Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
File: 8x0cBavXFMZ8MpHgENIccKNd1X4.mft (raw, json)
Hash identifier: 4lotNf6HA7ADPkyN3L/AoZV1zYLP0GLGIJsvxOSN99k=
Subject key identifier: 7E:75:1A:18:9A:62:73:00:7A:65:91:39:49:CA:C0:AE:65:44:39:D3
Authority key identifier: F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
Certificate issuer: /CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Certificate serial: 019764035FFCB20F0676BFD535848CE0FDC0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
Manifest number: 064B
Signing time: Thu 12 Jun 2025 12:00:32 +0000
Manifest this update: Thu 12 Jun 2025 12:00:32 +0000
Manifest next update: Fri 13 Jun 2025 12:00:32 +0000
Files and hashes: 1: 8x0cBavXFMZ8MpHgENIccKNd1X4.crl (hash: BoOZl6UIPQcTzlsPWdEwcbzbtPnvCTxPp1iMlbsLqKQ=)
2: NoirTMocfMUxRX4SSF3NnN1MXMg.roa (hash: k1dgXUxG201nPT5HWgsPlWuxupL/o/GsnkXTowkj8SY=)
3: kBL0NGTyltK_bUGqu0ZT8FN5oyY.roa (hash: RQ7q9e83VNSzPNBYQofT5w9K3HiXcrFugBatkkxu9/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:03:5f:fc:b2:0f:06:76:bf:d5:35:84:8c:e0:fd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f31d1c05abd714c67c3291e010d21c70a35dd57e
Validity
Not Before: Jun 12 12:00:32 2025 GMT
Not After : Jun 13 12:00:32 2025 GMT
Subject: CN=7e751a189a6273007a65913949cac0ae654439d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e3:47:98:a3:50:2b:10:2c:4e:fc:38:72:c8:
8a:e2:70:91:dc:9a:bf:2b:44:0a:8f:2b:7c:3f:a4:
23:5c:69:ef:fb:54:c8:eb:6a:d0:4f:2a:6e:30:79:
d2:5e:cc:1c:68:5b:f5:ef:c1:06:3e:47:ed:21:da:
64:c4:7d:61:c9:f2:cb:6c:1e:48:bf:e7:4b:e1:c0:
19:cf:8c:99:99:b6:14:7d:00:d7:62:16:e9:79:a0:
d6:7a:e1:c8:7b:ac:53:33:55:76:dc:85:8c:55:8f:
17:20:73:08:d6:a8:35:06:cc:97:9a:25:4f:56:e6:
d9:0d:85:11:1d:e0:db:85:dd:b9:35:77:bd:f8:eb:
43:83:4c:e7:e6:16:c0:35:ac:4e:10:26:76:2f:2b:
d6:fc:75:a0:73:9b:5e:ff:a8:ed:a9:a0:14:1a:f0:
1e:20:0b:a3:ca:3e:5b:3e:8e:8f:be:00:54:6f:18:
88:6b:e1:a9:60:45:e5:18:12:32:9a:74:cc:46:cf:
9b:68:fd:f5:a5:b9:20:35:15:05:b8:3b:1d:3f:dd:
84:3b:1a:70:9a:d3:04:dc:5a:1f:71:cd:10:c5:8c:
6f:80:64:66:fa:6d:17:7e:54:0d:cd:77:ab:89:79:
0b:26:07:46:f0:b8:99:17:48:17:e3:90:36:f9:6b:
12:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:75:1A:18:9A:62:73:00:7A:65:91:39:49:CA:C0:AE:65:44:39:D3
X509v3 Authority Key Identifier:
keyid:F3:1D:1C:05:AB:D7:14:C6:7C:32:91:E0:10:D2:1C:70:A3:5D:D5:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8x0cBavXFMZ8MpHgENIccKNd1X4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8866bb-2eb7-4288-a82c-5559ac410ace/1/8x0cBavXFMZ8MpHgENIccKNd1X4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:58:72:80:c2:cd:77:dc:c5:60:ce:3b:bf:c5:a1:31:ec:8b:
1e:bc:26:53:35:9b:89:74:58:31:df:39:2c:df:07:3f:56:d2:
95:d2:52:54:de:cf:f3:3a:21:41:68:f2:d3:26:8b:12:42:33:
1f:65:19:df:49:96:41:79:f3:ef:8a:1d:a7:e5:5d:b2:d1:34:
9f:67:f0:45:90:a3:ec:8c:20:c8:89:52:28:a9:f5:49:33:92:
14:13:fa:8f:0c:7d:6e:1f:3f:4f:e6:70:58:53:f9:aa:1a:67:
43:5a:0f:c0:3d:9e:4c:14:61:63:b9:bc:21:4e:c1:0d:ac:0c:
77:90:fe:a4:8d:36:92:ed:73:30:b8:e7:3d:83:1d:cb:a5:9c:
cc:ec:37:86:95:f2:09:c3:7f:df:8e:0b:35:fc:3d:1b:61:84:
17:29:3d:55:1f:ab:ec:d1:7e:2a:c4:f4:28:e4:0c:54:2f:bb:
69:7a:6d:18:b8:a1:a0:bd:7e:e8:76:3d:94:a8:6f:2c:bb:38:
5b:57:fe:69:48:70:0e:ba:8c:75:cf:70:31:8c:5f:52:6c:28:
21:09:0f:c8:74:8e:9e:3e:50:76:1e:d7:21:2d:94:64:ac:f4:
83:17:e8:f3:38:d1:12:ed:70:0b:99:f5:05:97:62:f9:11:13:
c8:ec:be:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 20:58:30 2025 by rpki-client