Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
File: 8jWG8iDMsNHFLArt9edm7KGhHHQ.mft (raw, json)
Hash identifier: icWkku2RDBiLIjbCfPp9VwTLWiF3zhXKVO8YzHqNNSI=
Subject key identifier: D4:83:88:6B:FC:9F:EB:98:65:1E:E3:AA:DC:48:2A:37:4A:6F:70:06
Authority key identifier: F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
Certificate issuer: /CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Certificate serial: 0197B6A102E0C27CCEB80D82A3D5DE81121C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
Manifest number: 0413
Signing time: Sat 28 Jun 2025 13:01:34 +0000
Manifest this update: Sat 28 Jun 2025 13:01:34 +0000
Manifest next update: Sun 29 Jun 2025 13:01:34 +0000
Files and hashes: 1: 8jWG8iDMsNHFLArt9edm7KGhHHQ.crl (hash: T2p4AEZx5g7s7nGu7yiByr3DAepDKaTQ5xoMBbLganQ=)
2: v9SdGCEbNFlSuDgWgo1kf6nL3As.roa (hash: qiXG0Rmw4yiW0AhRjg9/OTIgPd0soD+OwXQ8XH+CjYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:02:e0:c2:7c:ce:b8:0d:82:a3:d5:de:81:12:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f23586f220ccb0d1c52c0aedf5e766eca1a11c74
Validity
Not Before: Jun 28 13:01:34 2025 GMT
Not After : Jun 29 13:01:34 2025 GMT
Subject: CN=d483886bfc9feb98651ee3aadc482a374a6f7006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:77:1e:f5:c1:b5:68:16:9c:a8:2c:85:a2:b1:
20:a9:69:bf:76:c1:49:a4:b3:60:38:eb:88:b8:6e:
2f:f8:d4:ab:64:2a:76:e2:3c:94:6c:68:d5:a1:fd:
d5:7e:57:68:56:99:ae:16:8a:6a:d8:b6:fc:0f:ed:
9e:96:18:a2:19:53:12:c4:bf:16:5e:38:fd:74:93:
bc:d2:5e:50:8f:2b:4c:47:e4:1b:11:46:bc:00:d1:
e1:8a:be:8f:6d:21:1b:98:8d:c2:8c:bb:62:e3:d5:
52:60:ba:17:47:97:53:03:2f:34:8f:76:c9:b1:fb:
79:5c:a3:45:ed:3c:72:4a:2d:18:99:c8:bf:30:8f:
65:39:8d:ff:cf:c3:bb:db:62:d0:07:5b:b8:49:c4:
30:40:4a:13:19:af:14:cd:ca:01:ff:f3:ca:c1:53:
df:4e:79:3e:ff:05:af:03:13:3a:f3:09:81:6d:9b:
45:55:ff:82:ec:44:28:ca:2c:66:0b:52:37:41:24:
5c:fe:93:6e:18:a0:e9:0b:49:37:61:a2:fb:e6:41:
36:9d:78:ef:8c:2a:a7:14:07:68:22:7d:1b:26:e3:
a3:70:63:27:16:11:30:3c:59:41:2d:51:c3:2c:32:
c5:41:8f:e3:e7:e6:35:45:47:e3:f2:ed:7c:21:4a:
c1:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:83:88:6B:FC:9F:EB:98:65:1E:E3:AA:DC:48:2A:37:4A:6F:70:06
X509v3 Authority Key Identifier:
keyid:F2:35:86:F2:20:CC:B0:D1:C5:2C:0A:ED:F5:E7:66:EC:A1:A1:1C:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8jWG8iDMsNHFLArt9edm7KGhHHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/83470b-90b0-46b6-b963-301373c04196/1/8jWG8iDMsNHFLArt9edm7KGhHHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:e6:2d:0d:51:df:84:fd:8d:32:4b:93:46:1c:a5:4f:90:0f:
18:0d:16:bc:b3:e3:29:10:d8:58:ba:ca:90:5b:99:2f:b6:c8:
bb:a5:28:4a:81:91:8b:7e:83:c1:4d:cc:cf:3e:d5:22:15:cd:
20:d7:cd:88:3b:30:64:cb:f9:57:09:17:ae:68:76:ac:fe:a6:
e9:70:9c:b3:ac:55:f9:a0:2c:c2:8d:bd:74:90:39:87:11:bc:
8b:4e:fe:d1:95:e1:80:c6:d0:a2:cf:48:37:b9:6b:16:4a:4c:
79:26:03:13:32:52:7e:d8:e5:30:79:66:35:f2:7f:16:44:39:
15:97:01:29:05:76:b3:af:2a:b3:32:11:a3:9c:56:93:5f:2f:
9e:a8:96:65:fe:ce:3f:8f:cf:53:5d:13:01:a5:56:5d:a6:ac:
68:83:10:6f:b3:67:5f:4a:36:38:f3:49:c8:cd:9a:8c:e9:df:
66:41:fc:a5:bd:b3:a4:44:d4:75:af:b9:25:8a:d0:81:af:e6:
6f:22:b8:d6:c4:29:d2:5a:3a:38:3a:93:ef:d8:21:01:6a:a1:
92:a3:42:be:86:c0:bf:af:23:89:75:23:e7:43:00:38:37:b7:
1c:4d:18:62:87:d5:f3:f6:4f:56:db:33:06:e0:cc:97:b3:6f:
c9:a2:13:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:20 2025 by rpki-client