Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
File: 8t6Ovd0IQWOpC5rlA5ey20nLF60.mft (raw, json)
Hash identifier: /AJP6NLYbn/8JsfRUXD1dSyFmOaxTN1VABC+Udt4JiY=
Subject key identifier: A9:09:0D:6B:31:49:80:A4:88:B1:7F:62:4B:C7:2B:3E:8D:1F:B7:24
Authority key identifier: F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
Certificate issuer: /CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Certificate serial: 0197B7B300BC3AD8E69D320BC5BA5F221410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:00:51 +0000
Manifest this update: Sat 28 Jun 2025 18:00:51 +0000
Manifest next update: Sun 29 Jun 2025 18:00:51 +0000
Files and hashes: 1: 8t6Ovd0IQWOpC5rlA5ey20nLF60.crl (hash: PWPwt3ji/bk1AP3hbR/XpuNldc+VScI6p9G3b+M9Vsg=)
2: pul6fCeEfRfqHUtKh0hXtHyFW6M.roa (hash: SMvKtJGuPxG36wkNr1bAgb49/+mZbdqtVopoxHFUHtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:00:bc:3a:d8:e6:9d:32:0b:c5:ba:5f:22:14:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2de8ebddd084163a90b9ae50397b2db49cb17ad
Validity
Not Before: Jun 28 18:00:51 2025 GMT
Not After : Jun 29 18:00:51 2025 GMT
Subject: CN=a9090d6b314980a488b17f624bc72b3e8d1fb724
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:be:10:e8:98:eb:c3:2f:7f:42:23:1c:c2:e8:
74:30:53:0d:08:74:e8:7b:5d:54:25:d4:4c:57:f6:
2f:7f:e7:5e:21:72:d1:b2:73:1e:43:e0:95:46:6b:
5c:e4:4e:bc:47:fd:b2:e0:2f:a0:f4:2f:d6:b2:84:
ea:5a:92:fd:d6:87:63:88:e2:f2:79:b5:3c:13:da:
aa:84:05:a7:35:65:d0:51:f3:b8:ae:ab:91:1a:9b:
df:c5:99:5b:25:e4:4e:f7:27:e9:ef:9a:5f:df:fc:
49:35:c0:c7:98:0b:c4:5a:63:24:30:65:3d:8f:79:
1f:5a:25:11:90:e2:25:ed:fb:3c:f3:aa:7f:ec:a0:
f2:23:c1:06:49:8a:07:9a:48:2f:2b:99:b8:ec:d4:
08:6d:cb:bc:70:c7:36:36:92:4c:f2:f3:94:50:9d:
d2:93:40:2d:a2:3e:e5:09:39:4f:3a:77:66:d3:4b:
e3:bf:ef:42:fb:8a:52:ed:40:4c:b9:4d:4a:b5:4b:
4a:ea:b4:4b:f5:89:c2:fd:b4:9a:ea:e8:21:37:1f:
4a:26:50:28:16:d0:02:0b:29:6c:5a:13:b6:38:b0:
ce:28:c3:32:8d:3d:16:af:4c:f8:c4:22:8a:56:5e:
cd:0e:f5:e3:f9:cd:86:c6:4a:9b:45:f7:c2:f8:f3:
ba:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:09:0D:6B:31:49:80:A4:88:B1:7F:62:4B:C7:2B:3E:8D:1F:B7:24
X509v3 Authority Key Identifier:
keyid:F2:DE:8E:BD:DD:08:41:63:A9:0B:9A:E5:03:97:B2:DB:49:CB:17:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8t6Ovd0IQWOpC5rlA5ey20nLF60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/c52682-7ea1-42f7-84db-af1ac0f00417/1/8t6Ovd0IQWOpC5rlA5ey20nLF60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:92:d3:ce:f7:01:d8:ab:0e:01:9d:ae:44:2e:71:94:14:b5:
b4:c3:69:d4:3f:91:7f:68:de:4b:31:a0:fc:79:2f:dc:12:dd:
c6:5d:7c:41:29:d2:5b:73:2b:6c:cd:68:52:13:74:01:30:b4:
7d:3d:d6:00:93:14:71:26:a6:c7:85:37:ca:9a:08:6d:dd:1a:
56:b9:c9:75:61:44:b1:3e:03:25:75:3f:37:60:f1:27:7c:cc:
6a:ae:b5:ae:07:f8:0b:34:c4:4f:00:cb:8f:dc:4f:ba:5a:0c:
31:3e:ec:71:31:6b:83:21:8c:04:08:16:09:03:9f:c0:90:18:
ea:84:b1:bb:06:39:6f:7c:fe:de:3e:0f:1a:7c:15:f8:74:23:
4b:48:65:1b:5a:76:fb:d2:56:0e:0e:f3:c7:be:5e:59:50:65:
65:0f:e8:75:5d:79:9e:ca:5a:87:c2:fe:ba:15:05:5b:c4:42:
ca:d6:61:54:b7:40:66:e2:08:49:cd:e1:03:27:8d:1e:12:d9:
74:a7:f3:c8:0d:3f:cd:63:2f:34:50:cd:37:7a:6e:dc:55:47:
df:33:16:33:b3:1a:f8:de:e4:5c:10:a7:cc:a9:40:05:14:1e:
d0:84:43:b4:8f:de:85:95:0a:1f:e7:b4:37:50:71:28:75:ce:
69:90:40:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:32 2025 by rpki-client