Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: xw/n7UY0Tp62lDHb8r8oabNIRaoPmAAFBi/hSOvy/tI=
Subject key identifier: 33:76:77:AA:CF:B1:3A:EF:7F:8A:77:E9:DC:06:EF:56:92:E9:03:07
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 019849D2E6E8436B3020BF885BC4CD67505B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 0D6F
Signing time: Sun 27 Jul 2025 03:00:15 +0000
Manifest this update: Sun 27 Jul 2025 03:00:15 +0000
Manifest next update: Mon 28 Jul 2025 03:00:15 +0000
Files and hashes: 1: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: evkb9tflLdhv5mIezh3w4UGo1e+oXnXsxuwZxu3w4i0=)
2: YkEpFHQglRkkx7TW2iOd8M7ku-c.roa (hash: kIeQhyyEYB0FfxtFkPtqVvMk30nvPQUJg2CwKA7jeLY=)
3: uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa (hash: cH522XBAhZQR4is+g9SDDOs+Uj5P/+RJANdH54+jdMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d2:e6:e8:43:6b:30:20:bf:88:5b:c4:cd:67:50:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Jul 27 03:00:15 2025 GMT
Not After : Jul 28 03:00:15 2025 GMT
Subject: CN=337677aacfb13aef7f8a77e9dc06ef5692e90307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:32:23:44:b9:28:df:28:ba:3f:19:81:ce:a7:
71:79:63:b1:90:9e:07:2c:43:99:aa:c5:de:df:a8:
e4:33:0b:9f:37:bf:e0:88:24:03:1d:bd:a9:06:02:
c5:b2:ff:ab:c2:64:db:84:b2:10:6b:b4:33:b3:63:
f4:b5:63:9e:0f:91:97:c9:1d:25:36:4e:8c:39:21:
a2:1e:d5:20:a4:cb:a7:73:f1:8e:28:7a:54:fa:0f:
ef:74:c8:48:89:05:6f:2c:46:78:b4:1a:f4:1a:1f:
b7:17:cc:33:e6:ec:73:e0:12:c3:af:91:0e:23:d8:
69:ef:93:83:96:a9:97:30:5e:22:36:fc:3f:81:a7:
e9:eb:6b:e9:cd:44:6c:cc:ea:f4:63:f1:5d:70:84:
75:80:02:51:c6:c4:fd:46:79:68:37:c4:0b:fe:6b:
a7:6b:80:a9:fd:f3:91:03:c2:b2:cf:3c:5c:26:9e:
1b:52:80:ff:27:bc:65:74:90:24:f1:5f:71:e7:7f:
3a:a2:5d:32:5d:18:19:3b:f4:90:9d:7e:15:bc:ab:
3d:22:03:72:90:5f:ad:93:e2:ba:96:17:b8:23:9c:
a9:a9:dd:29:db:29:16:3d:a8:c0:d2:95:4f:43:3f:
81:75:bd:a7:6f:66:99:7b:89:06:5e:b9:80:6e:60:
42:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:76:77:AA:CF:B1:3A:EF:7F:8A:77:E9:DC:06:EF:56:92:E9:03:07
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:64:39:d9:83:72:5f:05:50:94:d3:a4:d6:6e:40:05:fd:56:
91:fa:a3:67:5a:77:10:8b:6c:81:87:18:fd:cc:0c:28:21:1b:
2d:76:30:c5:35:26:e6:83:cc:53:1a:f4:97:56:d6:f8:93:7a:
82:a3:fb:b5:27:94:4b:6e:d0:ec:b1:04:1a:63:34:07:48:65:
36:cf:74:c1:08:e1:4b:5f:6a:27:38:da:52:f5:fa:13:98:2d:
0b:7c:62:b1:d1:f7:52:1c:34:6e:98:a9:7e:a3:67:3b:2a:46:
14:8f:e9:0c:cc:17:1c:7a:08:6a:b0:0d:a2:59:22:f4:4d:f6:
46:a6:59:94:57:29:8e:f6:39:14:c6:54:8d:6d:1b:e8:0f:47:
f0:33:39:d0:9c:c1:78:e0:25:b3:d8:a2:e1:7e:db:29:a3:48:
70:54:28:da:85:15:de:f1:5e:4c:d3:eb:48:ce:bf:0b:11:b9:
06:d1:e4:f5:d9:7e:78:92:a4:eb:1a:9c:c2:b0:33:e9:94:b8:
39:58:bf:ac:44:4b:f5:a3:b9:aa:d6:6f:75:63:d8:00:fc:e9:
40:e8:bd:0f:0f:65:c9:45:7e:e1:d0:32:a7:4a:9c:38:82:c5:
52:dd:14:c8:39:6a:8e:29:ff:6e:d0:23:34:69:ba:62:3e:91:
fd:01:30:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 07:28:09 2025 by rpki-client