Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
File: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft (raw, json)
Hash identifier: 76y5QaJnNKmVcbk6U5iZ+ut1uMofJGe33vvwlgqsT68=
Subject key identifier: 0F:5C:46:E1:5E:A6:EA:5C:82:EA:A6:91:A0:F6:67:D6:19:66:6F:84
Authority key identifier: F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
Certificate issuer: /CN=f324d0f47297680535eb2799189db888b4066782
Certificate serial: 01976584CD89F15B47F3DA2EABC952603502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
Manifest number: 0B90
Signing time: Thu 12 Jun 2025 19:01:31 +0000
Manifest this update: Thu 12 Jun 2025 19:01:31 +0000
Manifest next update: Fri 13 Jun 2025 19:01:31 +0000
Files and hashes: 1: 8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl (hash: Zq3beWulAs2GsyziS7y9zH6wT9uNAwsK0FicEXUVwu8=)
2: ViytvvvqRpbhZ8khzk-URy1_cok.roa (hash: GO9E5IMUAfx38THMM6EhNHK1/Vpo8T9/VGp4F+NJQF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:84:cd:89:f1:5b:47:f3:da:2e:ab:c9:52:60:35:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f324d0f47297680535eb2799189db888b4066782
Validity
Not Before: Jun 12 19:01:31 2025 GMT
Not After : Jun 13 19:01:31 2025 GMT
Subject: CN=0f5c46e15ea6ea5c82eaa691a0f667d619666f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3f:05:17:e7:44:52:ae:19:52:83:66:3d:1d:
6f:57:01:81:8e:db:47:70:95:87:72:64:bf:c9:b1:
c5:cc:9d:2c:cd:a4:b7:21:22:df:b3:5c:11:f1:c6:
b0:6f:88:b9:a9:3f:7f:62:9b:0a:c6:49:0e:64:62:
b4:55:60:be:2f:b8:5c:f0:e6:f4:44:3c:2d:8b:e9:
d3:cb:8d:42:a4:e1:23:1d:67:02:44:0b:3b:83:09:
92:37:84:b5:dc:33:b2:8a:cb:93:e1:1b:b1:4d:62:
80:9e:29:8f:1f:56:a3:49:12:32:62:8f:02:97:cb:
ef:29:6a:b0:72:65:56:90:a1:94:b2:b1:56:b1:25:
48:27:d7:a7:8f:27:7e:1e:2c:56:79:25:8a:75:4d:
da:3b:48:dc:9c:9c:0e:22:5c:e1:73:3c:71:be:42:
1e:da:9a:5f:6b:a9:13:07:4a:e1:cb:07:59:68:9d:
d2:e8:19:b3:3e:b8:b6:40:b7:64:b3:5d:7c:f7:2c:
e9:2e:81:d7:79:87:2c:98:cc:de:c9:43:92:f9:76:
27:dd:11:bf:2e:b8:b7:4d:3f:c1:81:98:69:77:2e:
85:b7:d3:94:57:51:d9:46:db:4d:a2:9f:b2:3c:60:
c4:08:23:66:db:ed:5b:a4:08:8e:d4:39:ec:86:6b:
80:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:5C:46:E1:5E:A6:EA:5C:82:EA:A6:91:A0:F6:67:D6:19:66:6F:84
X509v3 Authority Key Identifier:
keyid:F3:24:D0:F4:72:97:68:05:35:EB:27:99:18:9D:B8:88:B4:06:67:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/90d366-2fab-47e5-90b9-0265e5cd6966/1/8yTQ9HKXaAU16yeZGJ24iLQGZ4I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:16:63:fd:98:fa:79:79:18:12:4c:17:85:7c:3d:d1:c8:ee:
2b:22:a9:44:9a:06:db:ed:f0:80:16:63:2f:5e:97:fc:3b:6d:
48:ea:8c:23:88:f8:dd:2c:69:4e:ef:d6:f6:e3:47:ea:03:40:
41:63:cf:12:5f:21:76:ab:20:b3:af:5d:d8:f8:4e:4e:01:da:
80:a8:21:6d:22:c5:65:40:2f:19:9f:1e:cc:87:62:ff:15:c6:
75:b4:36:2f:2c:63:32:27:5f:58:8e:9f:1d:a3:0c:6f:cd:bf:
0d:2a:3e:6e:45:a2:19:5d:f6:12:1d:06:6c:7e:b6:99:5e:65:
40:c5:9b:a9:fe:1d:0e:8e:6e:ff:c5:9a:0c:1e:50:98:d0:98:
dc:90:4d:50:32:5d:d2:55:1f:bb:da:4f:7c:6e:57:7c:32:a7:
67:70:16:e2:d3:b7:00:90:ab:89:df:cb:3d:0a:63:fd:bc:48:
70:4a:50:25:e7:b2:bb:90:a7:92:24:b4:39:b1:8d:89:4e:ab:
c4:8a:21:ca:ca:c5:fa:c5:6f:c0:16:b9:8f:88:3c:76:6f:ed:
fb:8d:9f:83:79:38:24:c7:e0:c3:a8:d0:9b:3d:2f:7b:fd:01:
1a:94:91:f8:40:f6:e6:3c:b7:74:ce:11:39:a9:64:0e:41:7b:
14:fe:4d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:47:35 2025 by rpki-client