Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
File: 8yf6fhlHLlg7cgk2w50P0kJmGf0.mft (raw, json)
Hash identifier: BEJJQXWReEb+7PhuC9jkI8M48zLxOj27HjekFwoFpEE=
Subject key identifier: 99:2B:06:EF:CB:B1:A4:A8:91:CE:B6:54:37:E7:CB:AF:C1:56:C0:FD
Authority key identifier: F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
Certificate issuer: /CN=f327fa7e19472e583b720936c39d0fd2426619fd
Certificate serial: 0197654CDA85F239D88513295D9D1B40D0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
Manifest number: 0935
Signing time: Thu 12 Jun 2025 18:00:24 +0000
Manifest this update: Thu 12 Jun 2025 18:00:24 +0000
Manifest next update: Fri 13 Jun 2025 18:00:24 +0000
Files and hashes: 1: 8yf6fhlHLlg7cgk2w50P0kJmGf0.crl (hash: LN/sEOylkeLAd1yjWLs2FoYaGyCIGyWuJK1q6PMk3V8=)
2: jteACDbaYC2GMTFvAHtj6JRaDvo.roa (hash: FyyB216euYUAYG4P0lTXHk9/k4BDveAtrAV0IpAsB3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:65:4c:da:85:f2:39:d8:85:13:29:5d:9d:1b:40:d0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f327fa7e19472e583b720936c39d0fd2426619fd
Validity
Not Before: Jun 12 18:00:24 2025 GMT
Not After : Jun 13 18:00:24 2025 GMT
Subject: CN=992b06efcbb1a4a891ceb65437e7cbafc156c0fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:d3:ef:1f:34:6b:d8:22:1a:d9:10:5f:5f:5c:
23:f8:f6:b0:e7:ac:1c:51:4f:ca:cc:3f:e1:f0:7b:
e0:49:a5:59:d0:ef:d9:96:dd:8a:93:e9:07:e4:5e:
c9:56:9c:d3:7a:41:1a:f6:81:42:90:5b:f7:70:6a:
a9:9e:64:ad:e2:4a:0e:e0:db:9d:86:85:0e:93:34:
ac:c3:a6:5f:dd:e1:f5:ae:7c:04:91:d9:36:21:c4:
a2:7c:aa:dc:0f:dc:21:9e:92:62:ba:a3:f5:83:c4:
52:05:4f:17:82:d2:cd:63:4d:0a:dd:71:da:b9:8d:
69:4b:73:1c:c6:74:74:5a:57:5c:f3:76:b3:06:53:
05:8e:a2:3b:40:e3:01:56:b4:c0:52:4d:eb:7b:73:
60:64:c3:46:3c:f8:cb:63:17:8b:83:92:93:f9:3d:
7f:04:6f:f5:52:85:cf:f5:47:51:b0:bf:d7:6a:1d:
c7:fb:10:64:94:c8:ed:b1:fc:28:3e:c9:04:02:2b:
e9:03:da:1b:55:13:26:3f:2e:94:30:47:9d:5d:19:
b4:6e:dc:97:1e:3a:a6:f0:89:b7:47:ca:d3:22:a6:
7f:38:ca:13:5b:6e:5c:1d:11:a4:0d:21:79:98:00:
34:ec:80:4f:fa:c8:d5:5c:20:45:6f:ab:6d:f2:e2:
9d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:2B:06:EF:CB:B1:A4:A8:91:CE:B6:54:37:E7:CB:AF:C1:56:C0:FD
X509v3 Authority Key Identifier:
keyid:F3:27:FA:7E:19:47:2E:58:3B:72:09:36:C3:9D:0F:D2:42:66:19:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8yf6fhlHLlg7cgk2w50P0kJmGf0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/f81aeb-181c-45e1-99cf-23c16263cf3b/1/8yf6fhlHLlg7cgk2w50P0kJmGf0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:7b:94:6f:67:4b:5d:4e:ba:8b:fa:5d:b3:66:f5:c1:dd:3b:
8b:f9:24:c6:05:27:dc:51:84:50:e3:0d:04:ee:36:7d:ae:c7:
b2:cd:4e:81:77:c8:74:01:ba:ab:36:7a:5d:1c:95:ab:b8:b0:
06:7e:a5:b5:0d:86:f9:10:80:6a:c9:a2:68:b5:b6:a1:df:c8:
b7:d2:3a:da:75:b2:ea:9a:22:02:43:50:fe:ac:ef:aa:c2:37:
7e:37:c8:17:38:aa:dc:f8:4a:6f:de:48:f5:68:ce:7d:7c:1e:
1d:ad:27:97:1e:66:0f:23:43:cc:b5:99:39:0f:e7:de:dd:0e:
d9:77:69:b1:44:75:26:75:a0:56:bc:49:80:c0:ec:6d:83:3d:
6c:91:49:65:b1:ef:16:45:03:7a:bf:e4:70:e9:14:43:b5:46:
68:f6:40:86:51:84:2f:57:26:af:10:df:ce:0b:f7:11:10:c5:
9a:d0:3d:92:b2:55:c3:b5:f5:40:21:99:7c:11:1b:7a:92:43:
1d:e4:f2:8c:40:0e:c1:e4:a9:2c:1c:13:54:3f:83:48:4a:cc:
c5:fb:d7:7d:95:94:d8:bf:fa:58:d0:47:93:e5:f4:85:a7:25:
45:1b:9b:17:54:e6:1e:93:96:93:32:cb:73:cc:df:97:fe:43:
04:25:c6:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 12 21:43:03 2025 by rpki-client