Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
File: 8R8omgChsRW386TRuAEb-Q0aL3I.mft (raw, json)
Hash identifier: IZuXMdpzYzLl2RWUklZJhmmBv50FyKuY96hd/iIzcXg=
Subject key identifier: E5:22:E2:4D:1E:F0:22:21:2F:39:ED:75:FE:88:4C:9C:1F:AA:27:5A
Authority key identifier: F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
Certificate issuer: /CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Certificate serial: 0197B88F5E302DA22ECD0434F858E1D4ED17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
Manifest number: 0985
Signing time: Sat 28 Jun 2025 22:01:32 +0000
Manifest this update: Sat 28 Jun 2025 22:01:32 +0000
Manifest next update: Sun 29 Jun 2025 22:01:32 +0000
Files and hashes: 1: 8R8omgChsRW386TRuAEb-Q0aL3I.crl (hash: Hq0WKKjH5IfcIX3o12i9BUGmoVZpIxNLXdGfzQ4ye2s=)
2: tRxgXr9YQwTbEh2NqyL9M68npkQ.roa (hash: QcuVE9jeWpJsMM52+9+6n7mFIjZuC9lNEDcWkB7O3NI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:5e:30:2d:a2:2e:cd:04:34:f8:58:e1:d4:ed:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f11f289a00a1b115b7f3a4d1b8011bf90d1a2f72
Validity
Not Before: Jun 28 22:01:32 2025 GMT
Not After : Jun 29 22:01:32 2025 GMT
Subject: CN=e522e24d1ef022212f39ed75fe884c9c1faa275a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:af:57:4d:e1:49:80:88:a0:eb:42:f5:4f:c6:
5f:4d:ad:bb:72:e5:b3:e8:70:b3:21:1e:34:cd:3c:
1f:f0:cd:0a:8a:43:fd:88:9f:c1:b2:7b:b5:2d:87:
ee:a3:16:97:c0:61:93:d1:ab:4a:16:67:d1:53:82:
09:b6:55:59:96:1e:ba:de:74:26:eb:79:3d:b0:2a:
f5:fb:31:12:1f:ab:0b:65:30:9f:1b:e3:13:00:48:
78:0e:fe:02:b2:12:b4:3a:7b:11:a0:12:f4:f3:92:
1d:be:71:ec:a5:48:70:5a:95:2f:94:cf:30:69:8a:
29:4e:69:04:92:ea:73:50:20:ad:9e:58:ae:ec:82:
53:2f:d4:b6:ef:52:15:d5:f8:58:48:7d:80:45:60:
9b:21:d1:2e:2b:70:90:f0:4c:13:8b:25:5b:3f:c2:
62:19:d0:bf:da:a9:6e:4b:f9:02:e3:46:6f:8b:58:
bc:a6:8a:13:ae:29:8f:df:d0:6b:e0:5f:9b:9f:c6:
1d:2f:66:a7:2c:78:0d:70:8c:58:77:af:5b:57:c7:
4a:58:5f:99:03:2e:b5:06:af:e3:4f:ae:89:2e:df:
55:2a:03:68:50:0e:91:ec:03:79:74:7d:12:11:3e:
39:b1:04:38:ba:a7:79:2d:fa:fe:86:e4:ca:c9:b6:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:22:E2:4D:1E:F0:22:21:2F:39:ED:75:FE:88:4C:9C:1F:AA:27:5A
X509v3 Authority Key Identifier:
keyid:F1:1F:28:9A:00:A1:B1:15:B7:F3:A4:D1:B8:01:1B:F9:0D:1A:2F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8R8omgChsRW386TRuAEb-Q0aL3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/5151e1-36b7-4205-9af7-74e84967168b/1/8R8omgChsRW386TRuAEb-Q0aL3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:54:8b:ae:b2:59:a9:3f:4d:82:61:e2:91:c0:81:a9:2f:43:
e6:63:07:3a:d8:3a:7e:5f:6f:13:fa:67:3d:9e:1b:18:bb:2d:
70:f2:5f:73:7b:cb:ea:b1:fc:dc:cc:51:e9:c3:80:d5:62:d1:
3b:d0:fa:84:26:1d:ce:c2:31:e3:15:37:8d:d3:21:6f:2a:5c:
df:20:47:c9:0b:e6:0c:ca:3c:b0:72:0a:7d:d4:ff:92:4c:08:
00:10:74:af:39:35:f8:c3:aa:a4:03:2d:36:12:2d:70:84:ec:
5f:a6:f5:36:86:f9:1f:cd:0b:77:0a:66:d6:87:01:46:df:33:
3e:2e:65:1b:48:e5:3d:25:df:be:61:ff:e2:61:6c:60:97:79:
9f:33:52:bd:de:d4:ab:b0:4c:cc:3b:39:df:02:3a:e1:ca:b4:
1e:97:8c:fa:a1:9a:01:4f:1d:bf:e4:02:44:6c:d8:5f:7d:25:
34:d0:3a:07:66:b9:d5:da:20:d2:f2:96:ef:3e:0a:c6:e5:fe:
dd:de:20:24:fd:d9:54:f9:1e:56:25:a2:12:f7:a4:ea:bf:7a:
fe:7c:14:ae:d3:aa:d1:bb:d4:81:c7:46:61:07:fc:8a:26:d1:
8d:9f:20:7d:aa:cc:24:6c:f2:03:27:e1:0c:35:07:3e:99:52:
3b:72:03:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:48 2025 by rpki-client