Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: 2XnPwDz9aKPNHhfJOugaWGeQSGVazrHtiDqcvwcGK9M=
Subject key identifier: E7:77:E5:B2:1D:60:08:F0:C0:A1:E8:5A:28:91:26:4E:4E:4D:CF:31
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 0197B6A1B8D34A057C152BAEAC12E036F3EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:02:21 +0000
Manifest this update: Sat 28 Jun 2025 13:02:21 +0000
Manifest next update: Sun 29 Jun 2025 13:02:21 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: ZLIdnVwsjs0qb/Es3q00tN2r7EggAAT7eNEYkzmM54c=)
2: WVDdYi47m-6hf2_QV0K2CVkP7zw.roa (hash: 9WCgzOj2n+hDIFLmZXxef2ObXsI93yW31Mx8FRKIiM8=)
3: _nQyzxD5tzJPLFHKcoFX_hH-tT8.roa (hash: K943OWLrTeetJ5gY0wxowSl9TJP/OQ1YX347sbUwBP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b8:d3:4a:05:7c:15:2b:ae:ac:12:e0:36:f3:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Jun 28 13:02:21 2025 GMT
Not After : Jun 29 13:02:21 2025 GMT
Subject: CN=e777e5b21d6008f0c0a1e85a2891264e4e4dcf31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6e:59:c1:6c:32:fe:71:be:f5:a7:20:a0:d3:
73:a7:00:9f:3f:96:0c:c9:79:e0:05:6f:f3:54:d0:
b6:f1:91:57:2a:78:b7:10:54:41:40:38:8c:2e:6f:
9f:d8:2b:74:2e:c2:46:1b:4b:60:43:2c:14:8f:cd:
e9:85:54:5e:7c:12:3c:88:ab:dd:62:0d:1a:11:da:
f6:58:09:07:df:eb:76:d7:98:d7:5a:22:21:e6:83:
d6:67:97:5d:d3:c4:4a:73:90:81:85:a1:4b:ce:45:
61:44:63:94:cf:23:c6:84:10:cf:13:33:7c:52:6e:
cd:c8:9b:bb:7c:16:4c:04:79:eb:c2:21:59:87:34:
f5:de:18:8e:4c:09:15:03:6e:2c:bd:9c:23:32:a7:
87:68:57:5a:1b:3d:a5:e1:f8:a9:ba:b2:8c:cd:27:
ea:92:1f:fd:a4:a7:d9:e0:27:b3:55:71:af:49:b7:
a2:73:86:db:05:10:80:bd:74:40:13:08:a7:78:0d:
0f:ab:3b:90:82:0d:ba:15:fd:2e:82:49:b4:65:34:
3a:5f:fc:e9:c2:d5:95:fc:18:66:6d:72:8d:5f:8f:
ba:cb:47:cf:4c:40:4f:73:6c:26:40:41:76:a3:96:
09:63:a7:f2:69:77:bb:d2:93:5e:5e:ed:8a:c9:80:
c9:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:77:E5:B2:1D:60:08:F0:C0:A1:E8:5A:28:91:26:4E:4E:4D:CF:31
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:16:5f:05:c6:c6:c3:a2:9f:ce:81:cb:ee:63:21:1a:6f:d1:
35:4d:ed:ff:9b:64:37:7c:bd:5c:7c:9d:a1:43:de:10:c4:4e:
af:d1:38:e0:a3:39:d0:24:51:71:f5:29:7e:58:82:f0:cf:26:
83:9b:07:f5:e3:43:d2:a6:df:58:75:ee:f2:97:44:31:ce:17:
89:c0:6e:54:bd:59:19:8a:60:fe:3d:4e:30:d5:dd:13:75:41:
af:b4:bf:5a:5a:aa:82:f9:2a:ee:b8:fb:fc:60:83:55:cc:fc:
1f:fe:62:dc:1e:51:15:da:2d:6c:91:02:db:f5:44:4e:8d:b4:
6e:22:bb:37:2c:1f:e5:44:f8:64:7b:66:16:33:19:68:5e:3a:
52:ee:39:87:06:d4:63:c6:66:ca:9c:24:a9:ae:43:f6:68:fd:
73:71:a7:67:3f:3a:77:45:77:08:00:a6:50:82:84:ec:f5:e7:
09:78:d5:95:27:89:b3:35:f4:25:c5:39:f2:a5:3c:49:30:9e:
f1:39:49:45:6a:00:12:09:83:f0:34:68:b5:4d:83:50:dd:6b:
a2:8a:2a:d7:73:83:94:6f:f4:5a:08:bb:04:2e:2d:11:b3:a6:
02:84:96:3a:f4:0c:d8:b8:93:63:57:ba:6c:4a:f4:54:c5:32:
b5:eb:19:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 18:59:43 2025 by rpki-client