Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
File: C8iTN1rRVbX_ztPL7iU1uGWf44k.mft (raw, json)
Hash identifier: 28YYC1JNhkzqf0oV8ZNzDrxSuu0dxGs9yNqif/bCCQo=
Subject key identifier: F1:DA:BF:0A:4C:03:0D:64:AB:10:A8:98:9D:BD:CD:F8:C9:4B:96:E7
Authority key identifier: 0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
Certificate issuer: /CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Certificate serial: 019751C66585F88FB9189D6BE1851E672E44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
Manifest number: 1581
Signing time: Sun 08 Jun 2025 23:00:45 +0000
Manifest this update: Sun 08 Jun 2025 23:00:45 +0000
Manifest next update: Mon 09 Jun 2025 23:00:45 +0000
Files and hashes: 1: C8iTN1rRVbX_ztPL7iU1uGWf44k.crl (hash: BEUFl3gFSYS0sCIIAYxyoL4s4GPehi3Q6hPy/01Za2w=)
2: uYBmloio0v9Mj1oUCQ7dp4Uq2pg.roa (hash: k0vCLZfeunG/QoHpcwb7GJEwzSKtofkLLPDzKPrjJzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:c6:65:85:f8:8f:b9:18:9d:6b:e1:85:1e:67:2e:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc893375ad155b5ffced3cbee2535b8659fe389
Validity
Not Before: Jun 8 23:00:45 2025 GMT
Not After : Jun 9 23:00:45 2025 GMT
Subject: CN=f1dabf0a4c030d64ab10a8989dbdcdf8c94b96e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0a:37:40:70:be:84:98:45:35:fb:b4:f6:b0:
96:69:df:1a:71:50:51:1e:68:d1:c4:a9:ff:8c:35:
c2:98:cd:2f:ac:23:93:0b:28:a1:e9:0a:77:f5:0a:
3d:24:67:71:81:d7:2c:7f:8a:1f:c7:15:17:47:a6:
bb:ae:a6:5d:6a:62:33:d7:ea:27:0f:36:98:91:7f:
83:55:fb:95:40:0c:1b:b9:c6:3d:35:84:2d:61:3a:
3d:0b:af:8f:3d:26:49:cd:2c:5b:3c:78:33:9e:15:
cc:20:8c:b6:79:02:97:40:38:e5:7e:32:f2:88:2e:
5f:0a:a2:a7:8e:c3:38:5a:7f:44:fa:84:48:b9:f6:
e4:b3:c8:0b:b8:aa:e9:94:2c:2b:74:a2:6e:06:a9:
75:65:f7:df:e4:99:b4:5a:4d:2e:ae:26:a0:3d:e6:
74:bb:dc:13:56:9b:24:97:8f:c0:78:e5:81:cb:2b:
1f:2f:f4:b2:9f:28:9a:1f:6f:eb:60:f3:87:26:cc:
ec:34:db:61:95:4d:08:3e:75:e7:e6:44:08:a5:5b:
94:16:79:ce:25:ee:cb:2c:37:d1:d4:75:30:16:a7:
e7:05:9b:c2:99:c7:27:a0:dc:da:85:43:d6:d9:1c:
1a:cc:db:2a:57:f9:a4:f2:f6:9c:6e:5d:e7:3b:15:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DA:BF:0A:4C:03:0D:64:AB:10:A8:98:9D:BD:CD:F8:C9:4B:96:E7
X509v3 Authority Key Identifier:
keyid:0B:C8:93:37:5A:D1:55:B5:FF:CE:D3:CB:EE:25:35:B8:65:9F:E3:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8iTN1rRVbX_ztPL7iU1uGWf44k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/336701-e36a-4db2-974e-0ed078f4bcaf/1/C8iTN1rRVbX_ztPL7iU1uGWf44k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:69:d9:61:f9:2e:fe:03:17:5c:bf:e7:2b:43:c9:5b:6f:ed:
e8:73:f4:11:3c:86:ee:42:17:7c:01:d6:89:8a:29:6c:98:1c:
21:df:66:b8:39:ca:e7:92:8b:25:ae:d6:ea:65:bf:b8:4c:a9:
71:9d:00:83:6d:1e:8c:46:7f:0a:67:ba:8f:d8:27:66:ef:c8:
10:1b:e1:38:d0:6e:4f:fd:0e:c6:49:c3:83:73:ca:36:2a:bd:
c1:6e:db:c0:96:44:b0:28:97:4e:40:35:09:b8:8b:dc:52:d2:
47:94:69:ea:8f:7c:30:03:ce:f1:7f:0b:1c:68:3b:d6:e5:ab:
c7:04:1d:c7:b9:e6:ca:7d:a1:86:dc:71:c9:29:cf:1f:fb:2c:
4b:31:72:35:63:89:0f:e3:49:f8:d2:a8:c9:e8:9f:7e:fb:70:
ee:dc:83:d7:36:d2:d2:8f:08:3b:ee:5d:81:df:0c:29:f7:08:
39:9a:fb:0a:43:7d:87:fc:90:af:c3:49:da:87:ed:cd:60:8a:
9e:f9:a4:51:8d:d5:a3:9a:15:70:35:31:20:2f:23:49:28:f8:
6f:2c:1e:b1:d3:05:86:6f:a6:53:0e:59:d2:4a:09:61:24:06:
1b:72:5b:3e:04:78:76:04:b5:dc:75:58:cd:99:21:43:ed:61:
11:17:a9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:55:22 2025 by rpki-client