Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
File: 8hWid5SXEbLAHNxmnkDhcTlYVbs.mft (raw, json)
Hash identifier: dZWxxbG/1aFfZnaSZu8xd+c+ijyWoG9BFUufFmdIbL8=
Subject key identifier: CB:8F:D7:8A:D0:BA:6D:B9:C3:E9:7F:92:24:85:EA:44:36:CA:F0:A3
Authority key identifier: F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
Certificate issuer: /CN=f215a277949711b2c01cdc669e40e171395855bb
Certificate serial: 0197B77C6596F0429FC58B6FB737AA34AAF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:12 +0000
Manifest this update: Sat 28 Jun 2025 17:01:12 +0000
Manifest next update: Sun 29 Jun 2025 17:01:12 +0000
Files and hashes: 1: 8hWid5SXEbLAHNxmnkDhcTlYVbs.crl (hash: R9MPconxJMOQcReaZRzQzN8dup2lRjdjsKGOMYdeqLI=)
2: e9rn6bxSsUmtvRo7sJ4lEtK6S2Q.roa (hash: lsA08XTxVJOQQYnez6W7EOdFIkHihRjO9Y7qKfekirQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:65:96:f0:42:9f:c5:8b:6f:b7:37:aa:34:aa:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f215a277949711b2c01cdc669e40e171395855bb
Validity
Not Before: Jun 28 17:01:12 2025 GMT
Not After : Jun 29 17:01:12 2025 GMT
Subject: CN=cb8fd78ad0ba6db9c3e97f922485ea4436caf0a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e2:ae:ee:a3:62:80:82:51:c1:ba:a7:58:bd:
9d:02:4a:6f:18:7c:6e:39:1f:1a:96:0c:8a:ee:df:
e9:31:10:f5:15:f3:84:bf:45:4e:89:19:e1:8e:3c:
e9:d7:a0:f9:d9:77:3d:01:63:f3:6e:eb:58:43:ce:
45:91:8b:6b:40:d3:36:87:54:b8:98:ee:47:9e:39:
e8:27:a0:66:aa:40:f4:02:b6:82:63:f0:99:29:ae:
2b:a8:30:a0:6c:62:08:d2:01:ce:af:9f:dc:be:ec:
c1:b1:b8:4f:49:96:7e:33:ee:17:f2:b5:81:69:d0:
d9:30:52:53:98:7e:70:13:67:20:8f:6b:93:0e:ad:
d0:37:ad:64:ec:b2:87:2b:e0:74:fd:3d:8b:46:7c:
4f:35:4a:97:16:f8:a6:50:f7:6e:fc:1b:ec:bf:7e:
14:42:13:13:f4:2f:e2:6b:bd:16:ff:07:9e:1d:97:
39:41:4f:db:01:99:75:cb:7e:c6:f5:0f:2b:ab:b2:
6f:3c:36:b8:a4:52:a0:1b:b5:8f:0d:74:0b:df:05:
36:e4:dd:40:1c:78:ab:7a:26:87:a8:fc:c4:f5:2b:
2b:94:88:8f:9f:b4:94:58:13:95:3b:6b:b4:33:48:
0a:08:c8:c5:78:b7:c2:16:86:0f:c5:59:66:f7:b4:
d8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:8F:D7:8A:D0:BA:6D:B9:C3:E9:7F:92:24:85:EA:44:36:CA:F0:A3
X509v3 Authority Key Identifier:
keyid:F2:15:A2:77:94:97:11:B2:C0:1C:DC:66:9E:40:E1:71:39:58:55:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8hWid5SXEbLAHNxmnkDhcTlYVbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/f08d45-543c-49f7-9e78-903c198590fa/1/8hWid5SXEbLAHNxmnkDhcTlYVbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:2a:85:60:f7:ac:57:14:ea:bf:b1:c3:74:7d:51:f3:ec:4f:
6c:23:82:21:2c:01:23:53:93:12:8e:7b:48:e8:6a:0e:fe:a5:
95:0c:fb:8b:cc:58:db:ec:43:29:23:f9:fa:c2:b3:9c:e0:33:
d0:86:5c:be:6a:8b:32:1a:65:08:9b:31:70:d4:68:8f:95:77:
02:39:7f:53:de:81:fa:48:d4:db:95:27:30:15:db:a4:6f:91:
3f:56:2b:91:1e:40:35:b9:8e:0e:55:3f:f2:17:16:22:06:c5:
9f:3f:27:4e:f6:55:62:e7:f5:81:ca:6c:43:8e:b9:aa:df:eb:
95:50:fa:da:8d:bd:d3:a6:33:80:00:54:44:be:3a:d4:57:78:
bc:ed:df:71:c0:18:9c:8f:f7:74:fe:6b:8c:2e:70:82:ee:76:
eb:97:c3:a5:fa:10:e8:dc:aa:fa:ba:3e:ec:3a:00:4e:dd:d1:
d8:2c:04:09:95:58:c5:17:31:ae:4d:de:a2:d1:f5:6b:19:45:
50:2f:7a:95:fb:61:da:dd:39:a5:01:a9:44:05:37:52:d0:c2:
91:44:18:74:de:8c:01:c1:84:c9:ea:82:80:0b:85:ac:13:54:
39:c3:e6:0f:7b:d7:26:d8:3f:f4:14:e8:16:c8:d1:7a:fc:7a:
46:be:7b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:53:50 2025 by rpki-client