Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
File: 8maByqHTfliZuiffvDaWDga10_I.mft (raw, json)
Hash identifier: KrJ20JseHcT4MN6OOjH4TqRoQnmmqq+uC1qK0G7S8Wc=
Subject key identifier: B0:6E:2E:08:D5:15:E9:42:52:DC:6F:23:F3:56:1B:4E:1E:B3:22:F0
Authority key identifier: F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
Certificate issuer: /CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Certificate serial: 0197B89094B3C9A1609E1F8C31D594C4734C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 22:02:52 +0000
Manifest this update: Sat 28 Jun 2025 22:02:52 +0000
Manifest next update: Sun 29 Jun 2025 22:02:52 +0000
Files and hashes: 1: 8maByqHTfliZuiffvDaWDga10_I.crl (hash: +716JV4E1cfrJ+7BoFizjoHDfAn6U2pZGk+E0SQGLBQ=)
2: a-zhZjuXDc_FsfQbRuaEtluPpHA.roa (hash: 5+3esVT/zzC55YQOAsi2tnDDnrmv1Y7c5U2ef5q3Qdw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:94:b3:c9:a1:60:9e:1f:8c:31:d5:94:c4:73:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f26681caa1d37e5899ba27dfbc36960e06b5d3f2
Validity
Not Before: Jun 28 22:02:52 2025 GMT
Not After : Jun 29 22:02:52 2025 GMT
Subject: CN=b06e2e08d515e94252dc6f23f3561b4e1eb322f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:2d:57:82:53:09:a5:50:ac:9a:b6:af:e5:14:
a8:3b:f0:a1:8b:df:73:84:60:c6:0e:12:c5:18:00:
fb:10:c0:7a:02:2b:c2:7d:26:b3:d6:50:76:bb:79:
d1:39:d8:a4:49:98:26:a8:a8:6c:21:26:58:41:3a:
c2:fa:f4:cd:92:3d:de:72:4c:7c:3a:14:08:ab:9b:
fa:33:b7:31:ae:59:2e:d9:5b:56:ea:b6:41:d9:08:
c5:60:e8:94:05:3e:2b:6a:02:f8:3f:56:2d:a1:b3:
3f:41:b4:d8:1f:77:bd:c9:a8:06:ed:c8:42:3c:fe:
2b:ce:94:79:1f:6f:c4:14:53:3f:3b:74:91:dd:9b:
de:22:20:11:6b:a9:b4:bf:2c:ca:ed:b7:69:e5:ff:
12:51:80:24:dc:09:ca:5e:ad:4c:bf:5d:83:68:23:
1a:43:73:4c:b3:1f:82:1e:cf:74:3c:1d:b2:e1:e9:
02:0a:55:30:58:06:4a:b9:29:29:18:94:7e:b6:94:
bb:dc:40:aa:58:35:74:eb:da:dc:29:8a:e9:0d:dc:
6f:57:4d:7e:13:b7:b5:5e:df:cc:82:00:e7:1b:5f:
f2:8f:10:d9:3b:e2:39:a5:81:32:cb:69:98:0f:12:
f7:51:29:71:52:55:6d:e4:f6:b0:77:f8:81:ab:29:
49:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:6E:2E:08:D5:15:E9:42:52:DC:6F:23:F3:56:1B:4E:1E:B3:22:F0
X509v3 Authority Key Identifier:
keyid:F2:66:81:CA:A1:D3:7E:58:99:BA:27:DF:BC:36:96:0E:06:B5:D3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8maByqHTfliZuiffvDaWDga10_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/caeeb6-8017-4c22-a81c-64075c2ae463/1/8maByqHTfliZuiffvDaWDga10_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:60:20:60:f2:dc:3d:0b:98:a6:3f:59:b5:80:26:3f:2e:fc:
f5:84:8a:3b:52:0b:ca:74:e4:87:45:15:88:f9:7d:9e:7d:a2:
c7:ee:c8:6d:02:28:50:06:61:2b:32:26:fe:f1:32:5d:e6:a3:
98:26:35:c2:08:b0:0e:a7:ac:cd:e6:ab:b6:6c:26:b5:b4:da:
7e:be:47:43:d8:e3:61:4d:bc:d6:ba:4a:69:1e:30:82:19:41:
82:3c:6f:3e:df:7c:ba:03:9a:5e:ea:fc:f1:0f:6e:02:b8:da:
ab:a8:67:0b:5b:f8:d1:d4:31:ba:79:f4:9d:37:04:91:0a:6c:
4b:82:07:15:e4:c2:d2:bc:7c:90:1b:c2:03:13:63:24:9f:57:
44:be:50:13:86:f5:0a:62:1c:8e:30:3c:ea:0b:3b:2c:49:0e:
74:dd:e5:60:c9:4c:bb:68:c8:86:b3:9f:a1:1c:17:b3:fb:c2:
70:d0:94:18:dd:38:32:7e:df:e3:5f:3f:5b:53:5a:2d:32:a0:
d3:3c:db:19:1e:0f:bb:c8:66:0a:85:ed:e6:f6:01:e2:93:25:
a6:9c:4e:db:16:fb:3c:45:f5:1e:17:04:56:50:44:ab:9f:ce:
2a:09:a4:22:81:5a:ab:d2:33:89:fa:c6:40:d0:0a:82:30:1a:
b5:cf:f0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:18 2025 by rpki-client