Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
File: 8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft (raw, json)
Hash identifier: mBjbw+VJd2GLfx7R2wLnnjOFPCGXqOV3KdV2E5YPHFI=
Subject key identifier: 29:26:F3:98:A3:8B:6C:CD:48:31:B6:13:48:24:42:89:E1:F9:10:A9
Authority key identifier: F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
Certificate issuer: /CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Certificate serial: 0197B5C4F3E9C105D0BA0C4E40FAC6654A3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
Manifest number: 1428
Signing time: Sat 28 Jun 2025 09:01:12 +0000
Manifest this update: Sat 28 Jun 2025 09:01:12 +0000
Manifest next update: Sun 29 Jun 2025 09:01:12 +0000
Files and hashes: 1: 8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl (hash: lxAYiAHmLv0OsdL3MRIZvySNSPvY6SPeEQnXjq7LbsQ=)
2: IhBK0ciO53Ec1EbuRK46uaRKreQ.roa (hash: 4ZKr5RNFkrNbbNrdBlZagiUZ6klyQ2uoBXn/MMtAeKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:f3:e9:c1:05:d0:ba:0c:4e:40:fa:c6:65:4a:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Validity
Not Before: Jun 28 09:01:12 2025 GMT
Not After : Jun 29 09:01:12 2025 GMT
Subject: CN=2926f398a38b6ccd4831b61348244289e1f910a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:00:b1:4a:64:99:8e:4b:36:9e:b8:59:f5:13:
2b:3d:1f:31:50:bb:dc:cb:9c:2b:8c:dc:5d:83:e7:
81:94:76:78:5e:d4:3a:80:46:cc:34:53:21:51:b1:
83:5f:6f:ee:bb:80:20:31:d5:9f:66:01:2d:8c:b3:
db:ab:0c:41:e0:d2:89:74:b6:84:62:5e:96:e9:be:
ab:3c:9e:93:10:88:61:27:3f:5d:3b:07:10:e5:40:
3f:12:5d:bf:e5:ce:6a:44:a1:2b:e0:65:68:31:74:
3d:7e:f9:c8:e5:37:a6:0f:66:73:79:ee:bc:47:03:
10:e4:fb:7e:c6:98:15:fb:a7:df:ac:56:72:49:61:
69:86:eb:5e:90:b6:c2:78:12:13:41:84:c6:1c:97:
b3:20:73:34:4c:17:87:b8:23:ac:45:72:37:99:65:
b7:61:dd:da:f4:6f:fb:28:7f:49:1d:cd:99:6a:d2:
54:8d:98:c0:fa:eb:b3:d8:9e:d5:f0:89:5b:93:62:
13:5d:84:ff:84:dc:5e:50:4b:29:88:f5:57:2c:72:
e4:35:4d:24:96:01:20:21:5b:05:a2:04:c3:d5:e1:
c0:bc:00:86:74:98:10:e0:2b:4a:a1:68:f3:6f:f5:
f8:5a:fe:14:e3:7a:17:ad:e0:ca:13:32:03:11:ca:
37:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:26:F3:98:A3:8B:6C:CD:48:31:B6:13:48:24:42:89:E1:F9:10:A9
X509v3 Authority Key Identifier:
keyid:F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:46:9b:42:e1:e3:d3:e1:5e:f1:cb:c5:c1:a2:be:db:57:eb:
a6:49:a4:cf:47:14:4b:25:a7:f8:09:ac:c4:8e:2d:a8:d4:2b:
c2:72:2c:71:8f:68:f2:0c:66:02:93:21:3f:6a:fe:10:fd:8c:
72:ee:28:3a:d5:11:95:66:12:9b:45:81:97:a2:b1:08:6e:a5:
d1:41:81:ee:7b:ee:27:cb:a4:8b:76:6b:17:fd:08:b7:42:4e:
39:23:51:a3:a4:06:61:5d:95:1d:f3:7b:f3:e4:40:49:5e:b3:
a2:57:97:ed:75:2a:7c:80:6f:b6:73:1b:d7:51:27:d6:6c:d8:
1e:a0:da:a9:2f:18:b2:1f:36:e5:47:66:c5:13:e0:ac:84:e3:
ba:a8:48:79:fb:7c:92:f6:75:65:e2:a4:96:a5:09:06:2f:fa:
d9:4e:41:03:a5:08:90:76:6e:83:05:28:fd:c1:51:9b:7a:b6:
7d:65:c9:08:50:23:59:f6:fd:35:46:15:b9:07:f8:18:81:77:
5c:bf:eb:73:af:b2:3b:9c:02:9d:77:02:ff:c1:7a:ce:52:b9:
34:0c:8f:33:96:7b:1e:b6:cf:0c:35:7c:f4:57:be:6c:a5:b4:
c5:69:3e:df:c7:aa:96:bb:5c:f9:ac:2d:f0:ed:15:fb:51:fb:
7d:f5:13:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:50:35 2025 by rpki-client