Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: wr71M7mrFAB5iQHvOWEfDOiFSiKHHwAcbK/ORa6CnuM=
Subject key identifier: 14:00:37:7A:18:E9:D6:3F:B2:1C:B2:89:8A:D8:4B:34:D6:B2:FE:80
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 0197CBE06163EFFDBA8AEC6164672F45BCCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 0BC5
Signing time: Wed 02 Jul 2025 16:02:49 +0000
Manifest this update: Wed 02 Jul 2025 16:02:49 +0000
Manifest next update: Thu 03 Jul 2025 16:02:49 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: Z0vdiX/Jr0n17Hev4tks5DJnDOpI6whvTxXBQG6mnCM=)
2: ViytvvvqRpbhZ8khzk-URy1_cok.roa (hash: GO9E5IMUAfx38THMM6EhNHK1/Vpo8T9/VGp4F+NJQF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 16:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:e0:61:63:ef:fd:ba:8a:ec:61:64:67:2f:45:bc:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: Jul 2 16:02:49 2025 GMT
Not After : Jul 3 16:02:49 2025 GMT
Subject: CN=1400377a18e9d63fb21cb2898ad84b34d6b2fe80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:02:54:a2:09:39:7a:7a:df:ec:52:5f:20:1b:
3e:1a:50:49:13:1b:da:be:0b:fe:a0:3b:72:2d:c8:
85:4f:5c:c6:66:0a:e4:40:02:cc:b1:d1:70:04:b4:
df:63:38:83:4e:e9:72:29:30:b5:6a:60:d7:a4:a6:
7b:72:25:ef:80:36:21:fd:70:30:e4:a3:ff:f5:f8:
c2:49:b9:fd:2b:75:22:81:1d:4f:cf:eb:4a:0e:bd:
09:4f:62:b3:f0:83:7a:5f:58:28:5e:4f:27:86:da:
e3:0d:d2:45:55:14:0b:e9:ab:ec:12:7f:ed:26:da:
90:9b:e0:80:25:3f:e9:be:39:c6:60:e5:29:2a:71:
67:4f:60:72:64:b1:39:d7:a5:37:b7:7c:56:d8:e7:
c5:e0:a8:8e:e5:ed:e2:b8:1e:c0:1c:a3:60:6d:29:
2f:64:ce:b9:69:b3:5d:de:57:23:60:84:c1:76:a1:
be:b8:61:90:ab:50:cc:bc:f1:5c:76:ce:bb:f9:05:
2c:d4:68:19:22:bc:26:4b:ec:f4:df:18:bb:a4:f2:
a8:3d:d3:60:06:32:ff:f7:aa:81:c4:9c:b6:67:83:
e2:8d:a9:80:a6:83:26:1b:64:3b:79:ef:49:dc:30:
39:43:36:3c:4c:49:a3:6d:bd:39:8d:61:ff:b4:a7:
99:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:00:37:7A:18:E9:D6:3F:B2:1C:B2:89:8A:D8:4B:34:D6:B2:FE:80
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:8c:6d:2c:85:1a:af:5a:ff:63:91:75:7c:3f:8e:00:48:25:
3a:e4:70:04:34:b8:30:ef:f7:c6:1e:41:81:d4:fd:de:db:f0:
99:01:c2:6e:2a:63:30:9f:2d:f1:e1:d4:74:51:8f:fb:b9:b5:
de:66:a6:86:8e:8d:cc:ef:dd:ab:f0:6f:57:25:c4:8d:5e:76:
de:10:39:a4:3e:ef:ea:a0:15:03:0b:59:79:7c:8e:77:cc:01:
ba:f1:8c:eb:e8:d9:9f:28:ad:e9:1e:d8:d0:6a:d2:ea:0f:bd:
e6:56:50:00:6e:e1:06:84:aa:e7:61:87:bb:1c:18:a0:7e:5a:
54:64:f0:f9:b3:f3:47:ff:6d:e8:e3:1f:15:81:30:23:cb:ae:
96:39:52:b9:2a:bd:e6:ea:50:bf:a9:87:35:74:d6:11:07:6c:
40:96:8d:bb:73:91:15:61:b6:e7:36:71:6f:c9:6c:98:33:ad:
4b:6d:3c:17:da:11:90:66:15:74:e5:36:5b:61:41:77:ce:21:
c3:f0:08:7f:81:ad:cc:fa:b1:f8:e3:99:ea:62:26:d0:47:73:
89:5e:83:22:fb:ed:3c:2e:31:64:6d:74:bb:3f:99:22:61:bb:
5c:1a:04:62:06:ec:f5:69:7e:61:75:2c:f2:c2:e7:25:cb:ed:
30:52:02:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:46:37 2025 by rpki-client