Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
File: x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json)
Hash identifier: TkvESk6BxUj9xShmUTyM5m+c9TmAkOjyyNoFKRbZWZc=
Subject key identifier: 53:35:E9:98:AC:A8:F2:B4:7D:C1:D7:28:1E:2B:E5:17:33:3F:EC:96
Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Certificate serial: 0197507CA396D2F3092BD5FFA4AE8762BD67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
Manifest number: 1583
Signing time: Sun 08 Jun 2025 17:00:34 +0000
Manifest this update: Sun 08 Jun 2025 17:00:34 +0000
Manifest next update: Mon 09 Jun 2025 17:00:34 +0000
Files and hashes: 1: KuITA8F2JpisQKF630WYOsFc4wk.roa (hash: bB2rOvgz8hjIMe852Fv1qtbwAzNh+J9BjKdpPYjEPmg=)
2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: H0zy/u5Z9O6P76PTES52pMBTxOXwVXLa6kgG/ChRuJY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:a3:96:d2:f3:09:2b:d5:ff:a4:ae:87:62:bd:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Validity
Not Before: Jun 8 17:00:34 2025 GMT
Not After : Jun 9 17:00:34 2025 GMT
Subject: CN=5335e998aca8f2b47dc1d7281e2be517333fec96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a5:53:58:b4:f2:33:89:5a:a2:66:e1:15:67:
ff:22:b0:b9:70:c8:3c:65:3b:86:8f:ce:b1:1d:78:
bc:28:43:42:35:c3:d0:cc:1c:a5:52:3f:27:70:cf:
52:85:ca:21:5c:23:e9:49:aa:9a:22:79:ff:c8:2d:
f0:83:87:26:45:32:d7:fd:0d:4e:d4:be:35:f0:d0:
08:12:26:6b:aa:4d:9a:53:f0:58:22:6a:9d:83:d0:
7b:b0:3a:82:d1:2f:1b:77:6a:35:87:7d:f9:e5:52:
6d:97:c1:58:95:62:94:58:f0:7a:cb:f1:cc:22:76:
20:e4:76:1a:01:2a:1b:08:83:88:a5:15:91:e0:0d:
61:8d:c7:41:54:ce:75:9e:0e:1a:73:05:b2:6a:a2:
b5:69:fc:5d:7e:b2:72:43:aa:81:77:df:d8:a6:04:
0a:9a:55:93:a1:94:a7:f0:80:3e:49:76:65:4e:14:
18:12:bc:08:c8:7f:2a:55:2d:bb:e5:95:44:02:76:
12:8b:7d:de:ce:97:44:f9:b5:18:48:1b:89:70:21:
df:12:88:14:a8:26:7d:8f:2f:59:d5:1d:8c:8e:b8:
16:0f:e7:57:d2:dc:05:ed:9f:91:aa:dc:d3:10:ea:
50:a5:93:9a:4e:d6:90:aa:22:4b:8a:c9:6a:e2:53:
7d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:35:E9:98:AC:A8:F2:B4:7D:C1:D7:28:1E:2B:E5:17:33:3F:EC:96
X509v3 Authority Key Identifier:
keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:3c:c6:da:2e:6a:bc:01:4f:05:c0:20:a7:24:72:cf:f7:ea:
d2:8c:10:94:eb:de:29:d1:d9:6a:ed:6f:08:25:7b:d0:ae:5a:
f9:a0:0a:02:5c:ce:26:6b:f0:1f:08:d7:b1:db:4a:bd:44:99:
e0:95:85:d8:1f:03:26:23:73:01:d5:0c:41:b0:5c:41:a6:62:
53:9a:4e:d5:d5:3a:ce:2f:fa:1f:61:22:ea:6e:fb:0a:f4:96:
cf:cc:c6:22:4b:2d:3c:5d:f0:6f:dc:d6:94:d5:ea:3c:18:76:
4d:fa:5c:1d:3c:32:8e:63:64:bf:a5:0a:f2:2e:2c:bf:ae:a7:
ea:38:a7:77:7f:57:72:d5:4b:3d:2d:7f:23:c9:04:09:f0:36:
8a:36:7a:8c:4e:e6:47:f5:56:1f:58:bc:a8:98:e5:97:4c:40:
31:21:4c:b3:a2:49:f3:4a:6d:23:81:db:71:73:5b:71:6b:bb:
e9:42:7d:b5:05:23:6c:78:38:e0:71:10:b5:1c:6b:19:2b:f9:
01:20:c2:a7:41:02:71:8c:ca:0c:0f:a2:ea:c9:0b:dc:65:c8:
40:c1:ad:cd:91:4c:6c:0c:bc:05:81:6c:0f:35:77:32:f4:91:
da:08:78:b5:99:c4:01:ac:47:a9:8d:3a:c3:34:11:06:db:74:
0e:d5:b5:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:53:47 2025 by rpki-client