Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
File: j8HWvjunicXa61l6E13l7Myrj5U.mft (raw, json)
Hash identifier: zNNz7qN2As53tc5e2BE78zd9Su6KRU0PRE+7hxvEn0c=
Subject key identifier: BF:66:F1:5D:CB:96:D2:E4:BE:B1:43:B2:44:F9:F4:41:9C:90:86:E8
Authority key identifier: 8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
Certificate issuer: /CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Certificate serial: 0197B7459C7475CAA61E320C3334789F6474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
Manifest number: 14A5
Signing time: Sat 28 Jun 2025 16:01:21 +0000
Manifest this update: Sat 28 Jun 2025 16:01:21 +0000
Manifest next update: Sun 29 Jun 2025 16:01:21 +0000
Files and hashes: 1: j8HWvjunicXa61l6E13l7Myrj5U.crl (hash: SjExsNiSCLDy0znyNCiRCSnQHe9g9NtavY5mm0KB8JY=)
2: ns9Iu925uNPqm9SyfjZghoXo_D0.roa (hash: 5KxIGOmUfDj5TmcmXox7HeyHg9DfY+4gQjDvtCkMxCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:9c:74:75:ca:a6:1e:32:0c:33:34:78:9f:64:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc1d6be3ba789c5daeb597a135de5ecccab8f95
Validity
Not Before: Jun 28 16:01:21 2025 GMT
Not After : Jun 29 16:01:21 2025 GMT
Subject: CN=bf66f15dcb96d2e4beb143b244f9f4419c9086e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:93:9c:22:1f:63:9a:06:28:af:3a:11:9a:67:
84:90:ce:ac:02:88:e1:a9:16:e1:2c:49:6b:89:74:
f9:23:f3:7d:8c:d7:65:24:40:ff:d6:ca:ea:00:1b:
ba:da:62:27:a1:cb:97:ca:4a:97:06:20:58:92:59:
18:39:96:a2:6f:d9:3b:e2:bc:71:26:43:f0:d7:8a:
02:6d:d9:7a:47:b3:59:56:ff:fa:69:9d:c2:c8:fb:
9c:c1:0a:81:23:5d:fe:aa:99:69:fe:3d:81:18:e6:
9f:f7:b2:69:8f:ee:0f:da:3e:36:02:a1:7a:55:73:
83:b2:7b:87:cf:a1:85:7d:f1:c1:05:8e:b8:06:76:
72:53:16:39:70:cc:dc:9a:e2:8b:cb:f7:f5:8e:ee:
16:b3:f0:c9:40:1a:7d:91:8b:83:e8:c3:b9:0f:8e:
f8:fa:18:24:66:04:50:64:5e:11:66:5f:e2:2c:9e:
48:73:67:76:fe:06:6d:fb:43:81:d1:ae:0f:bf:1d:
98:bf:0c:94:c3:a8:f7:b2:b4:3f:8c:fb:e7:ec:14:
50:c3:17:68:43:60:7b:99:87:84:4e:dc:e4:2e:b8:
18:3d:8d:9b:3f:17:2d:ab:10:0a:8b:33:f4:c3:e3:
cf:8e:be:ac:71:55:45:a5:87:0d:85:9a:20:a1:18:
c7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:66:F1:5D:CB:96:D2:E4:BE:B1:43:B2:44:F9:F4:41:9C:90:86:E8
X509v3 Authority Key Identifier:
keyid:8F:C1:D6:BE:3B:A7:89:C5:DA:EB:59:7A:13:5D:E5:EC:CC:AB:8F:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8HWvjunicXa61l6E13l7Myrj5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/44ee8d-2ae8-4844-a935-d24c2ce23ab7/1/j8HWvjunicXa61l6E13l7Myrj5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:f9:6e:14:06:8c:e7:98:9e:70:12:76:28:42:eb:93:b5:e4:
66:ed:77:38:5a:d2:cb:ba:c0:bd:b8:7a:d3:c9:8b:96:2a:31:
1f:f8:63:d3:b4:03:d8:9c:71:95:0a:03:3b:95:cf:a8:c5:69:
5d:4b:a4:c2:f4:5c:16:be:90:bb:75:03:72:62:03:46:be:68:
95:86:a0:ab:a0:59:48:12:05:ce:85:a5:a0:06:c3:38:81:43:
5c:2b:73:e3:a4:bf:72:56:e4:64:85:40:2f:2d:d6:8f:af:76:
ce:31:d3:1c:0a:6e:ee:ed:2a:be:8a:19:99:8c:82:8d:37:57:
9b:32:f5:6c:00:0f:05:3f:d4:0e:9c:36:e1:e9:33:f3:dc:af:
26:2e:ab:75:6a:15:4f:90:7c:d5:83:50:39:68:1a:83:4b:08:
f5:e7:1e:fa:2f:89:73:f9:e7:24:5a:ca:e8:a0:f9:df:d5:f6:
20:34:dc:80:e9:63:c0:b9:d1:dc:3c:21:c4:a5:e0:02:92:0f:
f3:ce:73:2d:ab:d3:2b:53:0f:b9:ea:54:dd:6d:48:b0:fb:eb:
3b:c9:a9:09:cf:04:0d:1e:85:1c:af:08:79:11:b6:2c:97:54:
e0:76:ff:03:67:8e:dc:5a:10:9e:9e:7b:d2:ab:c4:ba:f0:06:
14:d5:9e:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 21:48:39 2025 by rpki-client