Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
File: 8I-6UmNRm3w6IVXGmHghd3be-6A.mft (raw, json)
Hash identifier: OJtRw8NpRquwxr50Xkuyi5d0i6I3UG4FlXvwkEf7Kb8=
Subject key identifier: 8D:8F:96:92:9A:17:3A:89:E9:DB:A1:1E:84:82:24:C5:49:6C:40:65
Authority key identifier: F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
Certificate issuer: /CN=f08fba5263519b7c3a2155c69878217776defba0
Certificate serial: 0197B7B2E97D4420500126020816ED0818DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
Manifest number: 0E79
Signing time: Sat 28 Jun 2025 18:00:44 +0000
Manifest this update: Sat 28 Jun 2025 18:00:44 +0000
Manifest next update: Sun 29 Jun 2025 18:00:44 +0000
Files and hashes: 1: 8I-6UmNRm3w6IVXGmHghd3be-6A.crl (hash: OVCrYxnTWNqfB9NXB5+D3REZtAL/oDrJp258Sne5Zs0=)
2: FSVMQ4pJCPFoKLSJXQ6SN5sd20I.roa (hash: fn+/BnxEhFcy9tBiYyHkUVxuspdk8dmiFltXF8v88aI=)
3: tEflzcf84YeIQ7wQhAU1KUgL-Vw.roa (hash: 4tBHDD8ccamGIZtMNBVAmE3bow4OuhCBji726kCuMPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b2:e9:7d:44:20:50:01:26:02:08:16:ed:08:18:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f08fba5263519b7c3a2155c69878217776defba0
Validity
Not Before: Jun 28 18:00:44 2025 GMT
Not After : Jun 29 18:00:44 2025 GMT
Subject: CN=8d8f96929a173a89e9dba11e848224c5496c4065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:68:4b:63:e2:a6:49:4c:72:3c:ad:7a:fa:34:
5b:fc:e8:8b:fd:0c:fc:db:bb:77:88:86:b8:92:02:
d0:a0:88:5c:50:89:03:62:07:f2:d5:dc:e2:45:94:
da:0d:ed:d5:e3:54:7d:16:90:e6:c0:86:d2:fe:f4:
bb:6b:79:87:1c:b5:c1:33:d4:cf:5f:cc:f8:77:c1:
9a:47:8c:80:8a:21:20:f9:09:b8:fc:68:9c:3e:61:
4e:0f:3c:5d:83:b8:e7:4d:c1:45:02:76:ef:35:b5:
14:2d:75:4d:20:dd:ec:9f:21:cb:4b:a5:6e:06:ad:
d0:84:29:1c:52:e4:3c:40:e9:43:fd:45:e9:2b:83:
4e:5d:6d:c7:81:ec:e4:7c:ef:94:61:01:df:9b:5c:
ba:82:ac:21:fd:ac:f9:70:db:78:13:5f:4f:5f:f7:
e0:43:e2:67:87:5b:e6:db:cd:27:cb:14:83:a4:20:
ab:a4:c8:e8:55:2f:5a:f9:e8:9a:94:b5:50:4d:1f:
47:12:41:03:f4:eb:61:c0:63:0f:35:75:86:75:c6:
c0:e5:75:35:c9:57:49:92:ce:6d:23:c7:15:47:ba:
47:af:2c:46:3d:85:71:8a:f4:2b:bf:b3:e8:79:fd:
28:ea:03:77:ef:05:3f:da:2e:24:41:78:44:1a:11:
79:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8F:96:92:9A:17:3A:89:E9:DB:A1:1E:84:82:24:C5:49:6C:40:65
X509v3 Authority Key Identifier:
keyid:F0:8F:BA:52:63:51:9B:7C:3A:21:55:C6:98:78:21:77:76:DE:FB:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8I-6UmNRm3w6IVXGmHghd3be-6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/1bb1a2-6763-4b24-ad88-06413ceefce0/1/8I-6UmNRm3w6IVXGmHghd3be-6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:3e:1a:65:b4:0b:97:ce:3d:1e:62:e4:88:50:b5:e6:9e:58:
ed:ef:10:df:f1:18:29:92:16:29:43:27:a5:ba:b4:c0:7c:5d:
19:e6:5b:e2:72:c9:4c:51:36:91:90:9e:c8:9b:8b:12:8e:24:
34:a6:43:84:14:d5:1c:f7:1e:89:cb:ce:4f:38:64:c2:03:65:
6a:ab:3d:8a:6d:3a:75:25:f5:9c:d9:61:b0:3e:06:0e:be:fa:
ea:d7:57:75:b4:ff:14:67:82:b4:f4:60:c2:21:d2:e7:1a:d5:
99:ee:b5:30:50:c5:26:3c:75:75:c8:12:24:15:e0:08:7d:46:
c9:d1:09:5d:32:c9:09:cf:f3:26:4c:53:b3:f7:3e:60:d4:92:
f3:f7:e2:f9:18:eb:a7:c0:25:0c:a9:84:1e:d1:fe:6c:f7:39:
fe:6f:1e:eb:d4:07:61:02:e8:23:e2:fc:9b:65:cd:bc:41:6b:
9f:e6:03:73:54:94:d3:16:88:4e:c2:a6:6f:96:bb:8d:5c:69:
ff:80:5a:5c:6e:f2:be:a6:ff:32:42:4c:e4:38:28:1d:fe:b9:
2e:8e:6b:8c:41:7f:d8:a6:92:d7:f4:fc:42:f4:fa:a2:f5:be:
ee:4c:f2:cb:03:ac:27:9a:ee:0c:97:fc:8f:e9:64:10:3a:88:
dd:65:45:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:28 2025 by rpki-client