Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
File: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft (raw, json)
Hash identifier: DBHRtDr5X138Viue5JmhTbQlFh2UitKU6qycTYOIad4=
Subject key identifier: 1C:BC:F9:8C:0A:BD:8F:D4:9D:34:B2:67:22:F2:13:E1:F9:A0:08:8A
Authority key identifier: F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
Certificate issuer: /CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Certificate serial: 019753EB790DFA85888FC0B9A961CB60CECF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
Manifest number: 01F2
Signing time: Mon 09 Jun 2025 09:00:30 +0000
Manifest this update: Mon 09 Jun 2025 09:00:30 +0000
Manifest next update: Tue 10 Jun 2025 09:00:30 +0000
Files and hashes: 1: 5706RB7xeG9S4d5Ob5hAT-sWDQM.roa (hash: 3YUiY2PHwBycE1YPX5AAcbWdNPxFb9hnL/xR1TAUp9s=)
2: 8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl (hash: E00RL3obQUINBh4ygXgJUNhouDP512/CttHPJxhNOAM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 09:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:eb:79:0d:fa:85:88:8f:c0:b9:a9:61:cb:60:ce:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31ffb54cac7f5b5768569e4197d41d7446bf1fc
Validity
Not Before: Jun 9 09:00:30 2025 GMT
Not After : Jun 10 09:00:30 2025 GMT
Subject: CN=1cbcf98c0abd8fd49d34b26722f213e1f9a0088a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:30:99:1e:37:f3:ad:90:97:6e:73:0d:27:d8:
6e:a1:04:90:c1:29:e1:6a:e1:fe:bc:b3:62:3e:ba:
6b:60:d8:74:3f:2e:9c:a3:65:98:99:77:dc:76:72:
b0:52:d1:f2:cb:b0:9a:3e:ac:40:1e:32:c8:6f:60:
18:0e:48:00:5d:70:89:42:eb:3b:68:44:76:b6:27:
b5:35:5e:0a:da:f6:9f:6b:f2:8f:7a:4b:fa:66:5a:
6b:01:3b:25:39:f3:c6:af:fa:3b:4b:e3:05:c1:c3:
26:d3:8f:39:38:70:11:9f:46:4a:eb:a8:fe:0c:0d:
27:92:bb:a1:ee:06:28:d7:00:56:05:a4:61:fc:61:
d9:5a:4a:8d:76:c5:58:bc:65:13:49:ed:22:05:19:
6a:c8:7e:77:53:3b:9d:92:dd:2e:b9:57:4e:3b:bb:
5a:88:86:37:33:c2:71:f5:d2:45:f7:65:14:8b:8c:
08:88:a9:3e:e4:43:bc:d4:6f:d5:83:58:ee:d3:ba:
84:47:6f:25:32:dc:0b:9e:7e:fb:6b:0e:44:58:e8:
a2:40:1d:1e:cd:f2:41:47:42:ee:a2:f6:52:99:8d:
cd:10:51:c3:47:1b:8e:e8:68:96:9e:6e:5b:19:1c:
6b:8c:ce:5b:28:f6:5a:6b:ed:86:5b:e8:b8:7c:90:
1a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:BC:F9:8C:0A:BD:8F:D4:9D:34:B2:67:22:F2:13:E1:F9:A0:08:8A
X509v3 Authority Key Identifier:
keyid:F3:1F:FB:54:CA:C7:F5:B5:76:85:69:E4:19:7D:41:D7:44:6B:F1:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x_7VMrH9bV2hWnkGX1B10Rr8fw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/6c3702-1178-4cbd-8eba-c0384fe1b007/1/8x_7VMrH9bV2hWnkGX1B10Rr8fw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:2a:5e:e1:b5:bc:a2:af:21:fb:31:eb:0c:b5:3c:ed:7e:34:
fd:88:e4:7d:1b:81:da:39:9e:16:ee:52:54:3d:40:2c:37:fb:
11:fb:35:40:87:71:b0:eb:50:10:10:33:77:ea:64:89:cb:93:
53:c5:d0:86:1e:e2:17:ec:17:4b:b7:4f:e0:fa:da:6f:e8:82:
08:96:e9:9b:d5:3e:01:bd:51:34:db:c4:1c:d7:55:61:61:43:
ea:6e:8e:ab:06:96:f8:14:ed:26:fc:a9:ee:67:56:da:1e:4e:
67:23:8c:85:d6:2b:d0:16:28:f2:3f:68:c9:73:46:1b:d7:ee:
b7:f7:16:d0:81:87:74:7a:08:ff:9c:f8:8b:0d:81:6b:42:f9:
91:fc:52:36:63:89:a9:f1:d8:d4:50:82:83:e5:19:3c:12:ad:
01:39:27:26:f5:88:38:b8:b9:a8:24:45:cb:66:ee:e2:76:85:
b7:74:7b:64:26:fc:03:7e:cc:bc:4c:93:37:ae:53:05:df:31:
9b:cf:b3:ec:77:5a:7a:f3:6c:44:80:c8:f4:0e:b9:41:31:ca:
51:93:57:54:4d:b0:3b:ca:3b:dc:83:61:5c:79:49:db:24:dc:
98:d2:cd:b6:19:16:39:6e:dc:cf:b5:95:b2:1c:a2:31:b1:0b:
6d:34:d2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 19:38:38 2025 by rpki-client