Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
File: 8-7mn4nyRS3K6JgpR7LRRpU3lns.mft (raw, json)
Hash identifier: q5cNTUZl2Qr7WWf/m+roUrKbvx3DNqXiUQcobafhy7Y=
Subject key identifier: 5A:C4:BB:F4:B5:0B:7A:B9:4D:45:E5:62:D0:0A:D9:B7:FE:2A:85:22
Authority key identifier: F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
Certificate issuer: /CN=f3eee69f89f2452dcae8982947b2d1469537967b
Certificate serial: 01975422EB36DC358DBFD49C04DB4D7030A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
Manifest number: 1581
Signing time: Mon 09 Jun 2025 10:01:03 +0000
Manifest this update: Mon 09 Jun 2025 10:01:03 +0000
Manifest next update: Tue 10 Jun 2025 10:01:03 +0000
Files and hashes: 1: 8-7mn4nyRS3K6JgpR7LRRpU3lns.crl (hash: 6jk/MoWl27fYDn//heabe/htpvRaWqgojW0OXqjBUPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:eb:36:dc:35:8d:bf:d4:9c:04:db:4d:70:30:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3eee69f89f2452dcae8982947b2d1469537967b
Validity
Not Before: Jun 9 10:01:03 2025 GMT
Not After : Jun 10 10:01:03 2025 GMT
Subject: CN=5ac4bbf4b50b7ab94d45e562d00ad9b7fe2a8522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2c:3a:6b:b2:b6:8e:89:7b:e8:13:76:95:a6:
1c:58:aa:57:ad:cb:6f:5e:57:a8:9e:aa:07:38:06:
53:2b:ef:e0:94:87:7d:7c:e2:a6:98:21:3c:a4:7e:
46:43:e8:c4:f3:5c:bc:da:b9:c1:ed:73:98:59:41:
c1:32:e1:2d:cb:ea:ba:f8:6d:4c:1e:c4:d0:7b:b1:
b4:1f:14:ea:7c:49:d1:86:a3:8c:ed:57:a9:c0:9f:
24:68:58:73:98:16:73:59:f1:8b:65:ca:0d:1b:08:
15:9a:d8:5d:82:b0:f0:bc:8e:0e:2a:cd:09:be:a2:
bc:a6:91:9a:db:a4:37:24:a9:39:12:03:94:5f:28:
c5:65:02:d9:64:0f:e1:11:a2:d0:2c:07:d7:ca:09:
ba:38:24:54:0a:bd:63:35:b8:62:09:d7:5a:00:f0:
ec:3f:ef:29:27:df:c8:f5:d6:64:7d:2f:3d:40:01:
85:b6:6f:4a:e2:25:e4:90:a2:ae:b8:8f:c6:7f:44:
ec:21:50:1c:04:41:d8:c0:a7:e3:cc:e3:0f:f2:a4:
7a:2d:3d:ac:f2:62:09:be:39:19:cc:ee:9a:36:d3:
d3:2d:dd:4b:23:31:84:2a:1e:e5:c7:05:02:f7:90:
4d:01:17:1c:da:9f:d9:06:f7:69:af:db:6c:19:c1:
9b:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C4:BB:F4:B5:0B:7A:B9:4D:45:E5:62:D0:0A:D9:B7:FE:2A:85:22
X509v3 Authority Key Identifier:
keyid:F3:EE:E6:9F:89:F2:45:2D:CA:E8:98:29:47:B2:D1:46:95:37:96:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-7mn4nyRS3K6JgpR7LRRpU3lns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/e86074-e6d0-49be-9592-7c427234d5ff/1/8-7mn4nyRS3K6JgpR7LRRpU3lns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c6:4e:29:13:fe:62:df:7c:34:25:70:e6:5c:64:b9:1b:63:
33:1f:78:ec:fc:76:c4:3a:74:11:70:24:71:ad:7c:a7:40:64:
de:8e:1d:ab:70:14:62:82:39:9c:a5:a4:f1:14:1a:c2:01:f6:
5f:e9:c9:45:f3:07:9b:ea:5f:66:ae:73:bd:82:22:fb:4f:b9:
c9:dd:2b:96:73:fb:d7:38:33:67:b8:06:19:65:18:68:45:5d:
cf:d6:fa:1b:bc:71:6b:50:f6:16:61:c7:71:68:15:40:ec:67:
a7:1c:b3:77:3c:ef:b1:cc:bb:ed:41:f0:1d:7d:1b:06:3d:75:
3e:73:59:ae:e7:71:5d:b4:fe:f8:9e:67:93:9c:1f:64:92:d3:
7c:27:1a:7c:1e:81:f1:3a:4c:c8:87:84:33:ec:f3:25:40:14:
80:90:8b:a2:09:99:82:fa:6c:16:16:94:cf:30:fa:a0:5e:d1:
56:de:3d:de:5e:bf:52:14:8c:2a:08:d4:2d:5e:de:b8:6a:bc:
7b:e8:aa:87:2d:da:37:c3:8d:33:74:76:72:88:03:26:d2:82:
70:f6:7e:f0:82:f0:d3:85:5f:10:96:d7:77:56:74:85:76:7b:
d0:61:e8:90:02:81:d9:cd:a4:f1:58:fb:15:66:f3:df:f5:41:
35:08:04:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:54:52 2025 by rpki-client