Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: r6uRXJUX2HfWPJM5ix2wEIrtIv839Wj06iQrDggqmM0=
Subject key identifier: 86:1C:E5:79:4B:0C:8A:BE:48:9A:97:D9:C1:EB:AF:74:F1:C4:0C:B5
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 0197B6D77FCD5C4DC99A6E0C4011063EB425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 10F6
Signing time: Sat 28 Jun 2025 14:01:05 +0000
Manifest this update: Sat 28 Jun 2025 14:01:05 +0000
Manifest next update: Sun 29 Jun 2025 14:01:05 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: vsVyK3LzQ5NRlPfTs7qIWQwsagPaWOunRtAfVyuNebI=)
2: egJez3AEE17hCNzFwTYyy-yFWOk.roa (hash: tusTlSSqSFD7zKHlwWaKcKWcJ80R+Gl9wxxF6SdsjMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:7f:cd:5c:4d:c9:9a:6e:0c:40:11:06:3e:b4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Jun 28 14:01:05 2025 GMT
Not After : Jun 29 14:01:05 2025 GMT
Subject: CN=861ce5794b0c8abe489a97d9c1ebaf74f1c40cb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ce:3e:80:4b:80:1c:98:5d:d4:be:19:3d:f4:
05:db:b3:e1:04:aa:b3:28:16:bc:1d:10:eb:1b:53:
e6:5f:a8:ae:e7:b8:82:e0:30:c9:b5:76:4d:9d:5e:
93:e4:2a:24:b2:99:16:e0:d2:72:a0:b2:ad:e6:f7:
b9:7e:11:d5:47:da:93:f1:18:35:6c:ce:11:3d:91:
b3:48:3a:00:16:f3:8b:d3:43:5c:c3:4d:7a:97:46:
f5:64:31:7f:c0:ee:92:b8:65:c8:63:36:da:51:bb:
81:66:3c:62:84:3a:1e:ee:b3:d8:0c:93:46:95:d9:
76:22:63:20:41:bb:2f:10:4b:af:18:4e:7b:d1:e4:
43:5b:e2:c5:5d:5f:c9:c0:09:6c:fe:9f:0c:1b:35:
91:63:0e:14:1b:81:15:1e:fd:83:70:19:94:bb:08:
72:70:84:a8:71:83:a9:9c:3f:69:94:15:65:05:de:
03:b2:f5:4d:a4:72:1f:cf:57:53:41:51:98:f8:27:
c6:69:7f:3e:c0:46:30:dc:99:a2:55:53:00:5e:f5:
ca:91:6d:b8:8a:c2:e9:06:28:dc:00:61:49:2c:ff:
14:07:ce:ad:73:b1:92:2e:22:d1:86:eb:f6:34:d5:
ba:f8:e9:82:af:17:29:59:07:e4:a7:52:1c:e3:bb:
13:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:1C:E5:79:4B:0C:8A:BE:48:9A:97:D9:C1:EB:AF:74:F1:C4:0C:B5
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:19:86:9f:bf:a3:c7:24:89:22:23:bf:49:9a:dc:6a:29:2a:
43:4c:27:89:df:81:3c:0d:83:84:ba:9a:ca:94:68:cf:9e:08:
f8:bc:e1:12:07:9b:d8:71:dd:ed:1c:34:ba:17:79:e1:d1:d9:
9c:95:e0:53:8a:f2:fa:17:28:e7:ac:58:62:5c:ba:89:65:e4:
92:96:0a:74:09:e1:31:7a:00:27:78:0a:46:59:dc:23:45:0b:
29:64:b7:a1:2c:fc:81:f8:1b:ef:74:f5:06:37:de:d6:36:df:
68:17:60:46:78:57:70:cc:b2:f0:3e:f3:5d:6a:8c:fb:ca:77:
34:e3:1e:8d:3c:13:4b:9b:b8:dd:6d:b0:9a:01:49:7c:5b:49:
43:18:e5:02:41:59:e8:57:25:70:2d:16:48:fe:2a:7c:03:a6:
91:a5:54:26:bf:1e:aa:77:54:b6:ab:61:eb:e1:cd:bc:08:1f:
c6:c5:aa:11:26:29:c2:7e:aa:d3:da:32:5d:82:59:59:de:3b:
5d:05:6a:87:34:ec:c3:cf:e6:cc:8c:e7:e0:41:76:f6:d4:3a:
58:b8:5d:08:ab:98:3d:f8:ea:79:2d:63:70:01:c4:6f:68:3e:
aa:89:48:56:a1:a4:68:8b:1b:c9:04:70:32:97:80:ae:72:8d:
12:00:0d:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe213/NXE3Jmm4MQBEGPrQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYwYjI4ZDZhYzZlYzQwZGZiMjJmOTZmN2I1NTYxNjljMDQ5
OTAxMzcwHhcNMjUwNjI4MTQwMTA1WhcNMjUwNjI5MTQwMTA1WjAzMTEwLwYDVQQD
Eyg4NjFjZTU3OTRiMGM4YWJlNDg5YTk3ZDljMWViYWY3NGYxYzQwY2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3c4+gEuAHJhd1L4ZPfQF27PhBKqz
KBa8HRDrG1PmX6iu57iC4DDJtXZNnV6T5CokspkW4NJyoLKt5ve5fhHVR9qT8Rg1
bM4RPZGzSDoAFvOL00Ncw016l0b1ZDF/wO6SuGXIYzbaUbuBZjxihDoe7rPYDJNG
ldl2ImMgQbsvEEuvGE570eRDW+LFXV/JwAls/p8MGzWRYw4UG4EVHv2DcBmUuwhy
cISocYOpnD9plBVlBd4DsvVNpHIfz1dTQVGY+CfGaX8+wEYw3JmiVVMAXvXKkW24
isLpBijcAGFJLP8UB86tc7GSLiLRhuv2NNW6+OmCrxcpWQfkp1Ic47sTeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIYc5XlLDIq+SJqX2cHrr3TxxAy1MB8GA1UdIwQY
MBaAFPCyjWrG7EDfsi+W97VWFpwEmQE3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi81Y2U3ZjctZTBmZS00MzYxLTgyYzIt
NDc0NjU5ZWRiMzYxLzEvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi81Y2U3ZjctZTBmZS00MzYxLTgyYzItNDc0NjU5ZWRiMzYx
LzEvOExLTmFzYnNRTi15TDViM3RWWVduQVNaQVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGxmGn7+j
xySJIiO/SZrcaikqQ0wnid+BPA2DhLqaypRoz54I+LzhEgeb2HHd7Rw0uhd54dHZ
nJXgU4ry+hco56xYYly6iWXkkpYKdAnhMXoAJ3gKRlncI0ULKWS3oSz8gfgb73T1
Bjfe1jbfaBdgRnhXcMyy8D7zXWqM+8p3NOMejTwTS5u43W2wmgFJfFtJQxjlAkFZ
6FclcC0WSP4qfAOmkaVUJr8eqndUtqth6+HNvAgfxsWqESYpwn6q09oyXYJZWd47
XQVqhzTsw8/mzIzn4EF29tQ6WLhdCKuYPfjqeS1jcAHEb2g+qolIVqGkaIsbyQRw
MpeArnKNEgANeQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:52 2025 by rpki-client