Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
File: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft (raw, json)
Hash identifier: 0H3MhijsfV2XFZuNESuWyHcSBIvqwLoGd9bZ2tOUIKE=
Subject key identifier: 3C:E7:02:9F:9B:65:7B:9D:65:67:0E:C7:38:02:20:61:84:D8:C6:BF
Authority key identifier: AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
Certificate issuer: /CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Certificate serial: 0197B7EA2938B37E609AA9E7C3D3D158D44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
Manifest number: 0A14
Signing time: Sat 28 Jun 2025 19:01:05 +0000
Manifest this update: Sat 28 Jun 2025 19:01:05 +0000
Manifest next update: Sun 29 Jun 2025 19:01:05 +0000
Files and hashes: 1: r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl (hash: iKcynqayPQ9mKe1tfjlZ3z+3vieNRKOuwr+n88FXf6s=)
2: y434m32YaOSFWfdjMrvD69-28ws.roa (hash: 2wH2CADXRiwQAKzkBQR9rJEZcF/YGQDp6VtufnWzYz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:29:38:b3:7e:60:9a:a9:e7:c3:d3:d1:58:d4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afcc1d30edeeab54b5812a990a943e3e8fe8391d
Validity
Not Before: Jun 28 19:01:05 2025 GMT
Not After : Jun 29 19:01:05 2025 GMT
Subject: CN=3ce7029f9b657b9d65670ec73802206184d8c6bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:01:ff:92:c3:71:41:6f:80:ba:13:80:41:36:
4d:f9:61:74:64:e6:de:63:f8:24:f9:85:ef:66:26:
08:c9:e4:5e:d8:ef:df:7c:2d:27:9a:90:d0:5f:d7:
c1:68:b3:bb:21:20:c2:21:09:34:46:80:60:fc:04:
7a:41:e7:08:13:35:df:69:94:ad:6e:48:dd:af:dd:
03:b7:0e:6f:31:19:ef:a1:b3:25:6c:68:36:9c:7d:
ec:ac:01:66:98:b3:30:ba:ae:23:5e:fe:2f:1c:f1:
38:2d:be:13:30:41:b4:57:e5:f4:b5:1d:fd:2f:06:
2e:b7:d0:96:c9:c4:88:8e:ab:c9:ee:c1:e5:bc:6b:
62:3b:8f:5e:ae:84:68:39:8d:24:e2:29:4f:52:e7:
f1:9d:59:a2:d9:c5:11:63:1e:93:32:5a:c2:7f:8e:
be:d6:c7:86:fa:59:07:75:b4:47:75:aa:07:3a:4b:
da:09:b8:f2:4f:d6:2e:d6:fa:2f:75:e6:62:fb:7b:
3f:c8:fb:33:51:bf:21:db:66:af:82:89:1f:9d:f2:
f2:26:54:29:1a:34:4b:a4:74:80:18:97:5c:76:9d:
de:db:a9:b1:dc:12:87:a0:46:1e:bf:09:35:40:29:
9c:68:28:15:89:20:d8:ed:3c:8e:de:83:7e:a3:21:
54:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:E7:02:9F:9B:65:7B:9D:65:67:0E:C7:38:02:20:61:84:D8:C6:BF
X509v3 Authority Key Identifier:
keyid:AF:CC:1D:30:ED:EE:AB:54:B5:81:2A:99:0A:94:3E:3E:8F:E8:39:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/0217c2-7354-4061-9ef7-a220fe6a2a25/1/r8wdMO3uq1S1gSqZCpQ-Po_oOR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:cc:6e:95:f9:02:99:c8:30:b4:f6:c9:aa:1a:29:69:f5:dd:
c5:7f:a2:ba:25:71:ca:7c:d7:e0:53:47:9f:41:4d:2f:a4:06:
6b:aa:72:86:ac:f9:e2:7d:73:1d:c5:a8:f2:a3:ed:fd:bb:a9:
57:98:27:aa:24:d1:80:bb:b9:28:98:56:77:1a:27:41:c2:c6:
53:2f:b3:13:a7:e1:a7:75:85:d8:1d:af:31:26:26:5a:bb:15:
26:29:cd:3b:a2:8e:74:9c:bd:64:1a:81:64:54:4d:57:77:8c:
fe:5d:fc:f8:4d:4e:30:89:50:88:31:4d:3a:14:22:29:fd:c3:
53:35:bb:a6:b1:58:6c:fa:34:e6:7d:b4:99:1a:b8:8e:ee:0c:
e4:b7:4a:12:b7:49:07:c1:f5:fc:cf:96:ef:a7:9f:3b:96:fb:
40:16:45:cc:69:90:53:95:1c:bc:25:39:b1:82:c6:64:21:a7:
34:d2:61:56:84:7e:74:ab:14:99:90:4d:3d:3f:9c:c0:29:b3:
c4:ef:2e:ef:a6:21:c9:eb:2d:5f:33:e5:14:f1:d2:9c:4d:24:
be:d5:d7:23:4d:1e:ae:09:5b:29:b1:f9:82:5b:8e:3b:cc:76:
01:62:a6:68:f9:5d:5a:95:49:67:eb:92:cc:79:b1:f9:66:a6:
11:1c:a1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 04:17:03 2025 by rpki-client