Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
File: 8fQjYKOXCoCAFv342NujlsWh0DQ.mft (raw, json)
Hash identifier: miNLNa8di+2tj7IQtTKo2eCdDsrD6BBFQAioPIovtVk=
Subject key identifier: A9:34:74:9D:5F:FC:F9:C3:A7:A8:86:A1:F8:F7:BC:B4:0F:01:C2:90
Authority key identifier: F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
Certificate issuer: /CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Certificate serial: 0197C1C8E82ACBAA1706BF3B99435DDC664E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
Manifest number: 15C0
Signing time: Mon 30 Jun 2025 17:00:58 +0000
Manifest this update: Mon 30 Jun 2025 17:00:58 +0000
Manifest next update: Tue 01 Jul 2025 17:00:58 +0000
Files and hashes: 1: 8fQjYKOXCoCAFv342NujlsWh0DQ.crl (hash: eAzj+QzY9SmkvlrgdZRq5FlOkZvQVTOpUw6al4QDriU=)
2: XuSi8kXeBm_B8q7AzG1ldyxBl-U.roa (hash: VfVAqS9+xLim6Zr3WY+RPdJPag+yTxoDEH7wLbaR7Ko=)
3: w31LkDj-LMN5WUk5kbozH3jiIBA.roa (hash: y5CKPYN2xY1V73cNd1uJ1GGyUm72KbaIXZc2V61uNZE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c1:c8:e8:2a:cb:aa:17:06:bf:3b:99:43:5d:dc:66:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f42360a3970a808016fdf8d8dba396c5a1d034
Validity
Not Before: Jun 30 17:00:58 2025 GMT
Not After : Jul 1 17:00:58 2025 GMT
Subject: CN=a934749d5ffcf9c3a7a886a1f8f7bcb40f01c290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9c:88:a7:45:ae:37:dc:3c:3c:bf:72:08:f9:
98:39:8e:29:01:4d:ea:2b:ca:54:6c:41:89:ed:6d:
8e:c7:3c:c9:9d:a7:bc:6a:e6:9e:0a:99:76:5a:22:
c6:4b:28:d7:d8:13:72:84:5a:80:ac:a0:1e:5d:9c:
5c:eb:d2:68:ee:6b:62:a8:4b:fd:8b:7c:5e:c7:d4:
66:0c:13:db:a3:64:6e:79:89:7d:a3:75:e6:80:99:
20:ed:99:70:1a:fc:65:03:2f:b7:ba:d9:23:a8:c6:
4c:c8:5a:76:60:be:3a:f2:a6:f5:5e:08:52:c0:f8:
14:a3:57:0f:be:c0:75:a0:a5:80:43:c1:77:ca:8e:
e3:4d:dd:f1:7d:bd:7f:b1:23:21:47:39:ca:06:14:
78:fc:ae:a4:98:9a:a8:0f:5d:92:69:0a:9b:eb:ce:
ac:37:8c:1c:31:a0:0e:4e:23:d8:59:8b:2b:58:7f:
83:92:72:15:8e:65:e7:f9:93:f8:2a:db:31:15:3c:
6e:79:24:7e:00:bc:88:62:f8:d0:27:45:f1:b5:59:
c2:db:51:d9:29:b3:b8:28:bf:8d:d0:ff:4d:8f:61:
7e:74:ad:a2:63:c2:b9:7a:51:63:6a:6a:43:1b:33:
ca:ca:8b:52:3f:54:9e:c5:14:01:d8:67:01:87:34:
0d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:34:74:9D:5F:FC:F9:C3:A7:A8:86:A1:F8:F7:BC:B4:0F:01:C2:90
X509v3 Authority Key Identifier:
keyid:F1:F4:23:60:A3:97:0A:80:80:16:FD:F8:D8:DB:A3:96:C5:A1:D0:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fQjYKOXCoCAFv342NujlsWh0DQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/31dca4-1ce8-4318-956c-d4f08be050d5/1/8fQjYKOXCoCAFv342NujlsWh0DQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9c:8c:cf:78:41:8f:d7:dd:75:f7:4e:cc:57:7f:dd:30:0f:
dd:ce:2a:d6:13:10:91:80:2f:da:be:0b:6f:6c:1d:2a:ea:8d:
84:b6:e2:4e:e2:87:a7:8e:02:18:27:42:0a:06:71:7e:2e:23:
a8:1b:28:18:07:84:78:58:a3:83:4b:ab:ae:2d:d1:2f:5f:41:
d4:e2:07:67:92:3f:66:bc:5f:db:41:f4:09:35:dd:52:ff:e2:
cd:c6:b8:ef:e4:3e:9f:f9:26:f9:a8:d9:72:48:9d:7c:e3:d0:
5d:f4:54:5e:33:99:59:0e:c1:5c:77:c8:7a:b5:9c:76:2d:9c:
85:07:e1:c8:b6:de:ac:50:0f:d9:30:d7:34:a8:b9:88:7f:f2:
33:ea:f6:79:b4:7b:83:fc:80:fa:16:bc:06:f3:b9:ae:43:81:
e3:3f:b7:14:56:6d:6f:f1:57:ea:27:f1:75:c0:54:48:01:36:
61:28:a1:60:46:85:cf:24:60:e9:25:76:2c:f7:ee:f3:a3:2f:
0a:11:17:db:28:3e:1f:9a:95:16:48:e0:3b:47:e6:ca:71:e0:
f9:54:73:59:cd:76:cc:fa:2f:50:7e:45:b8:4e:fc:4e:be:96:
c7:d3:9a:99:c9:73:bb:ed:cf:7e:68:e7:49:4d:ca:19:a7:f7:
b3:85:d5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 1 01:08:22 2025 by rpki-client