Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
File: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft (raw, json)
Hash identifier: GivuhtxftgIn0KBjTqXoYEtd5Ev/J9glBkW0T6Djp10=
Subject key identifier: 9B:DC:D5:2C:9F:1C:74:DC:51:16:6E:81:B3:B1:25:D0:99:D9:2C:AC
Authority key identifier: F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
Certificate issuer: /CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Certificate serial: 0197B7B337301FD1A1B56C2BBC73EE293E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
Manifest number: 0386
Signing time: Sat 28 Jun 2025 18:01:04 +0000
Manifest this update: Sat 28 Jun 2025 18:01:04 +0000
Manifest next update: Sun 29 Jun 2025 18:01:04 +0000
Files and hashes: 1: 8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl (hash: ISH4otWspWiRl+53c0xZFhEwepca1bsH/aXwxrpqt0w=)
2: _MwQhKVnR_aG2vdLhL9GNdGXvOU.roa (hash: L7braIyd07lwFhqp60fjEjjTIhLctM+CjmNa1wVvJFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:37:30:1f:d1:a1:b5:6c:2b:bc:73:ee:29:3e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f27aebf02abc355212afbf1621e3e0d4a76057
Validity
Not Before: Jun 28 18:01:04 2025 GMT
Not After : Jun 29 18:01:04 2025 GMT
Subject: CN=9bdcd52c9f1c74dc51166e81b3b125d099d92cac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:31:15:7a:2e:ca:31:8d:51:77:76:4e:f4:b3:
02:f6:9a:c5:4b:c8:a9:0c:59:23:32:d2:46:bd:bf:
5d:79:93:0c:65:1c:1b:63:b0:f5:69:9b:90:5b:59:
89:81:c8:7e:7b:5f:29:bb:16:b7:88:ff:cd:26:dd:
69:86:06:0c:95:fb:c0:35:cd:8c:9f:1f:ec:a0:e0:
c0:9f:b7:e3:8d:b4:34:df:2a:e1:de:3f:a7:2e:4c:
63:41:43:6a:c4:11:30:b5:d2:f8:04:07:f9:24:38:
b5:23:ed:fe:13:02:54:a9:d2:60:37:68:92:cd:51:
cf:31:12:48:35:b6:4c:76:1c:9f:49:4e:c6:13:9e:
66:d1:f1:3a:75:50:d2:17:9a:e5:a1:99:f6:3a:6a:
91:7c:cd:68:0c:02:9a:76:46:b7:8e:d5:eb:1f:62:
7c:7b:f2:f6:dc:6c:74:28:95:6a:5c:6a:b4:53:98:
21:ad:d5:31:08:fb:c2:8e:c1:87:5f:3c:bb:18:80:
b3:aa:30:0e:25:54:93:61:88:7b:e0:8d:4b:4e:27:
64:64:31:da:bb:33:f3:d5:95:ec:96:40:b6:20:b1:
18:33:92:a1:03:65:1f:da:93:e0:b8:34:8b:9b:0e:
2e:13:1c:e9:2d:2c:7c:7a:1c:e7:50:d7:70:ec:bc:
65:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DC:D5:2C:9F:1C:74:DC:51:16:6E:81:B3:B1:25:D0:99:D9:2C:AC
X509v3 Authority Key Identifier:
keyid:F0:F2:7A:EB:F0:2A:BC:35:52:12:AF:BF:16:21:E3:E0:D4:A7:60:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PJ66_AqvDVSEq-_FiHj4NSnYFc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/7912c6-c9d4-43c2-9688-c45f8e251248/1/8PJ66_AqvDVSEq-_FiHj4NSnYFc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:23:7b:56:00:31:ae:61:7a:3f:63:17:28:99:a0:b6:07:4f:
02:ef:35:23:62:99:87:e4:66:b6:10:06:87:64:8f:20:21:4f:
a6:e6:db:e9:f9:e3:d7:db:70:10:4a:5d:eb:a8:dd:0e:16:33:
d3:dd:6f:94:27:e8:9f:4e:39:d7:c4:fe:ec:1c:60:18:12:0f:
5a:a6:9c:5d:5a:96:a9:02:27:aa:7c:15:88:a9:d0:8a:95:13:
3f:92:e5:4e:cd:67:b0:9c:8f:29:f7:37:87:4f:4e:13:f3:36:
ed:c6:db:a2:90:db:56:12:96:3d:66:3d:97:87:d4:ba:7d:50:
ce:59:88:7f:76:5d:5c:bc:8b:00:ae:e3:fe:49:cc:99:f4:e2:
5d:54:ad:6e:ec:a2:f0:48:92:a0:a4:5e:7f:98:46:e9:05:f3:
08:00:9a:f7:92:86:8a:7b:d5:12:76:ee:5c:dc:f0:29:fb:a5:
7a:b1:c8:4a:96:88:58:36:a3:db:93:df:11:86:aa:f0:d6:3f:
7e:6e:d7:bf:1b:16:a3:06:82:10:b2:be:c7:98:ff:ee:e2:df:
53:56:a7:71:5c:3a:01:c0:b1:f3:6e:66:6e:73:0d:89:b8:76:
ca:6e:83:86:13:54:7e:b7:0f:38:fa:30:cc:3b:50:b6:6d:cf:
0b:b9:22:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:47 2025 by rpki-client