Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
File: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft (raw, json)
Hash identifier: 2RWFbp2napvwwK047yCukOVAsZ9iDny1z7805rVOg3A=
Subject key identifier: 75:54:68:44:B3:82:6A:5A:DC:5B:4B:38:23:D8:96:29:15:20:37:43
Authority key identifier: 21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
Certificate issuer: /CN=21df245ead9980d2b39533782f65d7566d0462d1
Certificate serial: 019750B3F42DBE888B6E58ADFE723AA440D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
Manifest number: 0ED8
Signing time: Sun 08 Jun 2025 18:01:00 +0000
Manifest this update: Sun 08 Jun 2025 18:01:00 +0000
Manifest next update: Mon 09 Jun 2025 18:01:00 +0000
Files and hashes: 1: Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl (hash: 4zS2aoMK28kwg41V881H+LsW9bhyjgagjDeplggxbmI=)
2: ju7OLwWOvoLnlAHiuO4kBTFVzwY.roa (hash: e9FAsffXnl64K8Cv3+KjxTUevpgUYG3UY/wewoBEVBQ=)
3: nbL7-TNKQqJ1-yJVoHEn9a5u6DU.roa (hash: tfXwKToKmsCep/7a6KKpGiz+Hfu7rsnL13FXZOQiKEU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:f4:2d:be:88:8b:6e:58:ad:fe:72:3a:a4:40:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21df245ead9980d2b39533782f65d7566d0462d1
Validity
Not Before: Jun 8 18:01:00 2025 GMT
Not After : Jun 9 18:01:00 2025 GMT
Subject: CN=75546844b3826a5adc5b4b3823d8962915203743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ae:37:16:3c:ef:09:3d:fe:ee:45:46:11:0d:
cd:ca:3e:4f:a9:33:32:51:78:9a:4e:96:ab:69:8a:
36:b7:54:b0:5c:fd:ca:4c:f6:49:70:8d:9c:9b:f0:
eb:81:31:46:85:31:b2:d0:79:30:c7:49:d9:22:68:
7b:4b:84:11:ec:94:bd:3f:9c:3e:f0:41:bb:3a:81:
6b:7b:27:f6:89:00:eb:c7:31:13:bf:c5:6f:76:17:
ab:ab:35:10:f8:cc:ec:32:7d:72:16:86:c9:27:a2:
49:cc:da:2c:25:de:c3:e3:d6:8c:56:c4:7d:d5:53:
f1:7a:33:ce:b1:43:f6:2f:03:af:d1:03:c7:5a:b0:
dd:df:f8:f9:30:e4:8c:92:72:e4:82:92:5f:28:07:
ab:e3:92:bb:69:9c:8c:5d:6c:b2:88:eb:cc:2a:68:
52:4a:09:16:13:af:ff:33:53:ae:a9:8e:66:28:b1:
b5:12:d9:24:8f:a4:d3:c3:ad:1e:d7:cf:db:f7:4d:
b4:59:cc:22:f9:b2:c8:c1:2d:17:88:fb:48:bf:ae:
b1:a1:34:ac:73:1f:18:be:f5:6c:30:aa:0b:54:29:
11:8d:30:d4:53:80:3d:fb:11:bb:89:f8:f7:ac:c2:
ce:4c:f4:0b:6e:6b:ae:6f:92:32:e0:15:2a:6e:ab:
7e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:54:68:44:B3:82:6A:5A:DC:5B:4B:38:23:D8:96:29:15:20:37:43
X509v3 Authority Key Identifier:
keyid:21:DF:24:5E:AD:99:80:D2:B3:95:33:78:2F:65:D7:56:6D:04:62:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/df7d6a-4592-400b-ade4-0ec5235d4e9f/1/Id8kXq2ZgNKzlTN4L2XXVm0EYtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:5e:8f:16:2d:3c:fb:dc:48:05:28:90:84:f0:61:7c:f8:dd:
4a:61:ff:43:cd:d9:a8:3b:4f:2f:68:78:ce:b6:5a:1c:08:47:
63:b8:ad:43:b6:97:b3:8e:8f:66:55:98:53:74:d1:f2:48:7c:
4b:05:fd:a6:2d:fe:28:dc:f6:b1:3e:f4:22:45:0d:c6:43:e2:
4a:0c:a8:c2:5b:8a:95:9c:e8:fe:68:7d:58:9d:55:44:58:42:
d4:33:72:05:42:68:0d:51:55:b6:18:40:3d:9f:4c:d3:ea:52:
9d:a1:f1:d4:cf:b7:e7:d6:57:0d:ee:0e:86:8e:e5:c0:06:59:
03:ed:82:7f:14:e2:56:d2:97:47:9f:2c:d8:5d:58:28:d3:d7:
7b:f0:75:67:3f:80:b5:7a:69:d4:0d:db:b2:cd:e6:3a:cf:e3:
67:80:b7:bd:08:ef:9e:14:eb:27:01:4c:6a:65:51:b1:5a:89:
fe:0c:ea:43:ef:c3:fb:5f:85:8c:e2:c1:3a:09:60:46:e6:a3:
77:b4:3e:f2:c7:47:ed:9f:27:0c:25:35:c4:26:e5:2b:e8:c1:
88:eb:71:00:05:b7:e1:06:a8:51:a6:66:86:cd:67:72:2d:b7:
81:57:f2:9b:78:f5:ab:c9:a1:b2:3a:2d:42:f1:10:5a:87:e6:
11:53:da:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 22:07:17 2025 by rpki-client