Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: jpNAfCrbxbyFqernHIKH509Ib8oqSEe7noTKWPVWfTw=
Subject key identifier: 57:A4:9D:7A:75:44:3F:8C:68:B3:5E:B6:9B:21:06:67:D6:1C:1A:30
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 019764A8359B3F1832E93C5B791DAB8F8534
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 0FF0
Signing time: Thu 12 Jun 2025 15:00:34 +0000
Manifest this update: Thu 12 Jun 2025 15:00:34 +0000
Manifest next update: Fri 13 Jun 2025 15:00:34 +0000
Files and hashes: 1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: e/cesTx0vHHrEYqfM5ZguOQQajWwdsGbrkWqzpNfS1M=)
2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=)
3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:a8:35:9b:3f:18:32:e9:3c:5b:79:1d:ab:8f:85:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Jun 12 15:00:34 2025 GMT
Not After : Jun 13 15:00:34 2025 GMT
Subject: CN=57a49d7a75443f8c68b35eb69b210667d61c1a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5a:f1:19:63:63:b2:f1:95:d9:dc:80:1a:21:
88:fa:06:80:86:1b:38:37:d1:dd:68:32:f9:3e:31:
ef:9f:86:78:53:82:ed:31:72:b8:0b:3a:b4:39:06:
db:ce:c2:13:40:25:ed:e1:ff:41:1a:98:bb:cb:05:
44:34:29:5e:3c:5e:3c:45:5e:50:9f:3d:1c:f8:6b:
ad:88:f0:a3:da:ff:c6:ef:bd:56:78:1f:cd:61:ca:
fb:fc:41:f7:11:e0:98:89:5d:30:7d:9c:a3:87:03:
10:76:e2:95:96:8b:66:d3:7c:cd:eb:1d:60:54:76:
ff:28:e4:3e:ed:4b:9c:9d:91:9d:11:03:78:34:04:
9a:13:1f:e7:b9:2c:be:95:38:f0:46:e2:ec:f2:20:
12:e8:d3:bc:07:a4:b2:2a:2c:1f:e3:76:13:b6:be:
cd:9f:ec:91:db:8f:1c:7d:4a:cb:9d:0c:fa:a7:70:
61:92:d1:fb:52:e2:9c:d7:ca:db:cc:97:5a:26:e0:
14:1f:67:e7:d0:4e:15:f4:14:fa:af:c5:a9:fb:f9:
50:e3:db:43:b7:6f:31:64:85:f1:e0:6f:c1:32:a9:
c2:a4:da:e6:c5:1c:05:f0:82:ad:39:a1:6c:32:0b:
5f:28:f8:d9:f8:86:3c:b4:e8:0b:07:7e:fa:26:0b:
0d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:A4:9D:7A:75:44:3F:8C:68:B3:5E:B6:9B:21:06:67:D6:1C:1A:30
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:6a:de:a5:9b:5c:e2:5f:e5:fa:19:4c:9e:83:bb:0a:95:bc:
0c:8b:30:df:38:d9:36:3e:54:a9:3f:29:86:dd:cd:33:0b:0d:
47:dd:f9:06:23:d6:cd:ad:40:49:05:17:60:8f:f1:84:85:5d:
3e:cd:a3:2b:45:a2:47:77:61:e9:11:4e:cb:93:c1:b3:b0:d2:
55:47:6e:d0:b4:68:48:96:09:99:eb:ad:25:d1:79:44:c2:ba:
3f:31:d0:dd:24:df:39:88:d7:56:5e:3a:a5:66:8e:de:14:dc:
9f:20:c9:43:8f:87:03:f4:43:aa:79:1c:75:0a:6c:ff:6b:50:
ec:76:22:78:8c:be:19:8e:6a:a5:2f:c4:4f:5b:df:ee:8f:25:
c2:fd:8b:2e:36:61:ca:70:3b:09:f1:c5:8b:e2:56:ff:ad:96:
9a:c2:26:70:84:67:40:34:6c:87:04:c3:8f:33:39:e4:8e:32:
4d:42:df:94:ec:96:90:34:0f:6d:e6:70:8e:87:d1:be:09:86:
d9:c6:9c:72:52:92:31:ca:fe:7d:87:e5:48:ad:8b:11:7b:cf:
65:5a:2b:a0:a2:e7:7a:8c:d6:ed:93:7f:0e:92:34:a9:ba:73:
61:ed:25:21:1e:85:16:47:cf:29:09:4f:40:62:5f:7e:5b:95:
8e:e5:0f:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:36:07 2025 by rpki-client