
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
File: 8WaLESRDpJbpZlHVgrbMZBP7XHY.mft (raw, json)
Hash identifier: I+qUpQ6krLuKw2TJuYHWi09RwQ7na0rX6uaWXALkna0=
Subject key identifier: 2C:5D:98:3A:A2:E0:72:64:76:D0:76:68:C1:73:80:33:72:78:54:60
Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76
Certificate serial: 0197B7458432B638FE23CD1B7D836D9DADF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
Manifest number: 0598
Signing time: Sat 28 Jun 2025 16:01:15 +0000
Manifest this update: Sat 28 Jun 2025 16:01:15 +0000
Manifest next update: Sun 29 Jun 2025 16:01:15 +0000
Files and hashes: 1: 8WaLESRDpJbpZlHVgrbMZBP7XHY.crl (hash: YhIYrqrR3v+kn6GZH+2qaS6iXZQo6LMrQ/clNW/nRQM=)
2: zTop8kv04M-CPRutWJMmw5M7s5M.roa (hash: h5ZlzzODOy4Yt5G5OttRKd2ppDnce+EkREvBpaIbOxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:84:32:b6:38:fe:23:cd:1b:7d:83:6d:9d:ad:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76
Validity
Not Before: Jun 28 16:01:15 2025 GMT
Not After : Jun 29 16:01:15 2025 GMT
Subject: CN=2c5d983aa2e0726476d07668c173803372785460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:31:c2:6d:28:c1:06:68:31:ad:d0:21:73:cb:
c9:21:6c:2f:e8:0c:5c:4b:dd:17:9d:0b:b0:bd:d0:
0e:2d:e6:60:0a:ad:e3:9a:62:df:35:83:7e:da:da:
b4:b7:38:46:db:ee:04:4d:d0:47:79:fa:71:3c:b3:
30:48:ea:9f:28:cb:0f:cb:c9:19:5a:8c:77:76:f5:
4f:c1:a1:4d:1b:0f:b8:de:ac:6c:a1:b5:00:2b:32:
90:22:8b:23:25:e1:f6:a2:fe:41:87:46:45:0a:9f:
6a:db:2b:cb:7e:ae:e4:00:93:c8:de:a9:ae:a1:f4:
b2:ea:bf:b2:68:ef:93:b0:b9:c4:d8:62:5c:ee:01:
19:40:92:75:79:89:eb:2f:cc:b2:7e:4d:2e:ac:d0:
3e:20:21:ef:02:e8:3f:38:da:7c:ff:a8:cb:78:f7:
59:ec:5a:c0:f5:2b:15:54:63:aa:2b:d1:9c:0d:fe:
53:8c:37:da:5c:34:26:cc:be:49:b8:85:be:d7:27:
46:51:70:ff:22:5f:f1:5a:b2:69:d8:0a:c6:86:7d:
2c:2c:a4:6d:98:e0:86:bb:e6:50:5b:c1:ec:db:f4:
7b:0b:e8:17:9b:d1:c8:49:4e:32:82:72:6d:27:15:
dc:b2:12:82:3d:4e:d9:69:cd:42:87:bf:ac:48:d4:
00:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:5D:98:3A:A2:E0:72:64:76:D0:76:68:C1:73:80:33:72:78:54:60
X509v3 Authority Key Identifier:
keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:8c:ee:7d:3b:7a:5e:ff:06:35:30:5a:4e:37:8d:6d:e5:f1:
a4:8f:60:1d:54:a1:96:47:af:cc:c8:97:49:d7:c0:08:84:2d:
b2:0f:b6:e1:79:32:0b:3b:9c:da:50:ef:89:c0:2e:c9:6e:77:
90:e1:1c:dc:5f:27:d6:1a:5c:a7:39:27:b0:a7:94:fd:83:96:
7d:14:07:0c:d3:4b:8d:60:20:4f:6a:c6:17:e8:80:27:a4:11:
5f:eb:59:5d:9e:1e:7e:8b:a5:e9:b0:b8:c8:be:29:4e:45:f0:
c8:7d:ba:a1:3e:f7:e1:00:0c:c2:bf:9c:f3:d8:b5:54:b4:fc:
db:01:e0:ba:4c:44:54:28:91:b2:c5:5e:d0:e8:5a:27:a3:9a:
a5:c2:df:ff:ec:45:e5:04:c8:23:b0:35:26:48:7b:1c:14:68:
a2:ed:23:a2:1b:a7:c6:ff:b7:38:3d:84:5b:81:e7:3a:68:cb:
96:9c:8f:a3:c9:c8:9c:5f:c5:f0:b5:a6:ee:54:be:7e:fd:b3:
84:08:83:0c:e6:26:24:b7:46:d9:40:95:91:7a:6e:66:f9:c8:
ce:62:80:bd:01:81:6b:c2:bd:4e:29:38:b8:16:3a:8f:a1:95:
7d:d7:ba:b1:16:0b:c4:f2:5e:da:e2:44:e5:df:57:83:f3:d2:
69:31:0c:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:06:03 2025 by rpki-client