Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
File: 8l_UfYNvym90HKo4I5N_S7HxspQ.mft (raw, json)
Hash identifier: c+AfdKbGW5n2KW+8sCnZXn3RNXV6tSd0QgDSsYdONbY=
Subject key identifier: 39:04:B7:ED:D4:39:CE:B1:DA:53:17:62:2B:58:3E:D2:04:F6:19:04
Authority key identifier: F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
Certificate issuer: /CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Certificate serial: 01974AB1B17DB30E88B43ED4DED8E737B0C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
Manifest number: 0769
Signing time: Sat 07 Jun 2025 14:00:48 +0000
Manifest this update: Sat 07 Jun 2025 14:00:48 +0000
Manifest next update: Sun 08 Jun 2025 14:00:48 +0000
Files and hashes: 1: 3yojvf8xLy7Wn7IouQzlSqK0wi8.roa (hash: XkJKLziNIIGZCpFPWVC2bt7aic/Y/irC0qgPRJLIevw=)
2: 8l_UfYNvym90HKo4I5N_S7HxspQ.crl (hash: yO1oSabVO7p1ednOEffCDefKf8W/T47+BkRnaEbwqgI=)
3: zzDFF83rooq9bozHtYL_dATXTDM.roa (hash: MyfSjNe+EtbThUkyyT8a+4fAUtZTRsF/D/cpjHn7JnY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:b1:7d:b3:0e:88:b4:3e:d4:de:d8:e7:37:b0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f25fd47d836fca6f741caa3823937f4bb1f1b294
Validity
Not Before: Jun 7 14:00:48 2025 GMT
Not After : Jun 8 14:00:48 2025 GMT
Subject: CN=3904b7edd439ceb1da5317622b583ed204f61904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0a:3d:eb:83:42:69:92:8f:ee:38:5e:99:83:
0c:5d:32:7a:cd:47:36:da:ed:a6:be:17:bd:47:68:
6a:ed:ef:3c:a1:9f:e9:0e:f1:e9:05:e8:af:69:8c:
3e:05:6b:8e:46:be:65:30:8e:51:09:5a:39:09:1f:
84:be:22:9e:2a:4c:81:86:f9:76:3e:04:9d:ef:ad:
88:0f:67:d8:ad:4a:cb:ee:82:d5:65:56:22:1a:4a:
f0:c2:e6:b8:b1:0c:07:24:26:77:15:83:5a:5a:c8:
91:89:37:16:1b:b6:83:79:a3:7f:5c:21:f1:b7:5f:
3c:ae:eb:cd:69:22:92:cf:0a:81:a7:c4:ad:fc:a6:
5d:a6:ea:b3:e1:18:3a:a9:06:e9:3b:9a:fd:3f:cb:
e9:cf:36:3c:d5:06:43:00:02:2c:17:84:8c:89:bd:
25:7b:32:3e:3e:39:65:b9:1a:aa:0a:3d:dd:f4:a1:
47:61:4f:38:b9:ac:99:24:c4:60:e5:9e:5c:44:b6:
90:26:c0:d3:ab:04:5f:81:c7:65:67:cc:16:b2:d1:
6a:e8:e1:81:89:0f:49:0c:f2:e4:58:db:70:5b:6d:
14:f1:be:4a:b4:a7:8f:8d:7e:02:25:58:19:21:81:
73:76:a2:12:ec:28:60:8e:03:83:e3:06:f8:d8:f1:
10:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:04:B7:ED:D4:39:CE:B1:DA:53:17:62:2B:58:3E:D2:04:F6:19:04
X509v3 Authority Key Identifier:
keyid:F2:5F:D4:7D:83:6F:CA:6F:74:1C:AA:38:23:93:7F:4B:B1:F1:B2:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8l_UfYNvym90HKo4I5N_S7HxspQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/296eec-4f04-4a25-a843-bb7a43e57f38/1/8l_UfYNvym90HKo4I5N_S7HxspQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:4c:36:31:fd:9b:92:df:b1:7e:71:81:64:9a:12:0e:64:ed:
af:1d:db:0e:8a:a7:3a:96:45:00:92:ce:8b:ec:e1:92:ea:f5:
a4:7a:cf:ce:13:21:d5:92:3c:01:e5:09:76:41:c7:83:1c:52:
77:11:c1:ba:ad:bd:d5:e7:b2:e1:37:54:ac:4b:aa:5f:68:fd:
81:40:a3:e5:fe:d3:89:ce:97:1d:64:37:29:ec:e2:a0:41:d7:
19:e6:28:d2:9a:c9:3b:a3:6e:4a:48:00:f1:d0:31:59:7d:57:
e0:29:1a:d9:2e:4b:49:1b:4f:8d:e3:6c:e8:5e:bd:dd:dd:86:
cf:1f:fa:a0:3f:4e:cc:33:3e:7f:a3:ec:92:10:2f:f5:c2:28:
f9:90:b3:d3:9c:29:d0:34:42:f0:06:79:de:f6:44:5f:87:0d:
ca:ea:f4:15:30:46:bc:7c:a6:a9:1e:20:b4:f1:b5:fc:6d:e8:
a7:52:5a:e0:f4:94:1b:52:b2:84:46:0c:97:dd:56:18:df:29:
17:c5:1b:41:b2:41:f3:2e:9c:f3:97:fd:47:fd:5c:01:dd:5d:
bd:81:32:70:63:a7:4a:e8:75:b8:6d:07:ae:f1:15:e4:2e:a9:
30:66:05:b6:41:4f:c1:5b:5f:3b:8a:66:22:1c:d5:dd:80:02:
73:02:f5:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 23:33:39 2025 by rpki-client