:e9:e4:d2:36:46:b2:5c:44:f8:4d:95:e8:
f7:4a:e3:0e:5d:45:af:96:7c:f6:8f:dc:58:03:e8:0e:6b:64:
f5:03:9e:93:0a:20:95:63:6d:6a:9b:c5:e4:2c:bc:a4:7a:cf:
85:e8:16:85:03:dc:c6:6d:39:7c:64:0c:35:86:fc:c3:01:42:
65:67:15:a1:bf:65:e2:23:00:48:80:af:48:e4:49:47:49:b4:
9c:b3:4d:db:b6:43:6a:3b:c9:af:3e:fb:64:1e:b5:5c:78:f2:
56:2f:5e:ea:39:02:45:1c:41:b9:40:67:c0:83:3c:b0:1e:6b:
94:e1:56:c7:d3:12:c1:a0:6e:e6:4a:81:f6:d9:96:a9:e4:a2:
73:5a:31:d4:35:47:a5:e1:8c:d9:46:fe:01:bb:f9:34:0d:a9:
24:f4:74:76:ad:f5:a8:a2:05:82:84:a6:e8:ae:30:56:4a:9b:
ca:05:79:c8:72:fe:8a:5a:bb:cc:88:37:ec:17:03:c2:cb:00:
c9:5a:5d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:17 2025 by rpki-client