
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
File: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft (raw, json)
Hash identifier: L0yXR7F40c0hbhdTocU+6vl3RGwJVz1Ki03e3EbrRtQ=
Subject key identifier: 73:9E:5D:F3:AD:00:EA:92:8B:EA:8F:8B:8D:50:1F:78:4C:19:7A:19
Authority key identifier: F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
Certificate issuer: /CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Certificate serial: 0197499EFA6031A947FAA305CD63FC6CE940
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
Manifest number: 0835
Signing time: Sat 07 Jun 2025 09:00:44 +0000
Manifest this update: Sat 07 Jun 2025 09:00:44 +0000
Manifest next update: Sun 08 Jun 2025 09:00:44 +0000
Files and hashes: 1: 8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl (hash: bXoePZLPyo827+uExtXG0yJQJQwTO2grq54vljZfDNU=)
2: UroSMBJ-dWGGRFh5Y1mFEYghmuA.roa (hash: m8pCii9ZrFUBgw1JUoFjV1fAPuVi2H0sk6feFoafD2M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:fa:60:31:a9:47:fa:a3:05:cd:63:fc:6c:e9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f5e0181c4bbae5c090ab159d06562f1322e278
Validity
Not Before: Jun 7 09:00:44 2025 GMT
Not After : Jun 8 09:00:44 2025 GMT
Subject: CN=739e5df3ad00ea928bea8f8b8d501f784c197a19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:3f:5f:00:58:74:0a:6e:7b:fc:be:ea:ec:
f4:40:7c:f5:1f:c1:ce:a5:33:29:15:06:38:00:63:
b8:d3:13:3c:99:2d:fe:9b:f9:73:54:24:f3:2d:0c:
14:f8:68:a3:a9:f0:1f:1b:75:a9:ba:92:22:71:f2:
e4:6f:06:9f:03:1c:c5:e3:be:d1:63:fb:a0:d8:8a:
29:e9:64:63:be:9e:7f:59:50:19:d1:4f:f2:6d:23:
cd:eb:9a:ef:97:fd:1a:7f:6c:c9:1e:0d:02:1c:54:
a1:a6:aa:a7:1c:59:51:2d:4e:07:d7:e2:cd:f8:63:
20:8c:4e:4e:c0:d3:00:a4:41:a5:e6:6c:f7:a1:d6:
d3:ea:29:9d:5a:31:1d:c4:10:92:74:1c:b4:ad:d0:
46:2f:78:1c:54:a4:88:22:8f:13:aa:6a:6a:1b:ec:
bc:c9:74:b0:7d:e7:2b:38:7c:6b:a7:77:33:fd:79:
43:03:3f:a5:d3:22:2a:84:cc:43:b2:83:f5:0f:1c:
f7:57:49:10:a7:6f:82:27:f7:dd:1b:69:e6:77:f3:
77:00:ab:5b:c3:0f:ff:a6:ac:13:81:78:62:74:45:
94:dc:68:6d:9c:d9:38:a7:55:79:05:27:09:61:75:
80:b8:e7:af:59:3b:83:cb:3c:ac:56:57:e1:15:b9:
a6:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:9E:5D:F3:AD:00:EA:92:8B:EA:8F:8B:8D:50:1F:78:4C:19:7A:19
X509v3 Authority Key Identifier:
keyid:F1:F5:E0:18:1C:4B:BA:E5:C0:90:AB:15:9D:06:56:2F:13:22:E2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fXgGBxLuuXAkKsVnQZWLxMi4ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/294683-5747-4ea1-b77c-9bebf7dcc1a6/1/8fXgGBxLuuXAkKsVnQZWLxMi4ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:8d:7d:fa:9d:c4:9f:43:87:82:78:8d:f9:f5:ad:9f:93:09:
5e:6e:f0:cd:01:92:27:d5:29:54:78:7c:4f:ec:51:9e:46:ab:
bf:7f:c9:b1:7d:b0:37:43:6f:9d:f3:07:9f:8c:a2:e9:d5:f6:
bf:e7:11:c1:4d:b4:be:2e:9c:af:56:96:7f:e3:3f:14:89:a4:
e4:33:6a:dd:22:28:d6:7e:b0:a7:6d:98:a9:0e:6c:26:42:9a:
94:55:36:22:3e:23:74:e3:84:ff:84:8b:72:0f:ae:cf:d7:79:
da:08:b3:b3:53:06:a8:b9:a5:f6:be:93:3f:87:87:11:ae:61:
ce:ee:92:c9:2a:93:8f:36:52:92:e5:a7:00:ca:97:83:b6:de:
72:7d:b1:17:16:12:8a:d8:3e:bd:51:84:3f:97:9f:f1:92:23:
46:35:c8:0f:e3:d4:e0:49:d0:b7:1e:8b:84:4d:36:b3:60:20:
f1:2f:8d:21:28:11:a8:c8:d1:9e:d8:7a:46:55:95:3e:e9:f7:
31:31:2c:06:60:35:9d:96:5c:3f:cb:ed:e9:48:45:f0:0c:b1:
74:e7:a9:9c:ee:96:a1:7f:f0:fb:f7:37:96:3a:bc:97:ae:6c:
68:55:2a:a8:16:e5:a5:32:67:14:4d:18:71:6b:23:53:2a:f7:
91:6b:db:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:09 2025 by rpki-client