Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: 9PByd1OgemqhEK5bWpui8ni6TvvD8VayOuqB8k4Jpkw=
Subject key identifier: D0:F4:C4:67:DF:45:22:D1:9D:E9:20:9A:6F:12:BF:70:1A:7D:5C:AB
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 0197B70EB575DBD289D8C79C549B6CD02ABB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 0D23
Signing time: Sat 28 Jun 2025 15:01:23 +0000
Manifest this update: Sat 28 Jun 2025 15:01:23 +0000
Manifest next update: Sun 29 Jun 2025 15:01:23 +0000
Files and hashes: 1: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: aosbI9b5y3qAQcgreQ9T1egmYDTd9bSchz3lj6xtNOc=)
2: YkEpFHQglRkkx7TW2iOd8M7ku-c.roa (hash: kIeQhyyEYB0FfxtFkPtqVvMk30nvPQUJg2CwKA7jeLY=)
3: uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa (hash: cH522XBAhZQR4is+g9SDDOs+Uj5P/+RJANdH54+jdMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:b5:75:db:d2:89:d8:c7:9c:54:9b:6c:d0:2a:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Jun 28 15:01:23 2025 GMT
Not After : Jun 29 15:01:23 2025 GMT
Subject: CN=d0f4c467df4522d19de9209a6f12bf701a7d5cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:31:ec:b4:b3:38:02:43:2e:2c:e1:c4:19:6f:
53:15:2b:34:13:87:71:e2:49:77:fb:e4:8e:66:4f:
55:20:3d:ae:26:95:74:01:0a:9f:2d:7c:dd:4a:c0:
06:93:01:86:a6:71:2d:fe:35:8f:b7:24:eb:80:64:
97:e3:b3:c5:43:d2:85:1a:a9:c0:3f:fe:8a:9c:24:
97:53:05:b0:ae:40:fb:04:cd:90:08:3d:03:4b:03:
c7:a5:0b:df:11:23:2a:b2:e1:72:97:ee:92:ae:9b:
f7:70:93:0c:3f:db:c0:9e:a5:57:e8:1b:0a:21:fb:
9b:85:0b:b5:3f:eb:ce:f1:ac:a6:94:7c:96:6b:f0:
d8:9f:33:df:c9:5e:2b:7c:16:77:ed:bf:bc:a7:ea:
95:13:cf:2a:1a:96:76:21:47:b3:75:01:f5:13:4f:
61:37:f3:83:83:0e:0f:02:6f:38:91:ea:99:2f:b6:
0c:50:36:a6:07:f7:81:db:77:27:d3:aa:2c:11:a2:
4c:60:8d:86:ca:af:d2:aa:25:95:41:4f:76:8b:bd:
b9:93:b4:20:5f:44:54:a8:61:cf:4c:db:41:24:e3:
a4:fd:ad:90:bb:13:10:e8:9a:6f:67:9f:53:51:aa:
ba:97:da:c8:97:05:eb:19:7b:03:23:2c:84:c0:70:
af:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F4:C4:67:DF:45:22:D1:9D:E9:20:9A:6F:12:BF:70:1A:7D:5C:AB
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:38:06:aa:70:b4:14:a2:9d:86:0e:3c:eb:19:e7:44:b2:d6:
d5:f7:f1:b4:37:e7:d1:a1:73:13:49:f3:f0:f9:81:4a:9f:b8:
77:09:b7:df:fa:53:f0:f5:be:14:15:ac:07:b3:43:89:02:6b:
fa:7e:f4:a7:6f:5e:e8:09:95:0a:8d:bb:a8:d8:7d:63:3f:02:
69:e0:3c:5e:9b:ff:d7:19:4f:30:b4:49:ad:73:1b:6b:c9:24:
e6:fd:35:c2:f7:14:30:db:7a:a6:fb:c3:67:a6:13:6e:6d:96:
ec:dc:0f:ea:80:b2:eb:5f:21:b3:5c:4f:fb:44:32:28:cd:f6:
b7:a6:cf:ec:13:d3:b0:8d:7f:a2:0b:61:17:80:78:66:99:18:
ef:4c:da:76:24:ff:d1:44:68:30:94:68:a9:1e:fc:a5:78:91:
77:59:eb:4b:85:7c:9b:d1:f4:8e:77:ca:20:cd:06:06:74:54:
ed:96:ed:14:bb:ba:33:72:92:55:38:f7:c8:31:fe:bd:17:66:
5e:72:00:4b:06:71:b7:53:b8:2e:2d:59:9a:89:e8:96:63:f7:
e0:9e:25:57:38:90:09:43:c7:b3:e4:53:d1:0b:0f:81:5e:d7:
2e:3e:87:cd:59:91:14:2a:67:d9:2d:e8:38:7a:32:26:67:4f:
06:1d:1e:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DrV129KJ2MecVJts0Cq7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjkzMDg1YjVmNzVjMGYxMGRlMDhlMjJjYmU0YjA2MjQ1
MWIxNTAwHhcNMjUwNjI4MTUwMTIzWhcNMjUwNjI5MTUwMTIzWjAzMTEwLwYDVQQD
EyhkMGY0YzQ2N2RmNDUyMmQxOWRlOTIwOWE2ZjEyYmY3MDFhN2Q1Y2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjHstLM4AkMuLOHEGW9TFSs0E4dx
4kl3++SOZk9VID2uJpV0AQqfLXzdSsAGkwGGpnEt/jWPtyTrgGSX47PFQ9KFGqnA
P/6KnCSXUwWwrkD7BM2QCD0DSwPHpQvfESMqsuFyl+6Srpv3cJMMP9vAnqVX6BsK
IfubhQu1P+vO8aymlHyWa/DYnzPfyV4rfBZ37b+8p+qVE88qGpZ2IUezdQH1E09h
N/ODgw4PAm84keqZL7YMUDamB/eB23cn06osEaJMYI2Gyq/SqiWVQU92i725k7Qg
X0RUqGHPTNtBJOOk/a2QuxMQ6JpvZ59TUaq6l9rIlwXrGXsDIyyEwHCvtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFND0xGffRSLRnekgmm8Sv3AafVyrMB8GA1UdIwQY
MBaAFPJpMIW191wPEN4I4iy+SwYkUbFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAt
NTVlODVlYTA5ZGRlLzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS8xNzMzMjctOTc0Mi00MzViLTg2YzAtNTVlODVlYTA5ZGRl
LzEvOG1rd2hiWDNYQThRM2dqaUxMNUxCaVJSc1ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoDgGqnC0
FKKdhg486xnnRLLW1ffxtDfn0aFzE0nz8PmBSp+4dwm33/pT8PW+FBWsB7NDiQJr
+n70p29e6AmVCo27qNh9Yz8CaeA8Xpv/1xlPMLRJrXMba8kk5v01wvcUMNt6pvvD
Z6YTbm2W7NwP6oCy618hs1xP+0QyKM32t6bP7BPTsI1/ogthF4B4ZpkY70zadiT/
0URoMJRoqR78pXiRd1nrS4V8m9H0jnfKIM0GBnRU7ZbtFLu6M3KSVTj3yDH+vRdm
XnIASwZxt1O4Li1ZmonolmP34J4lVziQCUPHs+RT0QsPgV7XLj6HzVmRFCpn2S3o
OHoyJmdPBh0efg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:51 2025 by rpki-client