Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
File: rev8Tln35kZGDZAxFWbfH0ftqRc.mft (raw, json)
Hash identifier: jgBfE7X416asy9RFS7a5PErRmdDARV8GzR7tAuloINM=
Subject key identifier: E7:DF:37:5D:98:5A:E4:AA:68:17:CF:8F:D3:1F:68:46:F9:D6:A1:28
Authority key identifier: AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
Certificate issuer: /CN=adebfc4e59f7e646460d90311566df1f47eda917
Certificate serial: 0197B6D76DF7F0BA2F87ECA1F60E298534EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
Manifest number: 10F2
Signing time: Sat 28 Jun 2025 14:01:01 +0000
Manifest this update: Sat 28 Jun 2025 14:01:01 +0000
Manifest next update: Sun 29 Jun 2025 14:01:01 +0000
Files and hashes: 1: cQyc6nVgHzK4QNpSkp4cDVRMkiE.roa (hash: N1QdoGGRESzbdDo8ibNStMhsdyaZ5jyu5P6HBd0ZTZU=)
2: rev8Tln35kZGDZAxFWbfH0ftqRc.crl (hash: KgMUP3524U2XMtcdH4WR9F/FA60jjNLJFqOXO4vkPhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:6d:f7:f0:ba:2f:87:ec:a1:f6:0e:29:85:34:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adebfc4e59f7e646460d90311566df1f47eda917
Validity
Not Before: Jun 28 14:01:01 2025 GMT
Not After : Jun 29 14:01:01 2025 GMT
Subject: CN=e7df375d985ae4aa6817cf8fd31f6846f9d6a128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:66:a9:1d:d5:82:f8:ad:87:d5:f2:35:6d:35:
a2:7d:13:b8:5f:78:5d:70:ae:82:fd:87:74:d1:94:
7b:bf:1a:6a:9a:3a:3a:00:84:ce:e8:e1:f3:95:64:
0d:c2:15:9c:2d:86:0d:34:01:3a:1b:30:89:67:66:
e4:5d:68:b2:bf:2b:51:d6:2d:63:fa:3f:6c:65:84:
51:01:f3:33:7d:99:db:c4:dc:aa:78:1c:32:71:84:
77:e7:c3:93:20:ac:60:10:37:3b:42:1c:bc:d3:fd:
73:69:40:90:49:bb:79:6d:07:d4:23:0f:36:93:0f:
7e:d0:49:59:3a:b1:12:94:35:d7:29:2d:c3:1c:92:
bc:a1:4b:11:4d:a7:1b:00:5f:13:4e:0b:a4:4d:90:
51:c7:58:80:d3:c1:6e:40:11:4e:b2:d2:28:3c:13:
0f:4c:22:39:92:01:a7:30:54:2f:55:f2:e4:35:58:
57:eb:de:84:9b:c6:56:a9:9e:ec:79:0f:8a:71:ce:
14:a9:fb:9c:67:b6:25:60:97:43:aa:cd:32:27:52:
11:2e:90:7e:91:c8:df:03:0c:33:f4:7b:8e:da:0d:
2b:9b:86:19:36:27:89:ac:d0:df:1d:d0:1e:3a:23:
0d:90:66:7b:27:a1:79:6e:a4:1b:94:a6:41:4a:8b:
92:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DF:37:5D:98:5A:E4:AA:68:17:CF:8F:D3:1F:68:46:F9:D6:A1:28
X509v3 Authority Key Identifier:
keyid:AD:EB:FC:4E:59:F7:E6:46:46:0D:90:31:15:66:DF:1F:47:ED:A9:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rev8Tln35kZGDZAxFWbfH0ftqRc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/384995-3ade-4b52-bffb-86626647086c/1/rev8Tln35kZGDZAxFWbfH0ftqRc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:c2:9a:95:b2:d3:e1:01:c2:ff:84:4d:1b:3d:09:3a:23:b9:
e4:a3:10:9a:48:db:82:52:d2:82:8c:df:8d:65:82:d8:94:eb:
73:14:cc:06:63:07:f6:19:a2:0b:b4:2b:c1:ca:9c:80:30:fa:
fc:4a:d7:ab:68:64:f7:4d:a2:27:90:59:a1:14:a4:60:83:12:
d6:8b:99:8c:b5:2d:87:5c:0f:9b:f1:89:74:75:0e:c8:1f:64:
4a:dd:ef:60:4f:b3:d6:8d:5c:51:62:fa:b1:d5:e2:6c:82:5b:
17:a1:1f:fc:d1:46:48:50:0c:e1:fc:ea:ea:4d:1e:b5:04:3a:
68:69:26:36:dc:92:20:61:2d:36:f9:a1:e1:92:20:67:4a:2b:
aa:44:0c:be:f9:6f:28:9b:31:19:09:9a:b9:d5:56:d8:ca:28:
24:33:2c:b4:5c:70:8d:3f:d0:83:57:72:f0:fb:7d:0d:19:18:
80:ea:a8:ea:5b:c0:60:e5:0e:f3:53:60:cd:4b:fb:4e:08:8a:
94:5d:59:50:d4:a7:d9:e8:22:c6:a6:6a:1d:fb:38:0b:b4:ed:
dd:33:f7:75:15:00:2d:49:76:21:81:c0:84:5e:e0:fb:6e:03:
9a:ef:54:28:1a:ae:24:62:6e:93:84:b5:ab:2d:93:91:0c:30:
1b:b5:7b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:02:06 2025 by rpki-client