Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
File: 8LKNasbsQN-yL5b3tVYWnASZATc.mft (raw, json)
Hash identifier: hXr+Xh0+4c5JHOa/tkH9NorsfXErmprgjXPdiM5Ihpg=
Subject key identifier: F7:BF:15:DD:04:37:1F:AB:CA:53:1D:76:EF:5F:29:33:1C:83:AE:7D
Authority key identifier: F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
Certificate issuer: /CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Certificate serial: 0197507CE7703BFD4C19A3F3D5C1DFEC19CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
Manifest number: 10C1
Signing time: Sun 08 Jun 2025 17:00:52 +0000
Manifest this update: Sun 08 Jun 2025 17:00:52 +0000
Manifest next update: Mon 09 Jun 2025 17:00:52 +0000
Files and hashes: 1: 8LKNasbsQN-yL5b3tVYWnASZATc.crl (hash: OS5qitOU7det0ALRo/Rielg21ojyiZUioxwsYmKAl4E=)
2: egJez3AEE17hCNzFwTYyy-yFWOk.roa (hash: tusTlSSqSFD7zKHlwWaKcKWcJ80R+Gl9wxxF6SdsjMs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:e7:70:3b:fd:4c:19:a3:f3:d5:c1:df:ec:19:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0b28d6ac6ec40dfb22f96f7b556169c04990137
Validity
Not Before: Jun 8 17:00:52 2025 GMT
Not After : Jun 9 17:00:52 2025 GMT
Subject: CN=f7bf15dd04371fabca531d76ef5f29331c83ae7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3d:29:64:42:0a:d1:cf:26:b9:70:70:e5:68:
e5:06:a3:bb:42:68:5d:9c:d2:5f:59:2f:90:1e:0e:
15:ba:d2:cc:79:50:1d:01:4a:a2:11:57:84:76:8b:
01:22:cb:3a:18:1c:f7:75:8b:d7:db:2f:25:ba:01:
a0:5d:64:ff:26:78:f2:b3:27:16:e9:61:ae:57:e8:
86:7b:a3:c8:8d:32:20:d8:6c:75:03:5e:e5:12:05:
fe:1b:c5:e3:77:b0:fa:ec:b4:18:06:e0:5c:11:b5:
6d:91:13:33:8e:f1:7c:4f:72:4a:08:9e:6d:ed:10:
6e:04:ef:5a:61:d4:59:98:4a:0a:57:7a:ee:9b:d6:
9a:73:36:6e:64:b2:0a:87:24:4c:83:e2:ac:e2:f7:
8a:4a:4b:ce:c8:a6:d8:fc:f9:31:fa:28:ed:2e:13:
1f:30:dc:78:c7:5a:06:4a:6a:71:45:3f:5d:1f:bd:
3e:12:dc:64:58:da:75:d6:26:aa:85:02:46:3b:7e:
a8:ea:27:29:97:f6:da:7f:63:8e:5b:60:33:d5:13:
58:95:94:20:b9:df:da:f2:69:8a:9b:16:e1:d1:93:
95:0c:88:63:6a:03:86:66:18:6e:d2:41:95:1f:19:
1a:98:61:d1:d2:bf:06:6c:36:37:16:e8:a3:b0:77:
03:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:BF:15:DD:04:37:1F:AB:CA:53:1D:76:EF:5F:29:33:1C:83:AE:7D
X509v3 Authority Key Identifier:
keyid:F0:B2:8D:6A:C6:EC:40:DF:B2:2F:96:F7:B5:56:16:9C:04:99:01:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8LKNasbsQN-yL5b3tVYWnASZATc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/5ce7f7-e0fe-4361-82c2-474659edb361/1/8LKNasbsQN-yL5b3tVYWnASZATc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:b6:47:ac:d2:f4:97:78:4c:a3:11:d0:14:12:a5:6a:4d:8f:
3b:8d:21:8c:80:34:e5:61:eb:51:12:35:44:f6:87:ad:69:64:
b9:fd:d9:65:25:5c:f2:fc:82:b6:8e:b1:25:94:e7:3e:26:42:
3c:66:b7:f5:fc:70:17:07:b6:1b:57:11:eb:96:ea:37:d9:49:
f6:ef:44:ed:65:85:cf:9e:44:0a:36:fa:73:76:f7:e6:06:75:
2d:45:e5:8e:00:49:62:0d:0d:72:23:ea:fe:c9:25:e4:19:21:
d0:d2:dc:d3:42:96:a0:13:8f:1c:10:86:b4:3c:bc:e9:2b:35:
00:18:46:30:2f:eb:2e:38:7a:6b:80:5c:61:07:78:5c:a1:c3:
59:80:8c:d0:ce:d9:1c:13:1f:be:45:99:56:b9:b2:ef:8b:f1:
a9:4a:b6:6a:f7:bb:5e:1e:9a:10:c8:6a:a5:19:2c:16:c1:f1:
bb:63:0d:0c:bd:c1:89:35:12:11:4d:22:08:a9:3c:85:e7:2f:
2c:f0:e6:52:45:ac:36:99:9a:6c:f8:ee:9d:bf:e8:bf:0a:30:
3c:86:5b:63:f4:79:4c:aa:87:5d:d8:70:39:6c:e3:09:71:c1:
3f:9d:81:96:e1:d4:88:d9:36:b7:d3:44:d5:a1:a9:fc:e6:7e:
0f:aa:ea:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 9 00:23:08 2025 by rpki-client