Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
File: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft (raw, json)
Hash identifier: UQ6Bn0wSRoY7fOtOU+uqfjC5hPi946D0SknGjVVhNO8=
Subject key identifier: E1:77:31:34:21:E0:95:5A:2E:3C:0B:22:05:01:D5:5B:C3:0B:2D:AC
Authority key identifier: F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
Certificate issuer: /CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Certificate serial: 01975D5CEC07202BD99AB603F482AE75AEFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
Manifest number: 0F97
Signing time: Wed 11 Jun 2025 05:01:00 +0000
Manifest this update: Wed 11 Jun 2025 05:01:00 +0000
Manifest next update: Thu 12 Jun 2025 05:01:00 +0000
Files and hashes: 1: 8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl (hash: aZZdnhFY8r/byRZRRYkRFEfx0Amol/DNXeXsvakW5d8=)
2: l7jY8kwE-M6c_UhPj-FUehU05zw.roa (hash: pztDbxlKVmEaYKFDmjzGRQ+iSzJwJzlFrSZ9erwEw6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 05:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:5c:ec:07:20:2b:d9:9a:b6:03:f4:82:ae:75:ae:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a23607f6d1e6e6ced1dd94c9bd10b306f609d
Validity
Not Before: Jun 11 05:01:00 2025 GMT
Not After : Jun 12 05:01:00 2025 GMT
Subject: CN=e177313421e0955a2e3c0b220501d55bc30b2dac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:4c:e4:98:d5:07:ee:fb:0b:fc:cc:e3:fe:
bb:08:8a:1b:4c:12:20:7e:e9:a5:1c:8a:e8:1a:70:
23:68:6c:20:03:b0:fe:17:b1:01:2f:c6:70:e8:c6:
a6:8c:29:de:1e:ef:be:f6:13:32:a3:70:44:3a:22:
21:37:a6:96:71:5f:f6:66:d6:83:c5:a0:0c:18:ad:
82:c0:19:41:46:a4:05:98:39:62:ce:47:ed:16:79:
77:50:96:72:3a:da:9e:83:a6:3c:75:fd:db:9e:3f:
8e:5b:a6:91:1d:89:40:fa:8b:d8:9e:a7:3d:9d:a6:
5d:51:52:d8:c6:3d:c4:36:d9:81:93:59:46:16:e5:
ee:62:fb:af:3a:2b:09:ed:c4:83:62:1f:a8:29:b7:
c1:1b:4e:1e:ef:29:97:ef:3e:20:2f:c2:c4:32:e8:
2a:96:fb:27:19:72:bb:78:44:53:27:57:ac:a6:a0:
06:78:80:48:de:b4:3b:3b:31:7e:ed:4f:0e:3c:38:
33:5d:20:c8:f4:6e:a0:62:16:af:52:ea:34:6f:48:
b5:a6:0a:ff:b4:50:95:67:2a:e2:0a:a3:07:53:93:
d1:7d:e4:ad:1a:1a:ce:65:bd:c3:9a:2f:c6:e8:e6:
34:13:55:0a:a1:39:a8:06:b9:3b:f2:c5:28:6e:18:
2c:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:77:31:34:21:E0:95:5A:2E:3C:0B:22:05:01:D5:5B:C3:0B:2D:AC
X509v3 Authority Key Identifier:
keyid:F2:7A:23:60:7F:6D:1E:6E:6C:ED:1D:D9:4C:9B:D1:0B:30:6F:60:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/8ea3f1-6b82-47ca-88a1-87913c35492a/1/8nojYH9tHm5s7R3ZTJvRCzBvYJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:86:b9:7a:bf:21:e8:5e:29:20:22:8c:89:70:e5:f0:a3:f0:
f8:ef:49:34:5a:01:45:dd:34:90:3c:7b:6e:36:cf:2e:f7:d6:
cb:27:96:d9:af:58:95:77:dd:d9:6e:35:fb:6c:d6:03:e5:5f:
0b:90:2a:7c:b2:ae:da:8e:86:1b:73:1d:66:56:0a:20:22:98:
a4:2b:de:ab:aa:02:11:b3:bb:a8:b8:fc:ae:81:b1:eb:cb:f5:
67:03:53:42:13:1c:c7:87:aa:b0:64:4e:7a:54:b0:7c:e4:d0:
7a:b5:cf:38:3c:9f:c6:ce:08:e4:13:ae:1b:e2:27:10:ae:a3:
ad:f4:45:7f:3a:71:58:b9:dc:71:11:63:08:d0:22:06:bd:98:
8b:e9:e8:b7:76:8f:75:6b:d4:a0:7f:86:94:40:e6:59:7e:0e:
0a:c3:e5:cd:bd:91:13:d4:56:bc:47:d4:e6:f3:1c:56:17:9e:
43:14:e9:c7:11:76:23:fc:2b:a4:7f:55:9d:81:2f:6a:b0:a6:
21:fd:07:31:74:fa:38:f9:fb:41:65:07:53:85:6b:37:52:bb:
64:31:a0:95:ba:6f:fe:cd:a5:62:9a:5b:8f:d3:7e:82:34:cf:
3a:35:a8:2f:7d:37:58:94:c9:98:d3:a4:7b:15:6c:5d:3c:49:
ef:10:b0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 14:40:12 2025 by rpki-client