Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
File: 8x7XsfY7UapRap_8sDWjoNaeZaE.mft (raw, json)
Hash identifier: cmjLL5W4dlFqK8c3X0JFazMGZERguZdR7f+AbNUSA8w=
Subject key identifier: 3D:2F:15:70:B7:5F:C1:EC:D2:A3:F6:C8:E8:AA:A7:0F:1F:3B:AF:11
Authority key identifier: F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
Certificate issuer: /CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Certificate serial: 0197B70EBB17F736E2E9F9925106BC569938
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
Manifest number: 06AD
Signing time: Sat 28 Jun 2025 15:01:25 +0000
Manifest this update: Sat 28 Jun 2025 15:01:25 +0000
Manifest next update: Sun 29 Jun 2025 15:01:25 +0000
Files and hashes: 1: 8x7XsfY7UapRap_8sDWjoNaeZaE.crl (hash: b+cj+Vv/7nZB46rZbR3N8IoR2SqiLkBnWpSQqriYMnk=)
2: VJcC3DZjVaOocdNxvr3eh-uH0lw.roa (hash: S/FApMeQF+bI8dQe3+ptgHneEZT+L8zmVlOAZBtIFyI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:bb:17:f7:36:e2:e9:f9:92:51:06:bc:56:99:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ed7b1f63b51aa516a9ffcb035a3a0d69e65a1
Validity
Not Before: Jun 28 15:01:25 2025 GMT
Not After : Jun 29 15:01:25 2025 GMT
Subject: CN=3d2f1570b75fc1ecd2a3f6c8e8aaa70f1f3baf11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5d:3e:2a:c3:a5:09:5c:14:11:e7:9d:53:e3:
27:7f:e7:0f:19:95:eb:87:5f:e6:d9:60:b2:3b:71:
da:38:8a:e4:5c:90:01:7c:41:f5:2d:34:7b:17:72:
41:19:5b:f9:72:5e:39:25:cc:92:93:5d:db:b8:90:
56:4d:c6:e6:18:a7:a3:1b:1d:7f:fa:82:2e:35:cf:
e1:23:23:f7:62:79:f6:22:24:91:87:82:cb:7b:78:
8f:cf:d1:73:34:26:7f:15:e8:6c:50:86:ff:68:f9:
25:59:c9:60:d1:d9:11:85:73:79:d2:f5:eb:bc:bd:
8f:19:26:d5:cd:34:e7:07:5d:e0:79:9c:f3:13:82:
1e:38:96:19:2e:8b:0e:8b:64:07:86:03:8b:43:d3:
a7:0d:87:0f:57:e4:d0:d5:57:5f:12:60:4e:d4:fa:
e0:23:34:70:ae:3a:9c:45:11:22:ac:36:ad:f1:df:
4c:71:6a:9d:7b:e5:73:cd:2e:5f:d6:9a:65:e3:09:
f0:35:09:2f:6a:c7:28:68:b5:8b:90:c2:e0:d8:f6:
c5:ef:59:c7:ec:49:c7:69:bd:72:00:a7:d2:27:16:
85:6c:7c:9a:d8:4a:19:38:c9:b7:05:9d:ed:af:92:
4e:f9:18:c6:32:9b:ab:8d:46:fa:fb:63:d2:6c:3c:
8b:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2F:15:70:B7:5F:C1:EC:D2:A3:F6:C8:E8:AA:A7:0F:1F:3B:AF:11
X509v3 Authority Key Identifier:
keyid:F3:1E:D7:B1:F6:3B:51:AA:51:6A:9F:FC:B0:35:A3:A0:D6:9E:65:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x7XsfY7UapRap_8sDWjoNaeZaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/99ed06-e445-4ca2-b647-bd2b3abae121/1/8x7XsfY7UapRap_8sDWjoNaeZaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:01:b1:0d:e4:92:fe:0c:14:96:ea:85:b5:15:1b:f3:8d:79:
43:cc:9d:db:20:7d:17:6b:0b:09:49:81:96:5e:e6:d8:10:4c:
7b:ad:17:8b:cf:2a:72:4d:8f:24:59:c2:99:5d:de:3f:6b:2a:
cd:54:92:55:1f:4b:d4:f7:4e:f6:a1:80:f6:8c:80:70:12:c7:
a2:62:54:21:81:c3:69:c5:ad:15:b3:b0:2d:2e:12:45:23:0f:
14:a3:21:09:b5:88:a7:a2:4e:03:af:a4:4f:d1:ca:9c:b9:f9:
fb:e1:6e:ae:ff:98:f4:97:78:e4:3e:26:8e:3c:89:5b:81:5c:
67:48:25:a8:c5:5f:93:6f:79:2f:87:21:dd:2d:63:cc:eb:dd:
22:c3:02:41:68:7e:75:00:d4:8c:d1:8e:05:c0:9b:91:56:6c:
92:e1:0e:9c:33:7c:d1:7f:a8:49:fb:0b:38:d8:2f:71:02:4f:
40:ec:03:24:be:95:b4:6a:8e:cf:b9:d1:31:85:80:55:d1:ca:
13:26:1c:b0:33:19:32:2e:72:02:0f:02:fa:89:15:f9:d3:02:
58:83:59:95:df:64:f1:fe:73:81:f6:dc:05:15:3c:e1:b5:f1:
56:49:96:2a:f1:d8:99:d6:ec:77:56:38:23:db:4b:c1:1b:5d:
71:da:44:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:36:03 2025 by rpki-client