Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
File: fI5wl5kOWmcXjil4daDZ9GBYkqY.mft (raw, json)
Hash identifier: aojarU4PULOpIrDMXyxWpQzgL/w8LeoQqNSZy3oKHn4=
Subject key identifier: 88:3B:F2:D8:E3:A2:F1:CB:05:85:62:5A:E8:84:55:6D:D8:A0:96:D1
Authority key identifier: 7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
Certificate issuer: /CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Certificate serial: 0197518FB2FECC13401925726E840ED46CCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
Manifest number: 0C3C
Signing time: Sun 08 Jun 2025 22:01:01 +0000
Manifest this update: Sun 08 Jun 2025 22:01:01 +0000
Manifest next update: Mon 09 Jun 2025 22:01:01 +0000
Files and hashes: 1: fI5wl5kOWmcXjil4daDZ9GBYkqY.crl (hash: caeku8joRGykTZRrEM96MiWk39KUgFRYW3ViaXQA+rE=)
2: x5BCA2nXSzjfqsyhw28GUZqlIA0.roa (hash: XYC94H5SlTsc3HXQBpsVEd85N9+lJ9Ig2x3jNjrZbWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:b2:fe:cc:13:40:19:25:72:6e:84:0e:d4:6c:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c8e7097990e5a67178e297875a0d9f4605892a6
Validity
Not Before: Jun 8 22:01:01 2025 GMT
Not After : Jun 9 22:01:01 2025 GMT
Subject: CN=883bf2d8e3a2f1cb0585625ae884556dd8a096d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:aa:e4:05:4b:03:93:07:54:9b:ae:b1:5b:e6:
0d:18:19:1a:02:db:46:d6:33:52:2c:3c:d1:8c:e6:
7a:a0:b1:c9:19:66:61:48:88:34:8a:c7:5b:ea:54:
ab:a2:0a:0c:1b:ce:2d:fe:18:4f:18:b1:b5:60:35:
87:4a:54:99:62:23:aa:f7:6c:c6:04:3f:68:0f:b9:
f3:26:d3:98:1f:0b:d2:00:10:31:ca:ea:7e:89:95:
e3:b6:83:7a:6f:c2:9f:f5:34:25:3c:b1:a6:3f:e2:
7f:c5:24:5c:e5:d2:75:d1:00:7b:b8:60:2e:54:9e:
b3:c3:ab:ab:d8:5c:3e:1d:1d:06:21:ab:d5:5e:a6:
11:89:cd:31:c6:28:43:9e:69:d5:94:be:b3:f0:0b:
e6:a3:f2:ad:ae:0d:7e:5f:f8:b4:bd:08:f3:8b:ca:
60:ca:66:2a:a0:2b:4f:6e:c1:c2:96:a2:d0:fe:ea:
27:36:d7:b2:b7:19:c2:db:21:ad:a8:32:d6:07:d5:
76:e1:d7:89:82:21:ed:2f:77:b8:d2:99:fc:34:b5:
00:bd:13:3b:89:57:64:02:f2:62:de:6c:99:1c:8d:
50:37:b2:2b:fd:90:55:8f:4e:ba:e8:c3:0e:51:b0:
ea:45:7c:f6:5b:05:55:03:77:ed:9c:da:f4:39:87:
c2:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3B:F2:D8:E3:A2:F1:CB:05:85:62:5A:E8:84:55:6D:D8:A0:96:D1
X509v3 Authority Key Identifier:
keyid:7C:8E:70:97:99:0E:5A:67:17:8E:29:78:75:A0:D9:F4:60:58:92:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fI5wl5kOWmcXjil4daDZ9GBYkqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/8acaf7-e0ca-4344-9dfd-a8ac41809f5f/1/fI5wl5kOWmcXjil4daDZ9GBYkqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:cc:08:21:8c:ca:72:e6:9d:86:ac:63:36:a9:95:95:bb:84:
31:8b:5e:9c:5f:7a:32:0e:9d:e2:01:fe:e9:bb:26:f1:b1:62:
18:6e:d1:2a:64:16:b6:f8:69:f7:1a:75:bc:1f:13:3a:e5:08:
1c:ab:9b:69:9a:7c:a9:c2:61:55:43:cf:a8:73:9a:9a:eb:9b:
c4:0c:47:b1:09:72:21:55:cb:0f:f7:b6:86:a4:64:cc:9d:39:
3d:0b:5f:5e:c4:03:98:de:51:31:b0:50:fe:3d:a0:9a:97:48:
db:84:7f:95:f8:e2:22:6a:44:b0:2c:37:0f:e3:ee:e3:8c:38:
21:f2:07:47:c9:ce:01:85:04:76:c5:fc:20:87:d8:09:93:1e:
66:48:c4:26:fa:e7:d6:86:fe:ee:ea:8d:ec:18:32:54:b7:1d:
30:c1:ea:53:08:d9:9e:9b:24:13:15:95:2f:73:d0:54:5d:8a:
92:81:9d:4c:fd:5b:ea:5e:ad:e2:24:af:7c:cb:85:98:99:56:
ae:87:8a:19:b0:ee:6a:9b:95:55:29:08:ff:dc:09:d5:27:c5:
ea:da:e6:22:ca:04:ca:12:95:bd:c8:84:fb:d2:2e:84:2d:ab:
20:28:b8:e8:46:5a:88:35:96:36:10:3a:f9:47:e2:2f:31:b4:
3c:e8:af:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 03:25:37 2025 by rpki-client