Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: YvZI61uPl6Kua1SqdHw3a9PHMpqfpK4xAHsdnDoJFZs=
Subject key identifier: F1:B1:33:E9:46:3A:EE:7C:79:1C:19:68:9D:E4:C5:90:A0:E2:55:9D
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 01975490D607C388A247D44C3782B317526E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 0643
Signing time: Mon 09 Jun 2025 12:01:07 +0000
Manifest this update: Mon 09 Jun 2025 12:01:07 +0000
Manifest next update: Tue 10 Jun 2025 12:01:07 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: JJEC1pPLHNzEWIdmCrUTaGSUHEeJa3c14P5ttZcQOUk=)
2: NoirTMocfMUxRX4SSF3NnN1MXMg.roa (hash: k1dgXUxG201nPT5HWgsPlWuxupL/o/GsnkXTowkj8SY=)
3: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (hash: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:d6:07:c3:88:a2:47:d4:4c:37:82:b3:17:52:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Jun 9 12:01:07 2025 GMT
Not After : Jun 10 12:01:07 2025 GMT
Subject: CN=f1b133e9463aee7c791c19689de4c590a0e2559d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:88:6a:6e:c4:e0:c6:52:f2:92:6c:78:12:9c:
a8:a2:c1:9a:b4:c6:a7:9d:3a:86:33:be:ef:f8:d6:
4a:1b:8a:a7:8e:ee:88:48:43:e2:b6:46:f0:0c:72:
ed:a2:d2:74:c2:f1:08:d6:c4:25:2e:74:0e:18:36:
91:2b:ae:53:4c:d3:12:8d:28:e9:94:9b:ec:a1:62:
54:92:3e:29:cf:e7:b7:82:7c:ed:45:72:96:89:3b:
f2:bf:c5:c8:84:21:31:ba:eb:32:4f:0f:16:74:de:
53:56:c0:5d:16:2c:4f:19:62:98:cc:a8:0c:4b:85:
c0:0a:3c:2b:7c:f3:5c:2a:d8:76:1d:24:fd:43:e6:
92:56:f9:b0:c3:74:73:fa:0a:30:9e:5e:c9:62:af:
bf:7f:2b:dd:b1:8c:b4:f7:67:83:16:49:55:03:50:
cc:a4:07:19:70:ee:3a:5b:23:b1:00:f4:eb:c9:75:
ae:4a:15:09:b4:3f:cc:97:db:ff:98:22:d7:a2:42:
b9:c1:e8:99:53:05:08:d6:2d:32:68:c2:ff:e8:cf:
b4:02:26:71:8a:9a:17:04:db:4b:23:fd:8d:72:62:
64:58:6f:86:a9:6f:22:04:c3:11:db:0e:5a:43:ed:
fc:04:97:92:49:d4:38:37:3b:bd:ed:30:9b:7f:26:
df:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:B1:33:E9:46:3A:EE:7C:79:1C:19:68:9D:E4:C5:90:A0:E2:55:9D
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:3c:4a:75:ce:a6:e9:fd:a9:21:22:75:96:c6:95:17:5a:da:
d1:be:14:9f:5b:b7:a5:bc:a0:f4:aa:c0:47:b4:0b:1e:8a:db:
9f:5a:3c:db:55:b7:23:1e:fa:f0:26:8a:6c:a1:c3:4d:18:29:
4a:51:bf:d1:59:61:33:9c:9e:30:87:4f:05:0b:8a:df:73:d7:
33:a2:63:98:84:20:d2:47:ce:18:b8:67:e6:5f:be:67:39:e9:
cb:e8:19:51:14:c5:35:52:4c:cf:06:b6:3a:31:a4:e1:01:55:
63:99:5d:dd:a0:6c:dd:da:b3:c3:89:90:f3:af:d8:58:7c:e9:
c5:45:ba:17:dc:f3:da:91:90:67:54:bc:41:94:2b:80:37:88:
0a:7b:c2:4a:4d:01:b1:e9:f7:e4:21:62:50:cc:63:cd:cd:45:
3a:53:4c:4d:a1:4e:54:c7:22:71:fa:f6:db:c4:14:82:99:63:
56:eb:cc:7c:6d:52:52:d7:68:72:9b:ce:7e:0d:39:23:41:50:
25:31:72:d9:de:da:09:46:90:0a:3a:02:9f:dd:e3:b4:10:b9:
1f:e3:5d:d6:cb:0b:e5:01:1d:8c:f3:c1:4c:e9:76:f2:78:8f:
59:47:c1:4a:4c:06:ff:0b:ad:dc:6b:8a:f4:05:c8:b6:7f:0a:
fd:a6:8f:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 16:50:52 2025 by rpki-client