Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
File: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft (raw, json)
Hash identifier: KbKPODHz+97ta/ps+Udg4WdmopcUXDE3NxmBLkf/MQc=
Subject key identifier: 21:FC:43:E4:16:16:3B:2A:77:2D:2A:48:65:6E:2F:90:62:16:45:FF
Authority key identifier: 44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
Certificate issuer: /CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Certificate serial: 01974BFB3769F35E8A94E7E2D5344778D19D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
Manifest number: 02FC
Signing time: Sat 07 Jun 2025 20:00:44 +0000
Manifest this update: Sat 07 Jun 2025 20:00:44 +0000
Manifest next update: Sun 08 Jun 2025 20:00:44 +0000
Files and hashes: 1: RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl (hash: CfBY/qRhqJ5hrbSc75OP2ggTW0/zLCS/dmRcV3mJcFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:37:69:f3:5e:8a:94:e7:e2:d5:34:47:78:d1:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44ef206fe3085d9943cb6a063dc97e0deb7f4384
Validity
Not Before: Jun 7 20:00:44 2025 GMT
Not After : Jun 8 20:00:44 2025 GMT
Subject: CN=21fc43e416163b2a772d2a48656e2f90621645ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:25:ee:09:cf:dd:b9:8a:be:8b:77:e2:77:a8:
84:2d:bf:b1:0f:a0:ce:32:55:4a:42:a2:98:03:21:
4d:79:8e:44:ec:0d:2d:47:a7:12:bd:73:15:73:97:
c1:7b:49:fe:9d:81:c2:ae:4a:bf:e5:49:d1:60:bb:
7d:32:46:01:ea:83:45:1e:09:8e:b1:44:87:f0:45:
68:13:52:52:ac:ab:2d:72:f5:7d:4a:b7:09:59:e4:
8c:88:2f:80:88:e4:a4:66:ea:b5:5e:bf:38:e2:6a:
d6:4d:90:5a:4a:dd:1d:61:e7:4f:1f:7e:96:3e:bf:
80:99:f8:1d:1e:ac:9d:a6:64:1c:b6:82:ae:af:05:
83:97:50:fa:ae:29:00:a8:3b:3f:6e:c9:74:ab:f1:
0a:6b:a9:b9:12:85:f0:fb:6b:60:8d:18:8b:64:34:
25:ef:5e:4c:28:2d:2e:75:1d:51:c2:6a:94:4c:4c:
12:6e:13:e3:06:db:5e:f9:11:c0:9e:fe:09:ea:49:
7d:b7:e0:69:b5:81:b8:64:9e:62:12:09:95:6e:4d:
03:1b:f3:39:73:64:5a:e3:f0:bb:42:cb:ec:f2:10:
12:8e:83:16:fd:c5:78:d6:d9:4f:a5:8d:a1:62:84:
95:d0:c2:da:3f:1b:c6:5c:54:1f:3d:05:21:25:1c:
a8:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:FC:43:E4:16:16:3B:2A:77:2D:2A:48:65:6E:2F:90:62:16:45:FF
X509v3 Authority Key Identifier:
keyid:44:EF:20:6F:E3:08:5D:99:43:CB:6A:06:3D:C9:7E:0D:EB:7F:43:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/62b5ed-5f84-4bfb-85fd-fbd50cd88ec4/1/RO8gb-MIXZlDy2oGPcl-Det_Q4Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e7:65:cc:24:1a:db:4b:bb:6c:0e:cc:d6:b2:c6:d1:20:07:
53:79:9c:a8:cb:ed:71:7d:ea:b3:90:62:88:1a:33:e9:06:27:
44:73:0a:ba:0f:68:c4:f8:5f:8a:07:db:f6:b9:29:ef:14:a5:
62:c0:7b:c5:3d:0f:cc:11:05:38:2e:39:78:8f:52:3b:c2:06:
d4:83:f6:00:5e:69:2a:21:b5:e0:fd:06:6e:e0:0f:26:f7:fc:
c6:ac:6e:c8:22:aa:52:c3:26:38:03:39:55:60:bd:bd:4d:0e:
62:80:87:c5:27:8c:33:b5:2b:ef:9d:19:2b:f0:4a:36:75:88:
ae:32:9e:32:72:07:15:16:65:31:3c:13:76:04:fa:df:fa:62:
22:98:3f:93:5e:b9:d5:00:ac:56:86:df:c9:ce:5a:13:1a:31:
d7:69:56:e1:3b:ff:60:41:8e:41:c5:dd:dd:b1:17:d1:72:bc:
ac:c5:b2:9e:33:4a:f5:c4:69:2d:9c:8d:7b:aa:fa:7e:6f:0d:
e8:fd:ca:18:50:c5:4f:5e:80:2b:80:46:a2:29:be:3f:64:e2:
f9:7d:a4:51:1c:e7:18:bb:d6:07:10:d0:0f:c2:6c:c1:80:e8:
34:d3:6f:6c:96:3c:ce:8e:8d:a0:87:05:0f:b9:dc:37:dc:2a:
ef:71:cd:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 00:26:53 2025 by rpki-client