Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
File: 8x6drOnnIGMJy2yeW4YX6YWd3IU.mft (raw, json)
Hash identifier: PN/9tTSiPV9j2au+il0n4qE98LqcGkHFYUHTUjyjre4=
Subject key identifier: EA:E2:00:9A:66:22:E9:59:CC:3B:8A:F1:94:FC:C8:BA:FE:BB:B8:6F
Authority key identifier: F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
Certificate issuer: /CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Certificate serial: 0197B70F211730E0B512ADF6283A94C5AB4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
Manifest number: 75
Signing time: Sat 28 Jun 2025 15:01:51 +0000
Manifest this update: Sat 28 Jun 2025 15:01:51 +0000
Manifest next update: Sun 29 Jun 2025 15:01:51 +0000
Files and hashes: 1: 8x6drOnnIGMJy2yeW4YX6YWd3IU.crl (hash: M8LAO0wIHYFRR1Jy48ToSNAOI48tYWtJqqgzpmdlToQ=)
2: Y_V2AX-hKmiZJha1bvfVKTCTgXI.roa (hash: D45qS/LlK8mwdIW6eNsRENlHm2CkkbRz9HSr40lXt7g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:21:17:30:e0:b5:12:ad:f6:28:3a:94:c5:ab:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31e9dace9e7206309cb6c9e5b8617e9859ddc85
Validity
Not Before: Jun 28 15:01:51 2025 GMT
Not After : Jun 29 15:01:51 2025 GMT
Subject: CN=eae2009a6622e959cc3b8af194fcc8bafebbb86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f1:38:d9:fe:ac:43:c1:80:06:21:86:e2:da:
8d:db:0d:52:97:51:b6:c2:2e:a0:26:72:4d:ff:85:
36:97:3a:02:a3:27:8b:87:a4:a1:e4:98:03:bb:c3:
b4:0d:c9:a6:de:6d:56:53:60:c8:4d:33:bc:82:2f:
3b:d0:f9:eb:59:ec:67:58:04:da:7a:40:5c:54:36:
a1:a1:3d:7e:47:34:f6:9d:69:35:f8:5d:28:3f:c3:
1c:f1:ad:14:56:8f:73:50:5f:38:2b:76:2b:83:3a:
55:fc:46:60:2e:55:81:8b:2c:6c:5c:aa:ca:a4:3e:
c0:f8:e8:e7:87:4c:dd:2a:b5:68:87:d7:be:f2:63:
f7:f0:34:95:ea:6f:84:f2:6a:3e:b5:83:71:45:d6:
ff:9c:0b:d8:fc:21:4e:7b:8c:5b:0b:9e:10:c1:a2:
c6:af:47:61:6a:ee:ab:f7:c8:04:c3:d3:72:23:e3:
2a:84:ed:91:d9:78:ca:78:fc:4c:75:3c:1c:27:64:
c4:8b:03:e7:00:5a:89:65:43:d2:15:3b:43:1f:30:
78:88:e0:46:a1:0f:66:78:74:1b:3a:7d:71:e0:e2:
ce:79:73:28:59:ac:a7:71:cf:f3:fc:34:4a:ca:6b:
d2:11:87:88:b9:4b:f9:3a:4b:62:58:39:eb:f2:93:
70:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:E2:00:9A:66:22:E9:59:CC:3B:8A:F1:94:FC:C8:BA:FE:BB:B8:6F
X509v3 Authority Key Identifier:
keyid:F3:1E:9D:AC:E9:E7:20:63:09:CB:6C:9E:5B:86:17:E9:85:9D:DC:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x6drOnnIGMJy2yeW4YX6YWd3IU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2de25a-c94e-4a49-a61f-43a194e9d98a/1/8x6drOnnIGMJy2yeW4YX6YWd3IU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:34:43:e4:e7:48:2c:08:91:02:85:81:5d:84:d2:0b:bd:9d:
56:0a:09:68:b8:01:47:b0:99:9c:f3:b6:c7:26:26:5e:bf:2b:
9d:c3:1a:04:86:c5:29:8f:3d:88:99:1e:af:72:e0:34:e7:70:
3e:53:2d:69:e6:ac:70:71:f8:b5:21:50:99:70:d9:87:c6:0a:
cd:7f:ae:3f:4e:4d:d3:4b:70:9d:62:42:3d:56:9e:03:b3:02:
0c:83:eb:5c:7b:09:8e:72:65:ca:e1:b4:83:90:3f:06:36:03:
99:7f:8d:64:23:df:2c:69:20:d7:b4:50:5f:39:67:45:0b:be:
cf:ff:ce:39:8e:94:3c:a4:93:f9:02:5d:53:c2:79:b8:98:47:
0a:e4:94:4c:da:fa:c4:62:48:c5:24:e4:39:43:1d:a6:99:8e:
33:ed:e5:e7:d6:b9:e0:d6:cf:58:29:49:82:c4:ff:66:1f:44:
eb:11:47:b3:bb:58:d9:93:8b:fd:2d:22:d7:50:0d:a2:f7:c2:
08:16:62:11:57:91:b6:6d:cb:b8:0d:42:5d:1f:33:6b:59:53:
1c:99:53:43:22:f9:07:fa:c0:53:30:66:80:9c:70:72:07:ec:
79:ec:b0:f2:a6:dc:62:fe:a4:12:4c:51:aa:de:a9:1f:7b:9a:
d3:b6:cc:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:53:56 2025 by rpki-client