Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: IJp2xQImC9wQlxEtY6vUZI8JTbxlXduM4QpDHK5rxug=
Subject key identifier: AA:27:19:B6:6E:47:71:5F:17:99:FD:FF:65:9C:37:49:CD:28:59:29
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 01975EDD57E6CD7D6E8F27B9C5B7153BB0E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 0FED
Signing time: Wed 11 Jun 2025 12:00:53 +0000
Manifest this update: Wed 11 Jun 2025 12:00:53 +0000
Manifest next update: Thu 12 Jun 2025 12:00:53 +0000
Files and hashes: 1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: k2DLsoPfXZFCYRaWRCLzASX/GFuNoEkpZoqI1HJkGzo=)
2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=)
3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5e:dd:57:e6:cd:7d:6e:8f:27:b9:c5:b7:15:3b:b0:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Jun 11 12:00:53 2025 GMT
Not After : Jun 12 12:00:53 2025 GMT
Subject: CN=aa2719b66e47715f1799fdff659c3749cd285929
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1d:22:cb:1d:c9:50:34:4c:fb:43:6e:55:a1:
b8:31:42:ac:5c:10:77:8a:db:90:41:eb:52:e3:ab:
a5:4c:28:f7:e2:fc:7c:12:1c:be:c9:7e:53:7b:bb:
79:24:4f:1d:4f:38:f3:85:38:a2:e7:9e:5c:9e:6b:
ca:32:b1:20:3d:8a:42:19:06:3c:cf:83:11:c2:63:
33:ca:e8:b7:04:7b:e1:9c:cd:81:56:db:e0:bb:ab:
42:17:2a:28:53:96:6e:3b:9c:f3:25:41:6f:0d:26:
a4:e3:67:79:12:7c:08:0c:50:cd:8f:a7:f1:e8:40:
4e:a3:12:c6:27:42:83:05:95:80:5e:e9:4a:0e:f6:
5d:37:8a:a2:ab:98:32:6f:99:81:10:4b:75:38:00:
12:e9:56:9e:1f:8f:3d:61:2b:72:a7:5d:ac:7e:55:
77:c6:d9:e2:19:80:29:8a:3d:7a:0a:c9:d1:6f:1c:
da:56:98:5b:95:97:22:03:6c:1c:d5:e9:a1:72:85:
e8:a8:09:e6:db:a1:9a:cc:85:05:ed:2d:7b:85:34:
47:00:e7:00:d0:df:c0:1e:e7:ad:da:7a:7a:b9:e1:
d8:6e:de:59:02:60:eb:fd:a7:56:df:84:b1:42:64:
04:8d:9b:b4:f8:55:75:72:c1:eb:b5:d5:71:b7:e8:
9e:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:27:19:B6:6E:47:71:5F:17:99:FD:FF:65:9C:37:49:CD:28:59:29
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d7:b0:37:7e:6b:d5:a2:16:44:c7:f6:d8:9f:9d:f8:a6:2d:5f:
1b:50:56:7f:54:fa:b3:ad:ed:34:15:f7:f7:75:41:84:d4:72:
64:0c:9e:b9:ae:1a:ac:a9:a7:9b:b2:02:f5:15:cf:79:69:82:
50:92:77:ca:18:74:bf:cf:46:4f:82:71:6c:63:00:00:89:23:
3a:90:5b:a7:31:6d:0f:86:e1:18:ad:d8:20:5b:00:fd:76:94:
92:7a:68:79:56:12:9d:de:87:fe:df:5d:90:78:e3:50:80:df:
9d:ce:b3:e8:62:89:52:09:a8:58:08:db:54:0d:3f:a8:6c:91:
33:20:70:82:8f:9c:76:f3:63:c9:99:4a:cf:5d:05:47:39:50:
fc:08:b2:d0:d4:21:2e:6b:fb:0c:fa:ab:71:2f:f4:76:8d:59:
7f:62:b9:5d:05:7f:32:8e:07:a4:d6:ed:ba:f4:fd:36:13:fc:
64:a8:cb:c3:5d:d2:75:f5:46:70:30:62:2d:a8:61:20:6c:b4:
18:db:f4:c2:13:c2:b5:81:94:4a:ca:9b:7d:82:4b:ab:26:db:
31:f5:e4:60:71:f3:8b:ac:b8:ef:30:5a:75:0b:de:9d:e8:b2:
2b:ae:07:a5:01:12:8a:e1:d5:c4:ab:86:4f:bb:cd:67:79:ec:
e7:24:20:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 11 22:25:27 2025 by rpki-client