Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
File: 8WmQKta3v0YB7qpecj7yPXD6dxQ.mft (raw, json)
Hash identifier: f8r3ApchmDbs8csBcj4m2hAfEx1MI4hcuYS30CzpuuU=
Subject key identifier: DE:7E:05:A2:71:05:B6:02:58:EA:CE:57:E5:33:CE:DD:35:2C:69:F5
Authority key identifier: F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
Certificate issuer: /CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Certificate serial: 0197B6A12B591BE5D362797C4C5514E30965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 13:01:44 +0000
Manifest this update: Sat 28 Jun 2025 13:01:44 +0000
Manifest next update: Sun 29 Jun 2025 13:01:44 +0000
Files and hashes: 1: 8WmQKta3v0YB7qpecj7yPXD6dxQ.crl (hash: tVO0DeIl5nd4X+pIOZ6o0aCH7hfDDY2nesLcaVRvEUs=)
2: f0RuL1swXlvp41CLCru-Mt1TNyc.roa (hash: rkjC9/AqAR3AXAOW7ubyDoWQhwKzvm+Iu5S5RZdguhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:2b:59:1b:e5:d3:62:79:7c:4c:55:14:e3:09:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f169902ad6b7bf4601eeaa5e723ef23d70fa7714
Validity
Not Before: Jun 28 13:01:44 2025 GMT
Not After : Jun 29 13:01:44 2025 GMT
Subject: CN=de7e05a27105b60258eace57e533cedd352c69f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:12:b9:46:22:bc:6e:25:c3:6c:3a:11:02:7a:
b7:f8:f9:ce:47:cf:78:ff:a7:e3:4a:f4:f0:ef:fc:
bd:77:42:e4:1f:56:03:e1:4e:ef:5b:2e:dd:42:e0:
24:4b:f1:4e:52:54:94:a1:37:9f:df:63:32:ca:3b:
33:6d:2b:82:9b:d4:9c:66:f1:0f:e8:93:ca:54:33:
06:89:e8:41:56:48:13:6a:f7:20:c4:8d:5c:ef:d0:
32:fd:19:0c:12:b7:32:58:25:fd:7f:87:a3:a3:d1:
b2:14:99:ae:92:0f:35:ac:ca:e1:37:f9:1d:4d:21:
aa:eb:01:91:2d:b1:8d:18:12:a4:a5:cd:71:24:97:
fd:c5:5e:06:4c:b5:91:f8:9e:33:f8:44:5b:bc:85:
b7:8b:ef:ff:f0:fd:ac:86:49:23:61:20:c2:45:69:
74:c0:29:d2:c5:33:ba:c7:c4:c8:fc:5e:2c:0b:d1:
4f:c7:95:bb:6e:b2:ef:9b:e5:d1:d6:96:50:5b:62:
41:24:58:20:b1:6b:96:12:00:ed:08:82:c6:53:09:
fa:ed:92:f6:9a:bc:b4:b1:44:dc:0f:37:71:01:a6:
d3:84:7a:8f:01:0e:a7:22:88:33:b9:c1:d6:7a:d1:
50:20:bb:80:63:80:97:bc:16:a3:9f:55:c0:c1:90:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:7E:05:A2:71:05:B6:02:58:EA:CE:57:E5:33:CE:DD:35:2C:69:F5
X509v3 Authority Key Identifier:
keyid:F1:69:90:2A:D6:B7:BF:46:01:EE:AA:5E:72:3E:F2:3D:70:FA:77:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WmQKta3v0YB7qpecj7yPXD6dxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/4f2800-a555-4f82-8936-f208365051cb/1/8WmQKta3v0YB7qpecj7yPXD6dxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:b3:8e:13:c7:48:9e:87:28:5c:3d:52:87:05:fe:bd:23:a8:
00:cd:f8:1b:15:26:9f:de:2a:98:6b:9e:8d:60:3f:b5:d8:12:
82:b1:d0:22:7e:e3:bb:db:c4:c3:96:f1:6d:6d:96:20:eb:54:
b2:49:3f:64:16:b0:1e:e1:ee:88:2e:f1:6b:d3:23:50:5c:c0:
c4:d3:6d:eb:b4:a7:0a:ba:64:9c:05:24:70:65:ab:5e:59:ed:
72:05:35:38:0c:81:d4:bd:52:43:2e:08:62:17:76:42:11:4d:
18:72:ac:d6:09:1f:6f:6e:e7:de:3a:62:9f:bd:66:8d:0f:9f:
ee:b3:fb:61:b1:ff:55:1b:e2:e0:a0:6b:9c:02:b6:f0:83:cd:
b6:a7:a7:e4:ec:27:d6:47:9b:9f:c0:cf:e8:fa:47:7f:e1:bc:
12:51:85:4e:9c:59:fb:f6:f2:1a:30:9b:d3:af:5c:ce:50:00:
8e:96:94:33:b3:49:7f:0b:de:82:d9:1f:a6:21:f8:56:d0:7e:
82:80:3e:44:e4:33:0e:c2:b5:d6:41:81:82:48:42:44:71:1e:
f2:53:38:ef:a8:dd:bd:68:ab:8d:d9:41:1d:4a:74:f1:d4:93:
ce:d3:d2:20:c7:5c:8d:64:13:86:53:1b:ea:91:c8:fa:7c:56:
3e:da:04:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:24:38 2025 by rpki-client