Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
File: 8-NiIsy8bHIhNgVAurOp26nyN6A.mft (raw, json)
Hash identifier: +MJPDHrnlHXG6WvdYY/sowzRHVmLg3Pyd18XNsKkFks=
Subject key identifier: 7F:23:CB:A4:D8:45:E6:F8:67:2D:A5:58:E5:9F:50:6D:13:2B:13:EB
Authority key identifier: F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
Certificate issuer: /CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Certificate serial: 01974930F1B11CAEE3A2FB8EFDF1F8F17941
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
Manifest number: 133C
Signing time: Sat 07 Jun 2025 07:00:33 +0000
Manifest this update: Sat 07 Jun 2025 07:00:33 +0000
Manifest next update: Sun 08 Jun 2025 07:00:33 +0000
Files and hashes: 1: 4OAQQVO8VIFzfsVpiMv8jSSll54.roa (hash: JMcD21CurSjrVb9e/Fa0SxXVumzBh+XhCdZn2t0vX/k=)
2: 8-NiIsy8bHIhNgVAurOp26nyN6A.crl (hash: eGCsYAlBfRFPzd79Tur7yCQ0nRWAc/lTKHQGeMaqshQ=)
3: S4_bZaUrYeif2UyHHeNglamlIdY.roa (hash: xW3QM1MxANWCikFD0BTEoT7OwPC4SDKTPMb/5xd/WUE=)
4: k8gLy7StQaIvKZDqraAi2w_fvtc.roa (hash: SkLPv2Z8PHPm64h4i6RldP3OE6ycpgOCRTvbQRULZdo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:30:f1:b1:1c:ae:e3:a2:fb:8e:fd:f1:f8:f1:79:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e36222ccbc6c7221360540bab3a9dba9f237a0
Validity
Not Before: Jun 7 07:00:33 2025 GMT
Not After : Jun 8 07:00:33 2025 GMT
Subject: CN=7f23cba4d845e6f8672da558e59f506d132b13eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:fa:62:fc:85:53:b5:55:33:62:40:6c:95:ec:
66:86:70:fc:a6:21:0f:5e:92:6b:dd:b0:f7:d9:73:
b1:0a:70:1c:6b:42:4d:c6:72:53:0c:52:da:a3:ca:
da:82:c7:bc:aa:ba:4b:ef:d0:18:4c:e4:e1:b9:af:
15:82:c3:d4:3e:38:4f:1d:cc:38:4f:e1:fe:57:ac:
53:7d:10:ae:d5:e4:d5:99:f0:8b:fb:44:fd:68:70:
38:6f:a9:87:e0:5c:a6:34:cd:27:39:b4:3e:82:2b:
16:31:c8:c3:d0:e4:91:72:89:c2:fb:22:da:1f:64:
8f:81:a7:99:2f:66:be:fb:e4:49:91:70:f5:21:d3:
ec:8e:c3:3c:4d:f3:66:0e:49:30:12:f1:3a:ab:7a:
52:71:47:de:13:a2:57:7f:dd:2d:d3:78:7b:1c:f1:
c9:7b:f4:7a:46:6d:3f:78:b5:34:ec:2e:67:8c:dc:
cc:98:2f:b4:c3:41:60:35:c6:59:37:e8:08:3d:e5:
6d:54:dd:38:02:6c:86:03:3d:53:df:df:6b:7b:79:
6d:c4:6b:16:23:a4:05:d9:f6:80:a0:55:ad:57:fe:
94:75:89:c5:f4:51:08:88:38:21:56:70:b2:12:92:
76:97:13:16:b0:43:19:36:72:0e:0c:9a:fb:ec:55:
1a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:23:CB:A4:D8:45:E6:F8:67:2D:A5:58:E5:9F:50:6D:13:2B:13:EB
X509v3 Authority Key Identifier:
keyid:F3:E3:62:22:CC:BC:6C:72:21:36:05:40:BA:B3:A9:DB:A9:F2:37:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-NiIsy8bHIhNgVAurOp26nyN6A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/cc48f4-0d93-4b69-8a4f-8724ed5e903a/1/8-NiIsy8bHIhNgVAurOp26nyN6A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:94:1a:7d:1d:42:bc:16:b9:1a:90:a2:24:f5:cf:b0:56:b4:
70:21:9d:e3:42:63:b8:2c:10:1d:b3:e1:cf:9a:67:8a:a4:3f:
d6:5e:e5:4e:4e:57:db:29:a6:70:98:fe:87:b9:b7:b8:ca:56:
05:e4:93:5e:7e:d5:db:f6:c5:46:3d:65:39:42:c2:d3:d8:58:
55:91:14:3d:0e:fe:6e:5c:d5:3f:76:02:b3:b6:86:2e:5f:42:
75:63:6e:5b:de:87:be:d3:0b:13:64:a8:a8:68:36:24:da:be:
2d:38:dd:48:f5:1d:5c:03:8c:1e:e9:26:53:dc:64:25:43:72:
df:b7:a9:50:78:b8:7a:25:64:92:77:c0:df:7f:86:73:57:f1:
15:8d:1b:fa:6d:35:7c:f7:d6:9b:b4:a8:53:67:9b:bd:61:0e:
71:fd:22:61:a1:1a:a5:d6:05:7d:3b:ba:16:bf:83:27:f7:87:
9b:96:35:e2:7d:66:e0:5e:7f:67:43:32:68:7b:68:26:31:29:
d5:74:4b:31:54:fa:de:07:e0:fd:6f:b0:14:ff:3d:b8:82:c4:
51:e6:37:2b:3b:62:5a:02:dd:10:56:ee:52:34:fe:69:7a:ec:
7b:d1:d4:b6:d6:ce:a3:cb:d2:c3:8f:b2:8f:c4:c1:44:81:a7:
d1:cf:0b:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:15:07 2025 by rpki-client