Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: q4DuGJDtS3RGrONHhwvZ7WPntVMEimiOkYs4SIqgnf8=
Subject key identifier: D7:15:7A:A6:A7:9E:76:E2:7F:13:4B:09:9B:E6:90:70:E9:1D:DF:36
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 019750B386043CB0D15AB36C5A064495707F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 0CEE
Signing time: Sun 08 Jun 2025 18:00:31 +0000
Manifest this update: Sun 08 Jun 2025 18:00:31 +0000
Manifest next update: Mon 09 Jun 2025 18:00:31 +0000
Files and hashes: 1: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: juoZJgokufYppMQcF7gY4VhkQkd02zFyYjjO1/PVxxo=)
2: YkEpFHQglRkkx7TW2iOd8M7ku-c.roa (hash: kIeQhyyEYB0FfxtFkPtqVvMk30nvPQUJg2CwKA7jeLY=)
3: uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa (hash: cH522XBAhZQR4is+g9SDDOs+Uj5P/+RJANdH54+jdMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:86:04:3c:b0:d1:5a:b3:6c:5a:06:44:95:70:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Jun 8 18:00:31 2025 GMT
Not After : Jun 9 18:00:31 2025 GMT
Subject: CN=d7157aa6a79e76e27f134b099be69070e91ddf36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:86:60:0e:6b:b6:dc:f1:de:88:e1:14:da:6d:
ec:79:67:f5:11:be:3a:97:9e:59:69:8d:36:1b:41:
6d:ae:2d:83:13:2c:6f:f1:17:ba:99:b3:99:04:a5:
da:96:89:78:8c:44:97:24:55:2c:ab:b8:90:ff:04:
32:bc:54:09:43:d5:4c:42:ba:49:e7:e6:ab:6b:6e:
54:e9:4e:99:ae:38:7c:2f:f6:9a:d5:bb:ec:f6:8d:
19:a8:0d:80:1e:24:eb:b4:11:2b:49:87:a5:ed:d9:
48:2c:9d:fc:25:c4:b6:ed:7f:89:6e:72:08:e0:41:
e2:c6:f5:ce:dd:04:1b:0d:48:83:df:8b:a3:6b:de:
1b:4f:b7:f3:cc:27:01:f9:d6:a1:e8:e2:8d:f8:e8:
52:59:72:26:f7:11:13:f1:c3:0a:23:fa:b6:ed:86:
c9:c2:6a:bb:2d:0b:ad:d3:81:ad:4b:ee:34:03:5e:
ae:b3:75:4e:85:4c:67:ad:82:b4:25:53:b9:f7:ab:
08:a6:d5:64:f7:53:7c:57:7c:d3:84:9b:11:32:d8:
92:e6:a5:a2:c5:a5:4e:a7:1b:5f:eb:95:38:4b:cf:
0e:5b:cf:c8:43:58:df:13:42:67:f1:06:60:88:be:
dc:c2:ed:0d:0d:08:cb:7f:27:7f:33:6d:76:ca:cb:
f7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:15:7A:A6:A7:9E:76:E2:7F:13:4B:09:9B:E6:90:70:E9:1D:DF:36
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:91:9f:ce:f8:b4:40:30:f0:33:63:be:f7:8e:fc:ba:78:fb:
60:82:0a:75:aa:53:8e:72:81:d0:fe:3a:5e:b7:c2:a5:76:c5:
26:8d:a1:7c:87:5e:a4:95:6c:31:bd:0e:88:36:ef:d9:f1:dc:
e0:79:df:e1:dd:ad:e4:5d:b5:09:45:cb:fc:40:6b:fa:8e:02:
e6:5c:8a:12:14:bb:40:7b:2f:f7:61:5f:29:fa:61:44:11:7c:
da:21:6f:2b:ee:9c:94:b8:84:3f:93:de:a1:02:4a:c0:0b:6f:
50:c4:87:ea:b1:e1:0e:24:ae:3d:f0:0f:e5:42:9e:07:de:08:
87:72:27:ec:73:c8:c1:20:f9:ae:ae:b7:12:b0:be:58:26:d9:
9b:38:52:11:77:ec:8b:7d:ca:94:98:f1:d4:25:12:83:ee:d0:
0b:96:b6:62:4f:c5:13:41:b8:15:16:77:de:be:87:57:e8:88:
ee:04:4b:27:4c:92:1f:36:06:50:87:e6:69:0e:bb:f9:56:bf:
97:eb:f8:65:03:b3:ed:5e:9a:15:d7:3d:f4:a1:7f:86:0e:71:
26:ca:b4:cf:04:55:b2:74:38:95:cc:08:a9:81:c9:1e:73:06:
fb:a3:91:08:f3:0c:7c:8c:44:31:c5:99:36:99:3d:10:30:d4:
d8:84:f6:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:57:21 2025 by rpki-client