Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
File: 8tWTsch7gXOexBkQKVvzhfLJqZI.mft (raw, json)
Hash identifier: s73VOEjuef5V7D6qgweOZ4rTZtHUH1XBiGbv57n4HTg=
Subject key identifier: 86:5F:ED:E8:C5:E9:17:B6:8B:BE:CA:51:69:69:9C:75:2D:09:51:D6
Authority key identifier: F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
Certificate issuer: /CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Certificate serial: 019757915FFEC99E646DEEA6F750E77BDA68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
Manifest number: 0E77
Signing time: Tue 10 Jun 2025 02:00:34 +0000
Manifest this update: Tue 10 Jun 2025 02:00:34 +0000
Manifest next update: Wed 11 Jun 2025 02:00:34 +0000
Files and hashes: 1: 8tWTsch7gXOexBkQKVvzhfLJqZI.crl (hash: lLgFD2Ubdd7CvFQq+IqiDViNzF8TZWPw8HEULB9wZh8=)
2: alsuRe4zIZd9zoPDISZt1Bveg70.roa (hash: EWpeZ5riJCjW/KG77BSV/gky0WcGkW9H+LHjXXYnpDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:57:91:5f:fe:c9:9e:64:6d:ee:a6:f7:50:e7:7b:da:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2d593b1c87b81739ec41910295bf385f2c9a992
Validity
Not Before: Jun 10 02:00:34 2025 GMT
Not After : Jun 11 02:00:34 2025 GMT
Subject: CN=865fede8c5e917b68bbeca5169699c752d0951d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:38:e1:13:b5:a6:04:1c:f6:f6:da:88:3e:
51:aa:d1:c4:49:a5:95:54:08:9a:65:7d:37:61:c9:
9a:b1:f6:07:6e:59:9b:93:e1:9f:9a:22:b2:ef:a6:
ac:a1:ef:fa:28:31:56:03:34:c7:f1:ff:6b:0b:c5:
8d:8d:14:af:ad:f4:4b:f3:58:41:b6:e4:e6:d7:e0:
33:ed:72:80:24:f4:6c:10:37:e2:f3:10:bb:6c:1a:
6c:0e:96:af:e9:14:3b:90:ea:a7:b7:64:1b:e3:28:
68:00:a4:69:49:c1:ac:66:38:d6:64:94:f5:13:ef:
4d:48:b3:75:c0:97:62:36:d3:ef:df:5d:e6:67:fb:
0e:4c:9b:fe:a8:2d:f3:92:fe:ea:92:4f:09:56:ab:
72:77:e3:7b:32:6e:36:cc:28:bb:ec:8f:97:c4:6e:
5c:9f:7b:9e:65:0d:a2:df:41:75:ee:ef:f3:d3:bf:
71:ce:2d:a9:6c:3e:e5:31:d2:4e:04:03:cf:52:6f:
c6:cd:ff:10:01:ac:0b:3e:41:29:32:06:28:4b:ca:
36:20:55:ed:f5:52:3c:a6:22:1f:6d:4a:c0:00:88:
da:8b:da:b4:ea:0b:e5:17:e3:5a:ef:bc:be:f6:84:
d4:ff:a1:e9:2c:c6:50:8e:8f:85:bc:75:30:60:4c:
cd:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5F:ED:E8:C5:E9:17:B6:8B:BE:CA:51:69:69:9C:75:2D:09:51:D6
X509v3 Authority Key Identifier:
keyid:F2:D5:93:B1:C8:7B:81:73:9E:C4:19:10:29:5B:F3:85:F2:C9:A9:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8tWTsch7gXOexBkQKVvzhfLJqZI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/9391a6-dd3f-4933-9da2-9b8d68ee87fc/1/8tWTsch7gXOexBkQKVvzhfLJqZI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:34:4a:1f:67:27:30:d4:a8:65:89:cf:85:a5:b7:74:f4:2c:
87:e5:19:e3:cc:7c:2e:82:c6:ec:fc:70:8f:71:72:22:fb:ed:
cb:88:2b:71:0b:20:d8:6e:2a:93:66:8d:54:2d:88:88:f1:c4:
d9:8c:bd:16:d4:37:9d:2d:e1:00:4f:8c:7f:e2:05:b7:ca:3f:
4a:31:61:a6:ff:dd:f2:9d:60:a5:8b:05:99:9b:7f:09:81:e7:
1f:53:48:34:f7:f9:d9:54:10:db:ac:1e:88:d4:58:c7:0e:80:
22:67:74:07:d1:85:2d:f7:8e:ff:88:2b:9d:e5:3d:66:b2:db:
24:ed:d4:d7:59:4d:fc:4c:ec:36:77:53:93:8b:46:f5:dd:c8:
c7:ce:4e:db:f1:49:3f:fc:26:22:43:ef:50:55:1f:76:89:83:
c3:39:a5:ea:8d:6c:4c:fb:ec:6f:99:23:ce:a8:e7:99:43:6e:
1f:b8:d4:17:93:08:7c:a1:92:47:f3:a5:8d:bc:54:96:6f:57:
be:0a:f7:af:f0:a8:61:d1:fe:99:72:be:7e:a5:90:ee:5b:3b:
0c:ec:6a:bd:fd:4b:2f:d2:1c:c7:12:0c:b2:3a:cc:12:f3:de:
de:a3:d2:61:c8:9b:cd:58:cc:f2:07:8d:31:29:a2:2b:7e:7b:
e1:f7:5b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 11:41:15 2025 by rpki-client