Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
File: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft (raw, json)
Hash identifier: 7tAW5mzLpuRxekgibY8VhYpCHGQX65hMOjXBoaLPIzc=
Subject key identifier: E3:C7:03:4C:5A:8D:2E:01:D8:BF:BC:BB:6D:8F:0E:0D:FD:E7:56:DA
Authority key identifier: 73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
Certificate issuer: /CN=73c2f49445980199475512f5297608f45d08bb5a
Certificate serial: 0197B7EAE34AF236CCAD4BFEA6EDE9A24571
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:53 +0000
Manifest this update: Sat 28 Jun 2025 19:01:53 +0000
Manifest next update: Sun 29 Jun 2025 19:01:53 +0000
Files and hashes: 1: T8CaRngGi_3wzcIt9PzPZ1wckgY.roa (hash: 37vNH+xFSIYvkh93FypQjuj5VJFxVq0H4oy/OpBqTs8=)
2: c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl (hash: zfA8xDjGNh0NmcA3hWQxwwwKww+R94xkm9w2pBsKuVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:e3:4a:f2:36:cc:ad:4b:fe:a6:ed:e9:a2:45:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73c2f49445980199475512f5297608f45d08bb5a
Validity
Not Before: Jun 28 19:01:53 2025 GMT
Not After : Jun 29 19:01:53 2025 GMT
Subject: CN=e3c7034c5a8d2e01d8bfbcbb6d8f0e0dfde756da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:29:64:0c:93:0e:3c:af:f9:b7:31:64:2f:0e:
59:55:9e:fc:19:75:b0:3a:25:a6:d7:9a:42:22:e3:
3b:2e:db:05:98:d0:bd:84:fb:fb:cb:19:46:15:34:
7b:12:64:52:19:20:a5:ff:17:11:51:38:a7:81:7d:
08:dc:20:0b:42:aa:30:3c:3e:10:b8:43:28:a0:bd:
49:c8:ad:cd:d3:2d:b0:58:5d:d5:11:70:d7:d6:95:
7e:1a:33:9f:7b:36:c5:5d:89:14:27:3f:1c:0d:2d:
ee:f7:a8:37:b2:c4:65:6b:35:fa:b9:e9:64:99:3e:
2a:46:e3:8a:6d:9f:e4:e1:f6:ea:fb:45:ca:8d:8a:
56:ea:e2:35:f5:d6:2d:c5:d6:6f:44:cd:45:38:10:
87:27:52:29:df:30:d9:d4:aa:85:9e:f5:ca:59:43:
56:f1:40:6d:93:ee:05:bf:60:83:67:e6:b5:61:3b:
21:80:93:17:51:a9:6c:c8:3f:dc:69:02:47:51:64:
73:36:ff:1c:44:5a:fd:df:41:1e:8b:d6:27:cf:4e:
01:b6:ca:84:06:7a:f4:a3:0d:bd:cc:86:c7:df:ec:
91:8c:72:f9:d8:16:c0:1d:fe:f1:90:c6:31:fd:e5:
2e:ac:4e:89:4e:d6:ac:9d:51:d1:30:c8:2f:6f:06:
22:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:C7:03:4C:5A:8D:2E:01:D8:BF:BC:BB:6D:8F:0E:0D:FD:E7:56:DA
X509v3 Authority Key Identifier:
keyid:73:C2:F4:94:45:98:01:99:47:55:12:F5:29:76:08:F4:5D:08:BB:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/8a2518-39a0-4a98-9562-787b9b584c2d/1/c8L0lEWYAZlHVRL1KXYI9F0Iu1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d6:45:b4:71:ef:98:50:d3:20:5d:7c:5b:9e:6d:40:a8:5d:
d6:96:8f:68:59:2a:e8:b3:37:86:a0:50:a3:2b:d8:82:3b:f3:
79:cf:2f:d7:df:eb:7b:dd:00:d8:b2:9f:71:9e:6b:e9:df:4e:
dd:dd:73:2a:9d:fc:45:2a:ab:96:42:76:ce:ef:9c:93:d0:9b:
c1:9b:c5:80:cf:6a:cf:41:cc:36:a3:37:47:b3:f4:d9:43:ef:
33:3e:9e:bd:88:b6:99:4b:2c:c2:31:a0:ea:25:6b:b2:ae:7b:
82:d2:20:50:d0:83:f1:fe:d1:46:a9:02:9b:79:36:b3:31:0f:
89:5c:da:44:70:90:e3:b3:12:ae:1f:80:0e:b9:d0:12:d7:f4:
c1:1a:59:d9:32:94:93:cc:81:4d:a8:c3:ed:23:13:2d:f3:7f:
49:8c:1d:03:38:1e:e2:ad:3c:12:b5:97:f1:23:cf:c0:ee:c2:
72:7d:60:63:37:0e:06:5d:ae:4a:8d:0d:a4:78:7a:65:5a:7c:
58:d8:86:f9:1a:01:8f:4b:ae:95:1a:49:f2:ba:0f:e2:21:56:
54:72:30:7c:05:0b:03:80:98:89:e6:20:76:e8:d9:18:2e:84:
7c:04:f1:7e:f2:1a:be:f6:bd:f6:14:3f:07:a8:c4:f1:35:ca:
ae:fd:51:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:27:38 2025 by rpki-client