Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: DLALZ95Et2nRrX8od6APPmtnDxk1W10hZTaX7FPQrc4=
Subject key identifier: 27:F4:8E:DD:15:BA:97:16:E9:9F:18:86:99:B0:0B:A9:53:2F:FC:D6
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 0197B632E6CBE963588A08E0D344E1360751
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 11:01:18 +0000
Manifest this update: Sat 28 Jun 2025 11:01:18 +0000
Manifest next update: Sun 29 Jun 2025 11:01:18 +0000
Files and hashes: 1: 7XoxbsiH0tvuamwOaZJkHsbncU8.roa (hash: eOLDYEBs+ePiFOo04IA8xxSpoLseLj4knNzwy/AuO7c=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: Xijnvr8Eo1ul4eW9iqVw9P4lUT1ubX96Irt0jJMP7N8=)
3: jMGhTNUb7i42fBQA0pNbTbsvC0w.roa (hash: 3rIrbzRKv4rGgOKlFAltJmUMNb9Mmay1gOYKugMTp+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:e6:cb:e9:63:58:8a:08:e0:d3:44:e1:36:07:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Jun 28 11:01:18 2025 GMT
Not After : Jun 29 11:01:18 2025 GMT
Subject: CN=27f48edd15ba9716e99f188699b00ba9532ffcd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:ac:31:a1:99:65:4c:2e:5f:a5:98:28:17:
64:63:97:6e:c0:76:c5:61:d1:b6:38:9f:ba:67:65:
bc:23:51:70:f5:ea:a9:60:d2:db:ca:49:a2:ff:9a:
ec:1d:59:bb:eb:6a:ac:c1:7a:1e:28:3b:31:27:77:
af:4a:7f:74:a8:91:87:ca:a0:33:cf:55:7f:34:0a:
d0:aa:d6:a4:77:77:18:eb:c9:de:d4:a2:4c:1b:e2:
6b:3d:38:c7:fd:a7:0c:ee:be:58:aa:a1:7a:c6:84:
ff:03:6e:e7:3d:a5:6b:0b:d4:c6:8c:a7:f0:e6:e1:
2e:93:f6:ee:cd:dd:aa:89:a4:74:28:9e:18:2c:63:
b3:a2:5a:3a:e5:eb:75:fd:dd:54:07:3d:92:96:25:
d3:5e:f8:9c:ca:e5:07:85:10:9b:a2:ba:a4:7c:2e:
62:28:85:e7:0c:98:df:1a:d5:66:58:40:ca:91:fc:
74:27:3a:93:60:c4:b3:71:67:cd:af:3a:3b:d8:f9:
d8:86:fe:ff:43:0a:bd:f4:9d:29:63:89:89:33:9f:
f1:c0:5b:57:81:61:49:1f:24:61:fa:6c:dd:a5:ae:
d9:41:41:a7:19:bb:04:95:65:92:c6:0d:a7:b0:fa:
94:0f:ac:0c:28:c7:31:ea:d9:2a:10:20:9c:46:84:
b3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F4:8E:DD:15:BA:97:16:E9:9F:18:86:99:B0:0B:A9:53:2F:FC:D6
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:67:84:e7:1c:46:89:0d:83:48:2d:95:bb:c9:3d:0b:2b:12:
95:5a:85:6c:db:1f:a1:10:81:52:79:fd:21:64:21:18:54:9a:
5b:44:84:cd:1b:d3:ab:fc:61:b0:ec:aa:68:89:57:21:79:b4:
cc:33:fd:7b:14:28:fd:0f:00:e3:c7:f3:c5:73:45:98:3d:e0:
59:fa:ff:e0:c6:db:30:d5:b2:db:0d:e3:d8:c6:a5:5c:fb:4f:
fa:0a:00:e1:48:1b:3c:3b:4f:2d:83:31:18:76:cd:00:6b:ab:
31:a3:0a:f3:06:1a:06:63:97:e6:5e:d9:92:27:8c:95:40:b4:
a0:a7:b9:63:60:5b:60:d2:eb:3d:7b:cd:5b:a5:f9:56:1c:9b:
1d:ea:9a:9c:b3:c5:63:c5:46:be:4e:db:84:c2:35:3f:e6:f7:
44:e9:82:37:2e:3c:a9:4e:1f:a4:6b:f2:4a:be:69:76:05:e3:
72:c7:0d:6e:6e:d0:a9:55:0d:6d:29:c2:9a:b1:18:92:67:91:
f8:79:0d:c3:40:97:be:58:fd:26:81:99:28:f0:1e:8c:5a:8c:
63:44:7b:59:c9:5a:bc:2a:a3:3e:5e:75:6b:25:a4:af:52:82:
f8:9c:cd:66:a5:be:f9:73:34:91:37:83:cf:40:e5:86:ba:8f:
b9:14:a3:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:21:39 2025 by rpki-client