Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
File: 8UPRPHu9KqFfVnfBOawzyGeHnyw.mft (raw, json)
Hash identifier: 5IFKPxQc/Q3UaDYYaNQqv9T6+ML/y9wg7fga/DYIxec=
Subject key identifier: 76:4E:09:10:F3:FC:CB:4B:E3:AA:6B:E8:5F:D0:5A:1A:40:39:3B:75
Authority key identifier: F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
Certificate issuer: /CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Certificate serial: 0197B82146D7BBA74018EE82902AA35A7A7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
Manifest number: 0606
Signing time: Sat 28 Jun 2025 20:01:17 +0000
Manifest this update: Sat 28 Jun 2025 20:01:17 +0000
Manifest next update: Sun 29 Jun 2025 20:01:17 +0000
Files and hashes: 1: 8UPRPHu9KqFfVnfBOawzyGeHnyw.crl (hash: gWN6pZNLbcoTT1FHT0TN9gxSV1Ib8UuwZQtMb8srVso=)
2: UMmv-WY7B5qYJViInJvlNV476mE.roa (hash: jHHOgpNZRXbrpDROEuRDFCxUXMl5uaCZV9NM+NW4eXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:46:d7:bb:a7:40:18:ee:82:90:2a:a3:5a:7a:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f143d13c7bbd2aa15f5677c139ac33c867879f2c
Validity
Not Before: Jun 28 20:01:17 2025 GMT
Not After : Jun 29 20:01:17 2025 GMT
Subject: CN=764e0910f3fccb4be3aa6be85fd05a1a40393b75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:e9:be:1b:34:89:a7:ee:45:fd:af:d0:5b:
a7:2b:74:c6:bb:45:65:67:d3:67:47:5c:10:12:d4:
dd:6a:9a:08:7c:f9:b8:e4:b8:1a:18:f0:47:40:6a:
31:4e:be:50:71:4e:d1:da:c9:f3:56:9e:7d:ab:15:
7e:29:ff:de:5f:78:cc:3a:1e:de:a2:ef:ee:5d:c6:
df:f5:88:4c:24:83:12:73:a0:91:10:db:0a:db:a5:
ea:28:bb:34:5b:37:d6:7f:e0:ea:dd:48:cb:d1:3d:
cb:3a:fb:e9:a7:6f:9c:e1:7e:8e:f2:c3:e2:0d:c9:
00:56:96:27:bd:c5:a3:30:f5:2b:87:c7:69:34:58:
f9:d0:6a:1d:e7:e9:45:12:87:46:ba:a3:0e:04:49:
db:3b:d4:c2:5b:11:da:bd:c4:57:ab:5b:53:85:b0:
80:fa:a6:dd:fe:91:07:e2:b6:05:81:49:82:a6:65:
ec:da:46:41:7a:0e:46:44:2b:04:c9:97:fc:93:df:
4c:7c:34:32:a8:96:8f:a2:59:1f:03:9f:41:bb:71:
19:ca:e4:61:28:f4:27:74:df:57:48:a4:25:56:8c:
43:ab:15:78:6c:a0:9c:49:da:1c:ca:f6:0b:f2:34:
a9:f7:c8:18:29:94:42:f6:2f:1a:57:75:bb:34:a4:
72:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:4E:09:10:F3:FC:CB:4B:E3:AA:6B:E8:5F:D0:5A:1A:40:39:3B:75
X509v3 Authority Key Identifier:
keyid:F1:43:D1:3C:7B:BD:2A:A1:5F:56:77:C1:39:AC:33:C8:67:87:9F:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UPRPHu9KqFfVnfBOawzyGeHnyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/8359ce-bbd4-4253-9464-a146a1b01f8f/1/8UPRPHu9KqFfVnfBOawzyGeHnyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:03:48:f2:fa:99:1a:2b:1c:34:e9:83:fb:b7:8b:6b:f7:94:
ab:be:cf:1c:e1:1b:85:1a:d3:0f:7a:49:32:88:70:8f:ef:5a:
04:ab:fe:85:bb:7f:c5:ad:db:e5:20:f9:45:d6:b7:e8:0a:ad:
e0:0e:54:7d:b1:db:af:67:c1:70:5b:15:d7:06:a7:62:a3:28:
36:ab:6f:68:0e:c1:8c:3d:26:77:36:cd:21:ec:35:a9:2a:5c:
d8:ef:86:21:f8:83:8d:bc:3e:62:2b:90:da:15:ba:23:d9:d2:
45:75:eb:9b:78:be:98:ed:7a:00:c6:78:0a:f2:ba:fe:dc:ca:
61:ba:4c:e5:ff:8d:b1:87:34:a2:c4:41:63:43:ef:02:78:ce:
a7:8c:59:48:ac:10:49:d0:64:e7:fc:9b:c1:f6:75:57:c6:e7:
4b:dc:52:75:e7:eb:aa:e4:ac:4e:3c:c4:42:ab:72:c3:6b:36:
37:61:1b:c0:8c:20:5f:de:a0:af:82:36:d3:3c:b4:32:72:7f:
5a:fd:6a:be:71:7d:d6:86:4d:86:c9:b1:32:e4:da:9f:e0:68:
a6:32:b6:8c:f0:05:f7:1f:5d:c8:53:c4:d5:59:39:cd:da:4e:
d3:b5:b2:e8:ea:3b:6b:69:46:18:3d:40:3e:cf:93:3b:1d:e9:
18:b5:72:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:06 2025 by rpki-client