Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
File: 8nBAx0Kee54hpf_IjZMrRwfMOgA.mft (raw, json)
Hash identifier: jrWTZUAtdifCnO100N3a3YDX/adLvxxjQBtmMYfo9FU=
Subject key identifier: E6:AB:A9:3A:5E:FE:61:0F:0F:97:B2:65:DB:7C:3D:9F:73:7F:6D:56
Authority key identifier: F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
Certificate issuer: /CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Certificate serial: 0197B7B37AAE1F33AF1BE7DF8AA647E388D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 18:01:22 +0000
Manifest this update: Sat 28 Jun 2025 18:01:22 +0000
Manifest next update: Sun 29 Jun 2025 18:01:22 +0000
Files and hashes: 1: 8nBAx0Kee54hpf_IjZMrRwfMOgA.crl (hash: 3AUpqmJpDcJzI7zcWb4V/mXSUyQ9EvAaI3751ZjOpjI=)
2: r8IgxFWc9XzlcmWsiD3Z-WIyGyw.roa (hash: FGlOHNeym9mZlkgU9PVn/K4BszdTXj5x4PebqSOF0dQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:7a:ae:1f:33:af:1b:e7:df:8a:a6:47:e3:88:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27040c7429e7b9e21a5ffc88d932b4707cc3a00
Validity
Not Before: Jun 28 18:01:22 2025 GMT
Not After : Jun 29 18:01:22 2025 GMT
Subject: CN=e6aba93a5efe610f0f97b265db7c3d9f737f6d56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:05:34:50:0c:92:16:c4:7e:03:6a:f3:a8:
58:fa:07:d7:f4:ec:af:d1:1e:ca:90:ae:52:2b:ff:
38:97:2a:da:e3:cd:1a:2a:74:a6:9f:78:1f:e2:6d:
0e:34:bb:d4:be:d3:bb:ad:14:01:63:0a:9f:78:fa:
cf:c6:d8:7e:17:65:07:16:64:3b:e4:ae:1d:31:da:
f0:fc:45:3f:95:b6:ee:b2:d9:dd:64:b9:f4:41:d9:
71:50:87:c6:c2:2e:31:19:78:0c:dd:24:e9:27:44:
f8:38:b4:da:4f:0f:46:70:2a:a7:07:ed:79:fe:a2:
33:34:8d:27:a1:cf:a9:8b:a1:98:1d:2e:52:9f:92:
8d:9e:8d:b9:99:dd:22:04:2b:09:2a:24:32:44:0e:
83:de:61:2b:d0:a7:ee:2f:de:5e:9b:71:16:17:36:
cf:1d:57:95:d1:6c:6f:ab:26:e0:e9:7b:2f:68:21:
eb:fc:5d:b7:88:f3:79:fc:38:b5:2e:a3:2a:ab:d5:
97:9f:32:d5:68:f3:21:0b:53:7e:b4:6d:5f:1a:4a:
28:42:6e:f3:b0:9a:9d:94:b0:ae:a3:b1:2c:89:0d:
7b:ec:5c:02:25:70:83:6d:2f:8e:84:a8:39:b7:f9:
f6:ce:2e:65:17:a3:eb:1d:e7:7d:8d:7e:0f:53:e2:
09:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AB:A9:3A:5E:FE:61:0F:0F:97:B2:65:DB:7C:3D:9F:73:7F:6D:56
X509v3 Authority Key Identifier:
keyid:F2:70:40:C7:42:9E:7B:9E:21:A5:FF:C8:8D:93:2B:47:07:CC:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nBAx0Kee54hpf_IjZMrRwfMOgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/543d4c-a4d9-4196-892c-7ecabae18d8a/1/8nBAx0Kee54hpf_IjZMrRwfMOgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:fd:b6:ba:5b:64:e3:2d:a4:98:aa:60:b6:cf:21:0f:32:80:
56:b1:f5:99:bf:2a:10:ef:1d:89:db:87:bf:01:3c:3d:14:89:
2b:38:e7:e3:83:f3:a6:65:f6:64:b2:e7:af:b7:48:f2:b5:b8:
25:ba:07:76:8c:01:88:64:17:03:b4:b4:c8:a3:60:88:9f:1f:
46:9b:09:b5:7e:4a:95:d5:43:f4:6b:4a:20:bf:26:b7:d1:67:
6a:33:de:c4:7a:85:ea:ae:55:78:17:da:73:fd:32:f6:a0:0d:
68:39:46:49:52:c6:8f:2c:6e:8c:ff:8e:8f:20:61:9e:06:c5:
33:03:3c:4e:60:0c:b6:b5:b5:5c:7e:08:a9:a3:36:2d:20:03:
c2:84:02:9f:be:34:e6:00:06:e4:fa:23:d9:0f:01:96:70:2e:
6f:24:d2:3f:74:e2:2c:c6:47:bf:9a:80:67:57:24:7d:10:25:
74:89:99:54:b4:97:68:ff:5e:4c:dc:ea:13:a9:96:ab:c4:21:
d0:62:b5:4f:a7:84:0a:fd:68:7c:61:e0:1f:de:05:8b:e9:ad:
99:7a:34:ee:3c:14:2a:ae:34:93:48:86:93:55:ba:2c:d8:de:
a0:ca:82:b9:b3:17:fc:46:cd:19:9a:86:2e:e3:70:89:d8:35:
d4:da:de:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:01 2025 by rpki-client