Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
File: 8G37T34-N0VYDoyPxHAj_7H6kW0.mft (raw, json)
Hash identifier: UwE6E4wYs6xoEi3ECf1uQb/cdhaRZEZomjMYyAlnIec=
Subject key identifier: C4:FE:33:F0:38:B8:9E:3E:20:17:78:B5:70:D4:02:1A:B8:09:A8:3C
Authority key identifier: F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
Certificate issuer: /CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Certificate serial: 0197500F1C4019FA4DA9224139756DB77C7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
Manifest number: 04B7
Signing time: Sun 08 Jun 2025 15:00:56 +0000
Manifest this update: Sun 08 Jun 2025 15:00:56 +0000
Manifest next update: Mon 09 Jun 2025 15:00:56 +0000
Files and hashes: 1: 8G37T34-N0VYDoyPxHAj_7H6kW0.crl (hash: ickGzU72LNT53rl5A928Ojo1+Xj3JSlq/nXoooSXolE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0f:1c:40:19:fa:4d:a9:22:41:39:75:6d:b7:7c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f06dfb4f7e3e3745580e8c8fc47023ffb1fa916d
Validity
Not Before: Jun 8 15:00:56 2025 GMT
Not After : Jun 9 15:00:56 2025 GMT
Subject: CN=c4fe33f038b89e3e201778b570d4021ab809a83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:70:ef:4f:8d:b9:1c:ce:22:a5:1b:17:ed:0f:
d4:cf:25:b3:74:91:ce:f3:52:26:ba:31:ab:d1:f7:
1b:18:d9:0b:da:a3:1c:8b:05:e1:4f:c6:9a:b5:be:
de:70:9b:23:50:1f:ef:80:40:63:38:bd:a0:e6:50:
4c:11:fc:4c:59:05:8e:c3:86:b9:f9:0a:b2:94:79:
60:b9:f6:19:ec:f0:2b:88:eb:b6:04:49:60:cd:db:
93:e7:0f:b7:59:24:36:40:5a:67:20:37:45:d5:96:
d3:f2:cf:1d:db:73:6e:3c:e6:bc:ee:4a:e7:7e:43:
4b:9a:68:f0:20:ae:c8:c9:56:7a:e8:bb:32:9b:d2:
bc:78:1a:98:8e:94:19:f5:fe:35:b6:4a:98:ae:48:
81:86:5a:de:29:ef:92:05:ea:ad:8f:43:4c:42:c0:
94:a7:6b:86:63:bb:b2:4a:02:22:43:1a:ac:ef:5a:
3f:34:93:b2:e2:9c:c5:9b:f7:7d:13:b0:36:38:3c:
d9:3c:b1:11:62:08:ec:71:63:c5:d1:38:e3:a4:80:
56:5b:26:81:60:a0:64:51:3a:f5:18:fd:32:ec:fb:
5f:dc:97:49:63:77:3d:0e:62:3b:43:94:03:e8:81:
28:d3:43:0a:3f:2c:00:7a:96:af:7e:c4:f1:76:da:
83:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:FE:33:F0:38:B8:9E:3E:20:17:78:B5:70:D4:02:1A:B8:09:A8:3C
X509v3 Authority Key Identifier:
keyid:F0:6D:FB:4F:7E:3E:37:45:58:0E:8C:8F:C4:70:23:FF:B1:FA:91:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8G37T34-N0VYDoyPxHAj_7H6kW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6e1df8-6ebc-4b2e-91b4-b03f948804be/1/8G37T34-N0VYDoyPxHAj_7H6kW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:30:6f:24:32:8b:58:f4:4c:de:1c:b7:c6:05:70:4c:e2:8f:
32:af:bc:57:33:10:33:e6:22:65:04:4a:f1:1f:e7:77:e4:14:
1d:ec:f5:9e:7e:c4:ce:c3:8c:94:cd:a1:32:2a:d7:aa:86:7c:
df:3f:f1:45:b9:13:44:8c:bf:74:19:1f:44:b0:11:24:ab:68:
76:7b:b8:39:c8:f0:76:38:6d:50:89:79:81:95:25:5a:ed:cd:
7a:67:93:be:b4:05:71:7a:b5:de:8c:5d:a1:b7:73:34:61:4e:
fa:df:a5:8b:4d:01:43:2c:3b:6b:b6:8c:7a:25:3f:fd:3c:1e:
98:52:5d:fd:41:e2:e2:35:ef:87:15:16:27:b6:20:77:9b:21:
96:4f:3f:f0:a4:c2:eb:02:fd:76:ad:6a:86:c6:80:ee:0d:3a:
1d:b8:0c:18:9c:58:74:f9:09:73:09:7c:e2:e5:a2:ee:0e:f7:
81:33:28:a0:43:88:39:a1:d4:a6:e7:17:00:56:5d:c1:27:d8:
51:e9:7a:7e:9e:7a:70:e3:a0:a6:9f:fc:69:72:4b:54:e2:7c:
50:0a:dc:41:76:da:ce:09:a1:20:ad:36:5c:26:fd:36:8c:7f:
9a:af:a6:5d:a9:e5:2d:b2:84:39:cd:ce:20:01:f2:69:d6:3d:
c0:da:ad:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 16:53:18 2025 by rpki-client