Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: 0kGwXaia3FP5BUJQeCh7STVDxxzcKlthUkMejf5f2Wo=
Subject key identifier: 28:2B:95:95:9B:47:A1:97:A2:A2:56:F8:B8:B2:73:F0:10:59:50:52
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 019759129584949A8E46206D5F5D05013F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 0FEA
Signing time: Tue 10 Jun 2025 09:01:19 +0000
Manifest this update: Tue 10 Jun 2025 09:01:19 +0000
Manifest next update: Wed 11 Jun 2025 09:01:19 +0000
Files and hashes: 1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: fmpJUqxbyfgRLM4Scy4cbjZ8pkXmKivgKwvfbWM/nys=)
2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=)
3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:12:95:84:94:9a:8e:46:20:6d:5f:5d:05:01:3f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Jun 10 09:01:19 2025 GMT
Not After : Jun 11 09:01:19 2025 GMT
Subject: CN=282b95959b47a197a2a256f8b8b273f010595052
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:de:ef:27:fc:8e:aa:04:2b:0e:60:6e:f5:d0:
f2:82:d5:d2:af:86:98:31:a9:86:36:e1:7f:bc:a7:
be:bb:64:4f:fa:d0:57:da:85:a4:7a:74:8c:bf:dd:
07:cb:9b:5f:5d:cb:a7:25:c4:d1:75:97:b0:9d:a0:
d2:d9:38:e6:37:ed:b6:98:d2:e2:f9:9e:66:51:9b:
ca:7f:ab:08:4c:2c:c8:05:99:52:ec:11:21:7f:7b:
1f:38:c1:2f:93:94:07:ac:9b:50:4a:64:41:be:cb:
6b:14:0f:3d:bd:b5:68:cf:ec:07:52:40:da:40:45:
d2:01:79:01:27:b0:31:b0:5f:f8:89:67:bf:ca:50:
bd:c7:8a:db:f7:c9:9d:29:34:21:be:03:b9:13:8a:
c6:37:27:4a:0a:88:48:68:a7:8d:2d:e5:d1:2f:e8:
fe:96:5a:f9:42:56:bc:fc:7d:d7:9f:d6:4c:2a:60:
2a:b4:19:29:b3:22:19:51:6e:05:0f:77:10:f8:56:
b9:d5:5e:31:c0:d3:08:15:3f:f0:08:16:64:f2:04:
a3:d7:41:68:0d:bc:23:0a:2b:bf:53:ed:fa:53:58:
52:f5:0e:79:82:15:f1:f9:d0:a2:b2:3e:7f:74:57:
1a:bd:76:81:4c:54:16:e5:fd:e1:37:87:91:10:a1:
a2:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:2B:95:95:9B:47:A1:97:A2:A2:56:F8:B8:B2:73:F0:10:59:50:52
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:46:79:6b:39:f7:51:d9:72:95:08:68:9a:6d:3f:0c:8f:d0:
48:11:68:58:13:5d:49:c3:ab:73:ae:a7:53:f3:2c:d4:97:9f:
63:f0:ac:b6:ff:73:01:ee:66:33:c7:41:d2:2d:5e:65:3a:69:
0e:1c:83:8c:12:ed:c4:57:1f:81:bc:d3:53:d5:7f:b6:54:8e:
59:8c:da:dd:c3:7c:b0:01:33:08:e3:cf:bf:56:04:4e:a9:96:
45:28:6c:f2:18:b9:cf:dc:ee:e7:4c:f0:85:5b:35:bb:36:7d:
4d:0e:dc:49:ca:58:76:bc:ef:1e:13:23:32:9c:42:db:8f:4f:
d0:b4:a0:a5:16:8a:6b:08:4c:b7:ae:52:92:fd:7f:25:c8:db:
5f:a9:c7:e5:da:18:8e:bd:b9:73:32:37:d5:99:47:33:3a:8b:
01:35:af:4b:4e:a3:2e:3f:34:bf:0a:12:5d:32:9a:22:92:7c:
66:73:fe:7c:da:8a:80:98:64:6f:89:e0:64:c8:ce:10:df:97:
34:fb:f9:74:4b:90:c8:7a:50:21:aa:e9:e1:a3:97:c5:6a:f4:
50:ab:71:d8:24:16:22:57:3a:92:04:45:79:2b:29:ba:b4:99:
a9:2f:ef:96:c2:74:87:a0:be:6d:5a:82:76:e0:1a:79:a6:8a:
6d:88:55:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 15:28:15 2025 by rpki-client