
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
File: 8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft (raw, json)
Hash identifier: Yh1z5n+wJz8c5QyPBdyIL2gwJ99LutQAX6kzXKYSB4o=
Subject key identifier: 8D:B4:94:33:BE:EA:F3:11:88:3C:C2:0C:E7:41:C2:2E:C5:F2:8D:CC
Authority key identifier: F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
Certificate issuer: /CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Certificate serial: 0197499F448CF6F445918A9F841A777873BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
Manifest number: 13F0
Signing time: Sat 07 Jun 2025 09:01:03 +0000
Manifest this update: Sat 07 Jun 2025 09:01:03 +0000
Manifest next update: Sun 08 Jun 2025 09:01:03 +0000
Files and hashes: 1: 8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl (hash: GEB9SmvDZLgqPTpPY8MDvjdrAo5IpfecfaRsC0Z+1Pw=)
2: IhBK0ciO53Ec1EbuRK46uaRKreQ.roa (hash: 4ZKr5RNFkrNbbNrdBlZagiUZ6klyQ2uoBXn/MMtAeKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:44:8c:f6:f4:45:91:8a:9f:84:1a:77:78:73:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f3e23abae3cf0b351260d66f32339928fddf2ebb
Validity
Not Before: Jun 7 09:01:03 2025 GMT
Not After : Jun 8 09:01:03 2025 GMT
Subject: CN=8db49433beeaf311883cc20ce741c22ec5f28dcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:b4:43:71:7b:db:8f:78:63:7f:70:37:65:71:
c0:8f:d8:43:86:d6:4a:72:e5:80:f4:be:f3:7e:5a:
87:2c:1d:4a:da:d7:05:ab:77:90:24:8b:48:d5:56:
05:93:d6:4e:25:13:ed:b7:b5:d9:01:18:01:3e:29:
de:95:0c:b3:4e:01:d8:26:aa:d7:a0:ac:a7:d9:13:
91:ca:62:88:74:61:20:a1:c0:82:7b:95:6a:6a:76:
e7:e3:90:41:a4:0d:1e:75:cd:fe:e2:52:f1:23:30:
e4:03:5c:5d:1e:4e:dc:67:f0:d1:52:99:d5:ab:cf:
93:5f:8a:51:57:b4:83:b0:4a:a9:c1:f3:f6:bb:34:
85:b4:0c:5f:4d:94:40:c2:14:7d:d7:0d:88:2a:a3:
9d:7c:22:ea:e6:f1:e2:92:2d:a5:03:7d:fd:f8:00:
4d:9c:8a:a3:dc:0a:91:70:38:87:34:5a:85:0f:be:
4f:f2:62:50:ac:ac:4b:97:c9:e7:e5:15:22:d2:99:
ca:20:b8:09:d8:40:3b:ed:40:f8:5a:d4:41:ac:5e:
b2:ac:5f:66:7b:f5:1b:aa:d8:b0:2a:90:20:06:6c:
05:dc:d7:a0:65:d0:c8:17:0d:01:7a:dc:5c:9d:e5:
09:59:ec:75:11:76:f3:02:23:cc:ee:cd:1d:71:d0:
e1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B4:94:33:BE:EA:F3:11:88:3C:C2:0C:E7:41:C2:2E:C5:F2:8D:CC
X509v3 Authority Key Identifier:
keyid:F3:E2:3A:BA:E3:CF:0B:35:12:60:D6:6F:32:33:99:28:FD:DF:2E:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8-I6uuPPCzUSYNZvMjOZKP3fLrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/0868af-f2d7-4905-88d2-9db6665449cb/1/8-I6uuPPCzUSYNZvMjOZKP3fLrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:27:c8:a2:03:8c:2e:e1:e8:99:98:99:31:73:20:f2:13:c2:
54:2c:d3:d8:7e:29:c3:fa:5f:8d:c1:6d:6d:58:0b:9e:f3:5b:
c5:1d:5f:d7:2f:2f:72:09:f5:3b:ba:ac:11:8c:79:c6:40:e5:
a4:c0:0c:eb:30:81:d4:0b:7e:2a:cc:4a:2f:f4:cb:64:3e:d9:
39:9e:3f:fe:af:f5:94:5e:8b:33:b1:96:65:ba:9b:e9:68:6a:
f3:f2:cb:66:37:90:e7:c5:1c:80:1c:a4:98:29:ee:40:84:25:
8e:ce:71:b4:93:09:3a:e6:23:be:0b:05:a0:e5:11:02:61:da:
81:a0:e5:4f:66:5c:69:c9:df:f9:a5:b6:53:58:20:d2:07:6a:
23:3b:84:94:5c:c8:93:b5:f6:c5:56:14:33:69:7f:c5:17:39:
d2:73:0c:cb:b8:1a:c2:23:67:df:5b:00:4c:9b:7e:24:5d:12:
42:ed:34:95:75:3c:07:d5:cc:ec:b7:e2:02:e5:4a:59:fb:45:
45:e5:17:78:de:54:7c:c9:4c:b1:4c:90:a5:13:60:9a:b2:b6:
9d:1f:0f:ee:8d:d1:24:29:06:94:74:7d:1d:51:ec:88:35:74:
95:d1:cd:6b:e8:9f:13:bb:8c:74:8c:66:00:9b:3d:8f:65:3a:
d4:ee:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 14:12:14 2025 by rpki-client