Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
File: 8PPwSfPyhFHj4b9ouXT_28jEFMc.mft (raw, json)
Hash identifier: X4tXbRTse4nAGronSkr8gg2ZS8/yVYKkzYhEP0BmcqY=
Subject key identifier: 7F:A9:1C:1E:8F:14:81:1E:8D:BB:81:14:3D:35:35:08:51:F7:B2:AE
Authority key identifier: F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
Certificate issuer: /CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Certificate serial: 0197B7B341B6438C31D71C79B87F53CF45CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
Manifest number: 1137
Signing time: Sat 28 Jun 2025 18:01:07 +0000
Manifest this update: Sat 28 Jun 2025 18:01:07 +0000
Manifest next update: Sun 29 Jun 2025 18:01:07 +0000
Files and hashes: 1: 8PPwSfPyhFHj4b9ouXT_28jEFMc.crl (hash: DUuAU8Du46962KpR9u89xwLb5/XjOSux95uN7ufvxcA=)
2: q-Co2Fge0yCMSGAUZ61yCAp-agg.roa (hash: Kkd9tz/x2Ysb/9fgNXffDi1aqzj4oQgrCbFcbQdhMNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 18:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:41:b6:43:8c:31:d7:1c:79:b8:7f:53:cf:45:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f3f049f3f28451e3e1bf68b974ffdbc8c414c7
Validity
Not Before: Jun 28 18:01:07 2025 GMT
Not After : Jun 29 18:01:07 2025 GMT
Subject: CN=7fa91c1e8f14811e8dbb81143d35350851f7b2ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:96:e7:d9:62:22:b5:b6:44:3d:23:b2:49:21:
c7:d5:30:c7:c3:37:12:5e:90:3b:97:9a:91:15:2a:
d8:59:4f:b9:08:3a:2c:2c:d4:0f:a4:5e:c5:b0:e6:
3e:6e:5d:39:3d:30:97:5c:69:20:30:31:34:96:dc:
48:0b:90:27:ec:c6:3b:45:50:fb:a5:9d:e5:1d:3a:
0a:e5:ef:d3:1a:56:a4:67:a4:9f:b2:6d:87:b9:aa:
20:b6:ad:89:39:d4:ad:0a:b9:fc:5f:9d:b5:b0:63:
25:f5:3e:5b:31:1a:f4:6a:8b:a8:ff:cb:e0:86:8e:
a1:65:47:d3:ff:3c:95:01:9e:af:d5:44:f5:5e:6a:
4e:31:d8:ef:e9:9e:8a:73:41:24:ec:64:2e:f0:87:
42:d7:1b:5e:a8:77:6c:82:52:e5:d2:a0:86:ee:0b:
00:ec:37:7c:e6:d6:2d:b2:c7:a3:48:4d:30:dd:a4:
25:54:85:e9:e3:7a:41:4f:24:b4:a8:0d:29:9e:61:
d1:fc:44:5c:8b:e0:83:8c:26:ef:d5:08:5c:18:c5:
8f:f7:93:c6:56:e1:02:ce:25:ce:53:e4:c3:b4:9d:
3a:85:f4:5a:e7:d2:81:b8:8f:38:25:16:9a:72:a7:
08:a1:1a:67:04:ec:97:90:e7:a6:59:65:23:09:48:
e0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A9:1C:1E:8F:14:81:1E:8D:BB:81:14:3D:35:35:08:51:F7:B2:AE
X509v3 Authority Key Identifier:
keyid:F0:F3:F0:49:F3:F2:84:51:E3:E1:BF:68:B9:74:FF:DB:C8:C4:14:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PPwSfPyhFHj4b9ouXT_28jEFMc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/908e91-27a6-414a-82e8-5e523ba8c9d7/1/8PPwSfPyhFHj4b9ouXT_28jEFMc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:86:f1:d1:b7:46:96:3d:79:3f:ac:e4:59:04:c2:ef:6d:ea:
02:34:d9:c7:86:31:02:91:9c:0c:e8:4d:61:98:3a:ae:75:d5:
1c:df:c8:c6:51:e1:fb:7a:37:db:f6:be:da:b0:e6:09:c8:96:
8d:6d:ca:1b:de:49:99:18:72:33:80:61:22:22:6d:61:95:9e:
8d:42:d5:2f:39:03:47:d5:22:d7:81:5d:e1:67:b6:0d:5d:21:
fd:5c:bf:85:12:0a:d1:07:fc:71:a3:d5:fc:ad:21:94:32:a9:
bb:82:47:9c:9d:f3:02:7c:5a:fa:82:f0:2c:37:37:83:87:bc:
80:8b:02:6c:ee:22:c2:a4:d0:2c:b5:9f:6f:1c:cd:6e:42:36:
7f:47:b4:fd:1c:c5:20:fe:c6:95:20:39:5c:ef:63:05:2d:b5:
e0:56:6e:a1:01:39:ac:3c:da:b8:4d:c1:eb:35:6e:39:f8:fa:
c6:44:52:03:d1:e3:25:64:78:cf:56:5c:44:f4:d0:0b:6c:0d:
54:2b:a3:e4:14:84:55:ab:e1:8b:85:e8:a0:5a:4b:d6:57:cb:
60:fb:cd:ea:54:1b:3e:81:17:fc:b6:73:8c:c8:f5:83:cd:4c:
f6:ed:9d:90:af:96:f6:2c:57:d4:8f:0b:f1:fb:a1:46:f3:82:
8b:61:41:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:36:43 2025 by rpki-client