Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: CWapNIEPd/Xyx5kmYx75wodP4toz678VDSE7JFYk5SM=
Subject key identifier: 97:F6:87:FA:1E:5A:36:2D:E9:17:08:5B:59:7C:8C:CB:16:F6:98:0C
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 01976F2CF26E51EA6AFB8BE9F06564336543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 158F
Signing time: Sat 14 Jun 2025 16:01:45 +0000
Manifest this update: Sat 14 Jun 2025 16:01:45 +0000
Manifest next update: Sun 15 Jun 2025 16:01:45 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: ZkA+S+H49JS75mqxU/JJ3B9k6IuBPSkFdMqXKfm8Jvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:f2:6e:51:ea:6a:fb:8b:e9:f0:65:64:33:65:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Jun 14 16:01:45 2025 GMT
Not After : Jun 15 16:01:45 2025 GMT
Subject: CN=97f687fa1e5a362de917085b597c8ccb16f6980c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:59:52:a5:72:27:24:00:36:8b:e1:19:cb:
a9:77:d4:b8:71:0c:05:56:3d:c8:8c:74:2d:b0:92:
38:97:ac:5c:25:a1:2f:5b:22:4f:6d:8d:5c:69:a2:
e2:df:45:78:ac:c5:21:e4:dd:70:2b:b4:90:d9:6c:
ca:c3:4f:49:3d:ee:7a:51:38:4d:ff:bf:66:fd:1e:
9c:59:f0:6e:11:fa:88:d7:53:45:7e:cd:59:6c:10:
7b:48:1a:25:d8:f8:a4:e9:ce:8a:28:4b:08:0a:9f:
e8:ff:50:77:c0:86:4e:2b:04:c9:0d:03:5e:54:31:
f7:66:ff:92:9f:05:3a:36:ff:bf:01:13:5c:e4:10:
6a:25:3e:1c:07:6c:9d:0b:a4:67:ed:b9:32:cc:fe:
0a:91:5e:3a:df:4b:71:ad:e7:2d:2b:05:02:d0:98:
fc:97:18:28:b9:6e:9c:4f:88:ac:d4:e9:51:44:34:
d1:8f:56:b8:d8:ae:72:17:17:c7:ba:24:fc:d3:46:
42:6f:f5:ab:d4:99:52:ae:f9:cc:25:9f:1d:cd:67:
bf:d4:5a:13:35:82:9e:ef:34:9a:a9:93:a4:61:74:
9e:b3:a3:95:bb:61:75:4d:b4:2c:03:ae:8b:d0:65:
91:ed:fe:47:c0:3e:13:12:3c:ce:c3:4f:42:1e:a2:
6e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F6:87:FA:1E:5A:36:2D:E9:17:08:5B:59:7C:8C:CB:16:F6:98:0C
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:b5:61:d0:33:74:65:3c:42:7c:d8:e3:3c:63:5f:75:b3:66:
49:44:9e:a6:e4:1d:5a:24:f0:c5:5a:0e:d2:cf:6d:64:02:bb:
47:ea:90:5c:c9:b6:43:5a:fa:3b:ca:1b:5f:c6:78:2d:7a:59:
09:ea:5a:7e:77:0c:ea:f4:0f:7b:75:06:9c:c9:24:bc:ed:63:
6b:2a:28:3c:16:54:de:5b:39:39:11:d0:f4:80:f3:b6:21:5b:
94:da:55:ab:15:00:51:40:d9:3e:b5:39:60:93:93:2a:24:94:
e0:13:e1:d3:b0:c3:cb:4a:7e:9c:13:ca:c1:67:0e:c5:3a:89:
76:53:70:6c:26:04:51:14:e0:77:23:92:6d:32:58:ba:dd:2a:
aa:69:c8:4d:80:8f:1e:82:78:a2:cf:fd:03:59:3f:da:e8:b4:
94:47:80:34:b7:d1:28:77:30:2f:ca:fc:1b:91:a5:21:a8:bd:
e0:f8:97:87:4f:43:4b:c6:a8:ac:bb:bc:b1:0a:87:5e:be:1d:
b7:ed:8e:11:94:54:2d:57:5a:f0:4e:ef:32:cd:0e:e8:3c:f5:
4a:71:34:6a:5a:15:31:71:7d:f7:52:40:21:42:59:d1:2d:9c:
f4:d1:75:c2:54:8a:d9:f5:8f:c6:b3:a0:3b:a7:86:d3:e7:e6:
c4:46:43:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 19:33:46 2025 by rpki-client