Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
File: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft (raw, json)
Hash identifier: uNoCzCN/Cxv1OyPHjHtZQfaLI0F0OQ2F2ef2HI4b7zc=
Subject key identifier: 35:69:2E:42:0B:37:18:DD:21:10:6A:AD:DD:01:5A:7A:94:E4:94:5D
Authority key identifier: F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
Certificate issuer: /CN=f20bf46303ff54a505f533c554251923e41f5926
Certificate serial: 0197B7EAA3DB28E7C52F2102B26848654E88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
Manifest number: 0727
Signing time: Sat 28 Jun 2025 19:01:37 +0000
Manifest this update: Sat 28 Jun 2025 19:01:37 +0000
Manifest next update: Sun 29 Jun 2025 19:01:37 +0000
Files and hashes: 1: 8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl (hash: F0RLnzOay1O+LJ3aooPvjAPtHseTX/kR9efNP0UaZSg=)
2: nJ3bZDTF3klediLdsGzrGEizejI.roa (hash: XOv5pl5Y0ikBc3XP047Nh+8GGnppEmfe5vg+dWr14YI=)
3: qnlY-2XHeoB5T91L-eAv--psw3s.roa (hash: GlcTsLYuOrrcX+rD96Cshdq9OCpUu7GdPBcBG+rwyLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:a3:db:28:e7:c5:2f:21:02:b2:68:48:65:4e:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f20bf46303ff54a505f533c554251923e41f5926
Validity
Not Before: Jun 28 19:01:37 2025 GMT
Not After : Jun 29 19:01:37 2025 GMT
Subject: CN=35692e420b3718dd21106aaddd015a7a94e4945d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:44:15:a8:dd:c2:24:dc:c6:30:2f:87:0e:1f:
43:2c:95:26:90:69:ea:d7:aa:f3:71:cd:45:d8:11:
40:94:c6:b8:16:01:f9:94:31:4d:57:a1:9d:c1:30:
6c:51:78:75:b2:a8:65:c3:6f:57:99:17:9e:5d:7a:
52:ad:8a:c5:fe:87:45:de:78:3a:ec:a1:ed:d0:28:
2c:a1:db:13:a7:1f:c0:91:a2:b0:33:d8:2a:41:31:
a6:92:12:27:b5:c1:23:d1:ba:e1:43:82:54:d3:2b:
74:e4:56:9c:01:d5:68:9a:cd:e7:5b:ac:4e:17:ae:
ef:f3:83:49:3a:4d:c6:cc:e7:c0:c2:68:b4:c4:d9:
f2:f7:79:b1:87:8b:cc:e5:03:34:1e:c6:67:de:bc:
55:80:61:fd:bd:52:94:63:d5:fd:2c:56:68:62:d6:
f9:83:46:85:af:f4:1b:65:f3:96:d9:22:1f:d3:29:
a8:0d:4a:f8:71:d8:f8:5d:b3:af:ec:00:e7:eb:40:
08:16:68:02:15:9a:a1:9c:df:9e:6b:a2:8b:87:5a:
45:f3:9f:aa:b5:44:cb:8b:7a:45:8d:09:2d:64:c6:
b4:4a:8d:88:e3:aa:49:82:a5:c8:7c:de:d3:b9:be:
cd:94:14:d7:56:fa:15:d1:60:4b:4e:54:74:79:7c:
f9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:69:2E:42:0B:37:18:DD:21:10:6A:AD:DD:01:5A:7A:94:E4:94:5D
X509v3 Authority Key Identifier:
keyid:F2:0B:F4:63:03:FF:54:A5:05:F5:33:C5:54:25:19:23:E4:1F:59:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8gv0YwP_VKUF9TPFVCUZI-QfWSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/815590-951c-4c1f-8697-c3694088f34a/1/8gv0YwP_VKUF9TPFVCUZI-QfWSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2b:30:01:42:57:ac:de:12:c9:4a:fb:e3:84:d7:e3:3b:41:
11:b0:27:1a:07:21:ee:b8:14:b8:50:ad:e4:13:4c:8a:ce:c8:
3d:43:84:7d:99:2e:32:ff:95:79:79:1a:1c:87:72:40:95:28:
70:ad:b4:23:38:d3:d5:76:a1:08:fc:c0:51:e2:ea:b9:e0:28:
60:3a:71:36:14:6f:86:8c:e6:f3:5c:82:ff:25:9e:4e:de:c5:
93:b4:87:a8:de:3d:f3:b4:74:b6:6e:3b:ff:13:0e:73:0d:f5:
3b:8e:35:44:83:4b:90:46:5f:a8:52:98:03:c4:fc:cf:b1:db:
b5:3c:98:26:e1:b1:8f:23:e9:3d:22:ab:ce:34:2a:1f:e5:a6:
d8:77:f4:0f:37:d1:3f:15:f4:be:ba:af:85:fe:24:80:5f:93:
ad:c4:58:90:53:cd:15:c0:49:3c:c9:ac:4b:f9:9a:46:58:1b:
8f:e5:3e:21:13:91:44:cf:94:0e:f3:09:82:f5:6b:b4:7d:f6:
58:9b:66:ec:28:46:2a:d3:da:87:41:fb:40:fd:98:36:dd:15:
46:28:70:a7:32:73:1c:b0:f2:d2:cc:63:f7:48:ca:37:f6:46:
6c:b4:c0:a3:4f:b5:65:67:4c:9f:7d:e0:5f:94:d7:9f:67:41:
9e:56:bd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:59:15 2025 by rpki-client