Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft
File: 8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft (raw, json)
Hash identifier: /nvzK+P7s68X9R8o5dkKUfR5fw7zkpT8WbqYPTehPjk=
Subject key identifier: 41:22:EC:2F:E0:77:2F:61:7E:0A:97:59:37:E1:0D:8E:D4:F6:29:A5
Authority key identifier: F2:96:E2:58:12:11:68:07:C8:BF:7A:BA:C5:C6:95:BE:B4:1B:85:CF
Certificate issuer: /CN=f296e25812116807c8bf7abac5c695beb41b85cf
Certificate serial: 01975234F031D61D0D443307FD831CC6841B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pbiWBIRaAfIv3q6xcaVvrQbhc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft
Manifest number: D9
Signing time: Mon 09 Jun 2025 01:01:30 +0000
Manifest this update: Mon 09 Jun 2025 01:01:30 +0000
Manifest next update: Tue 10 Jun 2025 01:01:30 +0000
Files and hashes: 1: 8pbiWBIRaAfIv3q6xcaVvrQbhc8.crl (hash: 3JRjEOT742fJCmZ90adB+YLy+TCt54iSI12fPlhrwfs=)
2: C_9wJpC7N12kOu0pJ_D7XheLG4E.roa (hash: gH4AEfeN7fzJJXj/ip3PiHbGkEFNAd9HeLBxlPcZ0hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pbiWBIRaAfIv3q6xcaVvrQbhc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:f0:31:d6:1d:0d:44:33:07:fd:83:1c:c6:84:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296e25812116807c8bf7abac5c695beb41b85cf
Validity
Not Before: Jun 9 01:01:30 2025 GMT
Not After : Jun 10 01:01:30 2025 GMT
Subject: CN=4122ec2fe0772f617e0a975937e10d8ed4f629a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a3:a3:b1:8b:c8:f8:4d:07:1a:2e:35:88:47:
62:c4:aa:5d:20:0d:f9:41:f5:4c:96:dd:90:2f:df:
a8:42:c1:33:0a:17:3c:d9:56:25:c4:c9:e9:11:9f:
43:6c:83:65:08:5c:b5:70:44:94:77:4e:4f:3c:af:
f9:08:18:7d:e4:26:96:2d:8f:5e:4f:d2:ff:c4:3d:
86:60:83:9d:25:d0:33:6f:32:81:10:eb:db:6a:01:
54:d6:d8:78:86:31:4f:74:91:a4:ac:25:b5:25:15:
e5:9c:f6:76:e0:4e:26:48:31:b5:20:56:69:39:1b:
c5:7d:cb:e8:e5:26:a3:0d:db:d9:9d:c6:a1:1f:e5:
57:65:26:37:81:61:97:cc:d4:7a:18:f6:7f:e2:8e:
62:0f:26:ee:0f:c2:b4:5f:79:f5:cb:73:96:f4:94:
f1:e8:2d:b3:4a:79:a4:0d:15:09:88:5d:ab:3f:03:
23:20:2d:ab:4d:38:f9:ba:e5:2f:f7:f9:60:cf:d5:
5c:09:c1:9e:09:e4:9c:52:e2:93:9b:f2:a1:ad:11:
70:4c:d6:01:34:05:9b:05:3a:eb:29:77:7d:62:ca:
58:f0:ba:a1:ee:9c:90:e9:4b:a3:e1:39:24:89:9d:
ed:cd:04:85:2b:71:71:ec:91:3c:7b:60:96:16:45:
77:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:22:EC:2F:E0:77:2F:61:7E:0A:97:59:37:E1:0D:8E:D4:F6:29:A5
X509v3 Authority Key Identifier:
keyid:F2:96:E2:58:12:11:68:07:C8:BF:7A:BA:C5:C6:95:BE:B4:1B:85:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pbiWBIRaAfIv3q6xcaVvrQbhc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/17f788-1fbe-40ba-84d1-46e41202b049/1/8pbiWBIRaAfIv3q6xcaVvrQbhc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:32:0b:d3:77:5a:64:c0:3c:cd:a3:54:0d:d3:0f:90:2f:fc:
fc:11:8b:fb:1d:79:d8:05:53:b5:99:8c:5b:c7:25:bf:1a:51:
57:1a:5e:03:48:27:9e:81:ac:cd:b1:1d:21:62:60:54:05:b3:
d2:0d:06:18:df:c4:28:d9:a8:a1:fb:ef:6c:ea:93:52:dd:1a:
f1:10:4a:5d:c7:22:71:f6:ad:8c:0b:c1:fe:19:8b:93:fb:47:
89:91:08:de:a0:15:35:a5:a9:2d:86:10:be:25:50:29:f5:eb:
86:7a:3a:7b:e8:d3:3a:0d:58:17:af:32:30:e8:62:23:9e:10:
47:68:77:10:7d:e6:4d:03:0e:8a:4e:14:86:14:f3:23:d3:be:
6d:77:38:b7:49:8f:d4:b1:78:69:39:8f:eb:f7:f9:08:84:32:
0e:6e:8b:03:fc:72:1a:dd:ae:fb:e2:bb:f3:5b:72:08:2b:44:
32:ef:fd:0c:f0:6e:5e:1f:b3:b8:20:91:b1:94:a7:59:d0:57:
63:bb:2f:1a:4d:ff:55:18:95:17:e2:d2:02:2c:c4:6f:86:7b:
78:46:2b:2f:0f:03:9b:31:58:46:ba:ef:8b:d1:fb:8f:e7:76:
cc:3b:fe:48:55:af:e1:82:06:5a:41:3e:6e:6a:65:83:3e:ad:
ba:18:ba:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 05:20:35 2025 by rpki-client