Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
File: 12b8bxuOK2BPf7c8Kf1daJoOqB0.mft (raw, json)
Hash identifier: PEe/vwshtYIoZHZlJug7a+XExS/nfqrfmRHZHQA0y9I=
Subject key identifier: 8C:DA:9D:AA:46:6A:FD:FB:3C:6D:28:40:60:22:DA:CA:EE:78:21:3A
Authority key identifier: D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
Certificate issuer: /CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Certificate serial: 019749687B1F39421BC2C1BDCBB4A57139AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
Manifest number: 158B
Signing time: Sat 07 Jun 2025 08:01:13 +0000
Manifest this update: Sat 07 Jun 2025 08:01:13 +0000
Manifest next update: Sun 08 Jun 2025 08:01:13 +0000
Files and hashes: 1: 12b8bxuOK2BPf7c8Kf1daJoOqB0.crl (hash: /hBFkKK7iMgu4E4CAJXoETtBplcguoUpK/LsVdSqOeI=)
2: qGuTXxX3KPPGE7gornZUmtCgXus.roa (hash: hoxbUVU+eahUxnAmZd8qLyauIUnjncf8aJqcwbWkeXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:7b:1f:39:42:1b:c2:c1:bd:cb:b4:a5:71:39:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d766fc6f1b8e2b604f7fb73c29fd5d689a0ea81d
Validity
Not Before: Jun 7 08:01:13 2025 GMT
Not After : Jun 8 08:01:13 2025 GMT
Subject: CN=8cda9daa466afdfb3c6d28406022dacaee78213a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:6c:55:e0:b4:4a:4a:3b:76:2c:34:88:36:78:
92:dd:cc:b6:5e:30:1e:ef:f7:da:ea:ac:1e:5e:b0:
05:9a:41:68:a5:7f:a8:ca:18:85:38:3b:0e:67:76:
9a:38:04:cb:eb:64:19:ef:38:b9:00:de:43:43:2a:
53:b1:82:84:22:94:d9:fe:87:be:a8:da:14:e5:9c:
6a:b8:cd:4f:31:15:1a:1f:52:e8:af:e6:ca:69:e3:
eb:8c:bd:5a:53:fb:e8:7f:f3:f3:78:14:bc:f9:18:
ef:14:ba:5f:7c:2d:3f:3e:f7:af:a0:03:40:ff:dd:
06:34:27:7e:57:9b:71:cb:92:f7:13:4e:0f:85:6c:
f8:80:72:53:ee:ee:27:01:d5:83:81:67:fc:cb:95:
cf:d1:ea:3f:1c:19:38:6e:a0:7e:b7:4c:0f:8a:2f:
4f:a6:17:6a:b9:b8:67:80:48:d2:60:e7:00:5d:85:
2f:d7:74:b9:c3:44:25:ec:81:fd:8f:6d:91:09:c9:
4b:a6:77:c6:6e:f2:46:8c:a0:cb:71:dd:7b:8d:6e:
96:41:2a:b8:d6:99:f1:2f:c2:76:b0:64:95:7f:0c:
7b:ce:94:ea:dd:fc:af:4c:6b:19:83:eb:ab:31:97:
39:93:1f:57:68:bd:1c:7c:dd:05:b5:e2:fd:82:b8:
7c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:DA:9D:AA:46:6A:FD:FB:3C:6D:28:40:60:22:DA:CA:EE:78:21:3A
X509v3 Authority Key Identifier:
keyid:D7:66:FC:6F:1B:8E:2B:60:4F:7F:B7:3C:29:FD:5D:68:9A:0E:A8:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/12b8bxuOK2BPf7c8Kf1daJoOqB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/f3829a-9527-444b-bd72-3ef3fd969957/1/12b8bxuOK2BPf7c8Kf1daJoOqB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:19:2b:8b:37:de:7d:8e:62:b4:aa:3a:f0:45:e6:d6:dd:31:
8a:10:61:a2:ca:f7:d4:35:0c:72:a8:01:ae:ee:9e:02:c4:b7:
2b:92:2f:43:5e:b6:41:f4:58:85:4d:26:14:b6:1a:c2:5f:f9:
d3:9c:d0:93:75:5a:be:f6:c0:93:53:ba:6c:54:19:93:b6:90:
d2:f6:76:e0:8a:8b:df:88:f1:8a:6e:3d:e2:84:ad:6b:44:6f:
5b:46:0f:4e:83:b3:6f:f6:ff:59:c6:c6:b4:76:00:3e:14:4b:
ce:d2:0f:3c:30:e7:86:27:b3:27:a5:af:eb:93:4c:f2:fc:f0:
89:16:c5:01:af:22:eb:ad:34:6e:bd:9d:55:07:0e:63:c2:96:
43:de:53:5a:fc:27:a3:b7:cb:5c:89:47:45:1e:9d:18:ad:70:
56:9d:ef:bb:94:5b:94:1d:16:fe:52:07:96:0b:6b:76:57:ac:
05:f7:75:f3:26:0b:b7:88:c3:b9:cf:3c:5a:ce:39:18:1c:0e:
34:81:14:5a:52:28:35:fb:a2:0a:6c:85:18:9b:54:bf:34:ba:
2f:12:a0:70:9c:73:35:85:96:92:ce:27:db:67:3f:47:1e:b0:
d5:0d:f0:32:22:05:43:66:d7:68:23:6d:95:7a:9e:36:c6:2a:
a3:0e:fe:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:32:21 2025 by rpki-client