Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier: ckgfWwBQuT2Ia2gI3Z6VX6yGw7BWol4LFW6n+LsG1DU=
Subject key identifier: 0B:1E:AA:F2:1D:00:8B:13:24:43:2F:C4:28:4E:53:D4:A2:ED:FA:C9
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial: 019750B3917D5FB48220DD0BA16F8EA2BDDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number: 157F
Signing time: Sun 08 Jun 2025 18:00:34 +0000
Manifest this update: Sun 08 Jun 2025 18:00:34 +0000
Manifest next update: Mon 09 Jun 2025 18:00:34 +0000
Files and hashes: 1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: XyRgmTJq2Nl6y0enAS0t2bqKfx1qAN7OAcppnt55i24=)
2: H-eIyUNZ0W3PQRk326R5srYUXMQ.roa (hash: sIobqQC6E12Xk9efcNzqh0/xjMLIgWaEqWZ87SibDYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 18:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:91:7d:5f:b4:82:20:dd:0b:a1:6f:8e:a2:bd:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
Validity
Not Before: Jun 8 18:00:34 2025 GMT
Not After : Jun 9 18:00:34 2025 GMT
Subject: CN=0b1eaaf21d008b1324432fc4284e53d4a2edfac9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:8d:77:68:03:3f:12:85:3d:79:c2:d4:22:07:
2f:04:10:fb:39:66:b6:f7:82:5b:b2:ea:80:da:78:
87:27:12:ea:af:52:ed:76:60:dd:a2:8f:57:bb:f7:
99:15:41:a1:97:3d:97:0a:8b:0b:1a:1f:bb:89:77:
3f:60:a5:ee:45:4f:e3:28:da:5d:b0:18:49:ce:f7:
47:6a:ea:20:d7:26:03:0a:c6:89:8c:4b:73:3c:17:
17:92:ea:1b:22:a0:f5:8e:e2:23:a4:52:7a:9e:79:
e0:1e:3a:6a:c1:04:ea:41:3f:9e:e4:40:e2:88:de:
23:38:c9:e2:b7:18:5d:55:d3:e7:ab:68:4b:96:35:
73:63:c0:16:bb:6e:2d:58:f6:c3:17:65:a2:2c:aa:
eb:8c:47:69:5d:15:b0:90:4c:45:b2:b2:94:59:e9:
0f:5a:b3:6a:76:9b:32:4b:7d:a6:1b:b1:be:90:11:
60:e5:ee:88:b1:41:ef:fd:b5:5e:8b:9a:ed:dd:22:
15:87:7b:f5:2b:0b:a1:20:4e:85:01:e9:f8:6e:5d:
ed:ba:3d:bf:63:0c:c9:4e:5d:f2:d2:a8:cc:3a:23:
d9:49:16:4e:ae:6b:39:c7:f4:d6:86:74:3c:4f:3d:
38:1e:11:f3:ec:7a:78:97:24:82:b5:f8:f9:34:a2:
b1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:1E:AA:F2:1D:00:8B:13:24:43:2F:C4:28:4E:53:D4:A2:ED:FA:C9
X509v3 Authority Key Identifier:
keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:c7:89:73:57:3f:6f:28:6a:a9:4a:9b:05:c8:42:05:78:d4:
03:fa:5b:12:6e:86:d8:86:47:16:47:67:f3:33:b8:97:2a:4c:
67:81:d0:14:29:88:f9:7c:77:40:d3:41:f3:3f:95:75:6f:89:
3a:b0:bb:96:86:62:8e:93:b3:2b:46:3a:dc:78:1b:f7:e2:b0:
cc:a8:50:7f:9a:1b:3b:cd:c3:6e:3b:a8:a3:4d:c8:30:b6:20:
f5:4b:bb:cb:16:25:62:2b:22:4b:26:58:9c:1a:7b:9d:34:44:
f6:68:78:08:3c:2d:50:ac:50:44:de:be:0d:34:48:21:cc:6b:
0f:94:73:27:89:79:a3:cb:92:fd:c7:f7:f6:a1:24:11:a9:2e:
c6:16:fc:7c:a9:a4:cd:17:b2:3c:03:ac:93:91:bd:ec:34:dc:
6a:8e:6e:96:9b:d3:b7:2a:4d:38:36:0e:8a:12:de:64:a6:af:
15:a1:5e:a2:65:3b:a1:67:ba:b8:7e:82:7f:17:4e:be:b2:63:
9c:a1:c2:ef:e0:b2:f7:0a:8d:d8:9d:0f:a8:5c:7b:56:58:61:
48:1e:e2:c3:d2:c5:b9:4e:f4:25:52:37:3d:37:01:bb:a6:85:
aa:eb:4c:ce:d5:03:c3:41:47:10:5c:ae:c6:92:33:52:2e:bb:
ba:0c:46:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 04:05:01 2025 by rpki-client