Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
File: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft (raw, json)
Hash identifier: sebbx+9x5yke8ymTvBPLm3aLPQimIRThCV8K6fkw4Yw=
Subject key identifier: 15:61:C0:7F:75:A0:53:60:7F:F9:EB:E9:FA:85:92:1F:F0:94:23:2F
Authority key identifier: F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
Certificate issuer: /CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Certificate serial: 01974A7B5CC77C2CA54D6FAF4937E160A765
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
Manifest number: 1580
Signing time: Sat 07 Jun 2025 13:01:28 +0000
Manifest this update: Sat 07 Jun 2025 13:01:28 +0000
Manifest next update: Sun 08 Jun 2025 13:01:28 +0000
Files and hashes: 1: 8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl (hash: mRXvF7OXs/hzNpYChWMyWku57FyIOrMhwr+19reCgzA=)
2: WVDdYi47m-6hf2_QV0K2CVkP7zw.roa (hash: 9WCgzOj2n+hDIFLmZXxef2ObXsI93yW31Mx8FRKIiM8=)
3: _nQyzxD5tzJPLFHKcoFX_hH-tT8.roa (hash: K943OWLrTeetJ5gY0wxowSl9TJP/OQ1YX347sbUwBP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:5c:c7:7c:2c:a5:4d:6f:af:49:37:e1:60:a7:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f01c8997a354bc7d4e5a60a9f42438a182fa998a
Validity
Not Before: Jun 7 13:01:28 2025 GMT
Not After : Jun 8 13:01:28 2025 GMT
Subject: CN=1561c07f75a053607ff9ebe9fa85921ff094232f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2e:f3:3e:0f:94:ed:17:46:41:73:4e:6b:9b:
98:5d:f9:26:d5:c2:2f:42:7e:cc:55:52:8e:26:ce:
fc:0d:6e:68:2c:59:7c:c3:dd:d6:1f:c0:2a:56:60:
e2:45:4e:36:9e:82:ff:e6:51:52:51:e1:02:63:fb:
07:8d:8e:20:f0:28:96:73:56:cb:3f:68:f4:51:3c:
ab:6a:1c:c9:c7:16:00:ee:71:4e:04:12:d7:ff:96:
37:77:94:2d:1f:22:ae:3b:6b:bf:d2:03:48:33:a9:
2c:fd:9a:bb:19:9d:3d:65:af:d4:05:66:e2:a4:8a:
e7:f2:90:e5:05:d4:66:fa:2a:4e:96:fa:4f:e2:13:
07:6c:f5:76:b4:a9:b3:3a:ef:75:ec:90:78:0d:26:
0d:5b:9d:3c:9d:eb:54:85:13:4b:92:96:11:9b:12:
c7:7a:ca:13:ac:d9:39:8f:e2:73:92:2f:75:72:e0:
a6:25:8a:77:2e:10:6d:62:d9:e7:00:a1:fa:e6:d9:
44:0e:fc:07:4f:d0:a0:fb:c6:5a:9e:2d:8f:fc:36:
fc:cd:23:bf:5e:30:bb:71:ee:0c:95:21:bc:0a:16:
8e:ce:2d:3b:dd:75:e1:27:2c:b2:28:68:8e:ed:56:
8e:6e:f5:23:ce:44:8e:0b:cb:d4:fa:0e:7b:f4:c9:
56:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:61:C0:7F:75:A0:53:60:7F:F9:EB:E9:FA:85:92:1F:F0:94:23:2F
X509v3 Authority Key Identifier:
keyid:F0:1C:89:97:A3:54:BC:7D:4E:5A:60:A9:F4:24:38:A1:82:FA:99:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/faa95f-3b32-41fe-abe3-c27c4a610bd3/1/8ByJl6NUvH1OWmCp9CQ4oYL6mYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:ce:8f:5e:d3:49:16:c3:88:8d:da:04:ad:c8:a1:52:0d:43:
68:47:42:a5:4e:af:fc:a8:4f:b3:e7:a0:43:96:3a:42:a9:ea:
cc:86:e7:f7:3c:64:b4:d8:46:b6:47:a7:1d:3d:9b:e4:3a:09:
03:bd:97:6b:52:f0:10:a7:3d:63:1d:21:fd:5d:52:2c:c0:08:
df:00:e0:08:c8:84:9b:b6:d3:13:77:7f:d1:e9:78:2d:a9:a4:
e9:3e:8f:97:e0:6b:29:af:55:c0:39:ee:a0:b0:b2:15:44:d1:
f3:a0:f9:11:39:11:9e:6a:04:e8:e6:30:97:77:93:91:8d:3b:
43:00:f8:b9:ba:46:3b:da:68:10:3e:04:aa:7a:9d:30:02:c5:
20:db:b3:15:56:e1:d1:50:27:e4:e0:7d:22:99:01:e5:ba:45:
8b:b1:42:e8:a8:d5:58:98:20:94:a1:e1:2f:bd:47:f6:bc:f7:
d9:a1:bc:7c:10:ab:f5:9d:80:32:da:ac:55:d6:99:d7:0c:0c:
89:0f:e5:12:57:f1:a7:1b:df:e3:74:8d:7f:32:ee:c5:83:d3:
45:ea:fa:8e:0a:5f:af:ff:5b:35:05:ed:47:9e:60:ba:a3:b1:
d4:9b:ad:18:b0:f8:97:c5:8a:4d:07:86:fa:39:4b:18:1a:bd:
98:77:40:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 16:30:14 2025 by rpki-client