Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
File: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft (raw, json)
Hash identifier: GrsJqrA394hNnRok8kVaJC9ujiq+R1n3InyZVQamTcE=
Subject key identifier: F9:5B:58:6A:2F:CC:D3:13:5A:8A:A7:72:9A:34:35:F0:E0:17:31:15
Authority key identifier: F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
Certificate issuer: /CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Certificate serial: 019739BE43A54C915835B574D808C73349E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
Manifest number: 0FBD
Signing time: Wed 04 Jun 2025 07:00:59 +0000
Manifest this update: Wed 04 Jun 2025 07:00:59 +0000
Manifest next update: Thu 05 Jun 2025 07:00:59 +0000
Files and hashes: 1: 3xyNiwxMLt2FgnnzD8FWO0WnAhc.roa (hash: pOZz2o1zgseBlXSeMbMTXOoQ45eoVXgqdP67Uo4BTQg=)
2: 8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl (hash: zXNB/AsEVOqGOjVjL/5me4LEYfCHMJLM5pT2yfZuui8=)
3: I-Q-pMgCHQ9W_jpWDux3P7cZIcY.roa (hash: pAX53nRh4A+NdTng//otyGRQizgrDPu6+ERbaPVic0o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:39:be:43:a5:4c:91:58:35:b5:74:d8:08:c7:33:49:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f15cb9afc8a8670e1f116cbd21499c9f71215bc0
Validity
Not Before: Jun 4 07:00:59 2025 GMT
Not After : Jun 5 07:00:59 2025 GMT
Subject: CN=f95b586a2fccd3135a8aa7729a3435f0e0173115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:d1:d0:a1:38:06:61:9c:e8:20:1d:d7:7b:
f0:58:dd:51:78:51:40:88:b7:e0:ee:5b:98:f6:d2:
26:64:da:0f:85:8b:e9:69:b3:56:1f:3c:85:88:39:
85:69:a1:87:be:ee:27:36:48:83:e7:fc:d3:a8:a3:
70:fc:f6:41:0a:65:75:b5:68:b8:65:19:37:0c:49:
ae:09:bf:83:04:89:28:77:b6:33:63:89:29:19:f7:
9c:86:cd:7e:ac:72:51:01:1a:10:d4:7b:33:eb:eb:
19:02:16:cf:a4:4f:41:d8:e5:36:f2:5d:1b:5b:18:
f8:bb:71:f7:6f:24:f6:2a:9d:55:1b:ac:89:86:0e:
29:63:f0:87:99:42:46:d0:a9:8f:3a:fe:00:d4:d1:
fb:98:5a:c5:f2:87:46:53:ff:b1:73:05:32:1d:b1:
8a:be:4e:9d:46:52:ad:ea:ac:b1:bc:59:11:88:ce:
f5:e6:a7:74:ed:44:62:41:2a:ec:9a:fc:f8:de:28:
e0:be:2e:a3:ee:2e:1c:70:12:4d:aa:4f:a8:22:74:
33:9f:64:cf:d4:9b:c6:03:df:dc:f6:8f:81:a1:2c:
25:17:4d:68:4d:31:7a:c1:21:4b:de:f9:c8:c2:30:
46:2c:3b:d3:8b:97:e3:f5:ae:b3:00:92:b5:5a:17:
35:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5B:58:6A:2F:CC:D3:13:5A:8A:A7:72:9A:34:35:F0:E0:17:31:15
X509v3 Authority Key Identifier:
keyid:F1:5C:B9:AF:C8:A8:67:0E:1F:11:6C:BD:21:49:9C:9F:71:21:5B:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/977d70-6c87-409d-8ef8-027a743ba462/1/8Vy5r8ioZw4fEWy9IUmcn3EhW8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b4:48:46:1d:06:97:3a:23:93:73:63:ae:bb:b5:ab:32:3e:
06:cb:96:e2:ce:3d:d7:c1:b9:b0:31:2b:2b:e8:01:41:07:bc:
b9:0a:94:be:a6:09:92:4b:35:7c:fe:20:b3:84:0b:e6:24:60:
e6:1b:33:92:62:4d:e3:fe:18:94:d5:4d:ba:ee:92:ff:35:6f:
c5:38:0f:d5:48:24:98:11:79:6b:8e:68:87:2f:30:fb:7a:3f:
7b:3c:fd:a9:b6:05:85:46:6b:e7:ca:00:ca:97:98:c1:02:c5:
af:f0:2e:46:8d:08:ef:3d:8f:ad:01:72:b1:32:bc:05:69:07:
16:d5:4a:0d:5f:87:3a:18:65:1a:7b:2f:56:00:b7:3b:24:a9:
d3:70:41:3f:e5:d9:91:cc:3a:da:bf:7f:33:36:99:3a:2e:f1:
bc:53:25:36:56:05:05:5b:fa:89:73:b8:a9:50:28:b6:5d:ec:
18:1b:7a:ff:42:1e:ab:ff:05:da:a4:e4:fb:39:47:67:3d:01:
ea:3c:00:e2:d4:ec:05:83:71:86:8d:41:2c:d9:65:67:6f:74:
46:f0:85:ef:9a:d5:0d:ca:1f:1e:20:dc:4d:51:06:73:db:8e:
5f:92:d6:23:4a:95:60:df:d5:49:f8:69:b1:4e:22:e8:60:89:
5e:cc:4a:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:40:48 2025 by rpki-client