Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
File: _8OB9T8l28Kg76v4ifyjJBmVjdA.mft (raw, json)
Hash identifier: EvYvNSjpwJhImDl8Fnl9dKyA/jh1VQqQuOPvLSQsppE=
Subject key identifier: 47:64:3E:00:54:9D:63:00:04:34:BD:99:76:D1:B8:B4:91:48:5A:32
Authority key identifier: FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
Certificate issuer: /CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Certificate serial: 0197B6D7A498A422D2B90C16FDFEAD657716
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
Manifest number: 067C
Signing time: Sat 28 Jun 2025 14:01:15 +0000
Manifest this update: Sat 28 Jun 2025 14:01:15 +0000
Manifest next update: Sun 29 Jun 2025 14:01:15 +0000
Files and hashes: 1: KH3_fDhZQRg-yXyq0vBIRyHpscM.roa (hash: 1JhdYACAm2vKjYy3bW6WI11Cv1vQ6ZNSdGqhZ7ecrCc=)
2: OlpTwRewUUoYI7RfJhmlY-YBlzY.roa (hash: uli2QopUr/oh7N8p0+sVfdLGs2dH4jdqNFi2M9558Ko=)
3: _8OB9T8l28Kg76v4ifyjJBmVjdA.crl (hash: 5ss8OeXLJFVo9WZvFrcadfpMySzcVYk/wKOCXHuglPU=)
4: pdp4IWD2UyEeve8KeCwpZyeSJ_w.roa (hash: sCyo59s5/aOAb3/R/bOCxzJ2qxCJ1t7yaYP6ORycius=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a4:98:a4:22:d2:b9:0c:16:fd:fe:ad:65:77:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffc381f53f25dbc2a0efabf889fca32419958dd0
Validity
Not Before: Jun 28 14:01:15 2025 GMT
Not After : Jun 29 14:01:15 2025 GMT
Subject: CN=47643e00549d63000434bd9976d1b8b491485a32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3c:c2:3e:a8:17:de:3d:08:46:d9:40:fb:a5:
c3:08:cf:d3:60:68:b5:b1:34:fb:3f:cc:22:5c:15:
01:9b:f8:44:e7:d8:79:b1:94:be:7c:5f:7d:ab:37:
fa:0c:99:7a:c6:e7:8a:79:a5:65:71:50:26:1a:dc:
29:4f:9f:89:25:4e:65:e1:84:c7:62:90:ee:71:d5:
a8:83:03:38:3b:5b:47:70:11:eb:f7:1c:9c:3d:49:
37:a6:de:3f:b8:4e:c7:1d:50:88:61:68:37:48:9f:
aa:ef:cd:c7:40:16:bd:7e:70:c8:f5:1e:a1:de:f1:
0f:e4:a2:04:c4:9c:42:3b:b1:6e:1f:db:ae:50:a8:
80:93:2b:c6:14:c3:4e:98:aa:bf:69:bb:8f:41:99:
7e:36:ed:61:3e:0c:91:68:a9:30:df:47:2e:bc:2a:
be:62:5d:be:a2:ee:b4:55:e2:e8:c4:3d:c4:0e:a1:
d3:4a:87:61:c4:f5:ee:27:06:41:f8:cd:9b:67:d2:
49:e1:5f:bc:f0:50:85:94:0f:3b:f3:a7:d9:b5:92:
3f:25:3d:c3:ed:a1:20:73:76:d3:46:f3:cc:8f:bd:
e7:2a:5c:8b:89:d8:8a:2e:99:27:a1:61:da:23:56:
2e:90:4b:77:fe:f4:e4:a8:20:a9:a1:6c:3b:06:d4:
21:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:64:3E:00:54:9D:63:00:04:34:BD:99:76:D1:B8:B4:91:48:5A:32
X509v3 Authority Key Identifier:
keyid:FF:C3:81:F5:3F:25:DB:C2:A0:EF:AB:F8:89:FC:A3:24:19:95:8D:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_8OB9T8l28Kg76v4ifyjJBmVjdA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/b64e42-b9de-4c66-9ed9-6fe34805a6c6/1/_8OB9T8l28Kg76v4ifyjJBmVjdA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:28:73:28:d8:3b:ee:45:00:41:5d:46:87:95:e2:e4:a0:83:
2d:a3:c2:6e:f9:a6:46:e1:50:3f:61:da:9b:92:38:49:fe:2f:
28:59:e4:18:fa:45:76:a8:3f:b6:d2:a1:f6:e8:04:29:da:34:
e0:a2:5e:b6:73:02:81:2e:e5:89:7d:8d:d9:03:a4:17:2c:26:
ae:38:c3:76:1a:7b:b3:16:be:54:e9:c0:b2:93:8b:6b:cd:90:
fe:4f:cf:21:35:94:c4:54:fb:15:9e:73:20:16:1f:35:26:0a:
c5:52:ec:c8:eb:85:7d:89:db:75:07:94:22:dc:a5:51:5b:46:
c6:9f:d5:e8:fd:c6:aa:4e:7d:5f:67:8f:b0:86:1f:f3:f7:ab:
a2:b8:ab:a4:47:14:c3:d1:36:28:13:de:d8:a8:a1:1a:65:05:
5b:2f:ef:8a:d6:97:06:25:91:f9:5c:ce:50:1e:95:98:23:df:
d2:ca:d1:a8:68:57:9d:e5:25:c6:fd:1d:73:c3:37:76:e5:b2:
d2:6b:35:9d:f1:85:81:96:a2:92:86:bc:bd:8b:ad:d1:aa:35:
49:77:43:a8:bb:f2:f5:d2:e4:1a:90:b5:0c:ed:c4:aa:94:0e:
7e:5f:f8:c7:5d:4d:47:56:a6:da:56:6c:87:34:de:25:fe:3f:
4a:62:27:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 19:23:25 2025 by rpki-client