Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
File: 8bFed69O3eERksb-zVCyHNN51CE.mft (raw, json)
Hash identifier: 5aFJaPj1QvVwtTyPX3jbfEeMdxIHHE5VplWe2HFRjsg=
Subject key identifier: 4E:90:B6:A9:8E:2B:47:02:4E:3E:28:44:57:0A:19:6A:B3:7F:3F:23
Authority key identifier: F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
Certificate issuer: /CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Certificate serial: 01974BFB2FE5672C5213383946CB488F9A5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 20:00:42 +0000
Manifest this update: Sat 07 Jun 2025 20:00:42 +0000
Manifest next update: Sun 08 Jun 2025 20:00:42 +0000
Files and hashes: 1: 7XoxbsiH0tvuamwOaZJkHsbncU8.roa (hash: eOLDYEBs+ePiFOo04IA8xxSpoLseLj4knNzwy/AuO7c=)
2: 8bFed69O3eERksb-zVCyHNN51CE.crl (hash: K1bKc7feVmrtVr1QFazC7Gstgo407lkq1cSbGyy4b00=)
3: jMGhTNUb7i42fBQA0pNbTbsvC0w.roa (hash: 3rIrbzRKv4rGgOKlFAltJmUMNb9Mmay1gOYKugMTp+I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:2f:e5:67:2c:52:13:38:39:46:cb:48:8f:9a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b15e77af4edde11192c6fecd50b21cd379d421
Validity
Not Before: Jun 7 20:00:42 2025 GMT
Not After : Jun 8 20:00:42 2025 GMT
Subject: CN=4e90b6a98e2b47024e3e2844570a196ab37f3f23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a8:07:74:2f:63:a7:44:a5:4a:2b:c5:5e:02:
1e:a5:f5:48:0a:fc:72:a7:bf:ad:97:97:c9:8d:5a:
d2:b9:ff:0c:f7:94:a3:38:2b:29:f1:fc:07:63:76:
20:15:10:a0:ee:b5:4c:d1:28:6c:1e:e6:5d:3f:67:
d0:0e:13:df:b3:f1:56:b9:ea:84:45:89:e7:e9:9b:
8b:da:80:03:b8:b1:34:9b:8a:e2:84:80:0f:1c:b2:
b9:10:0c:aa:60:40:b1:b4:eb:6d:53:be:41:eb:b5:
b2:c1:f3:d4:9a:a2:9c:0e:65:e3:11:62:76:b2:36:
cd:94:e0:5c:b2:dd:b0:d5:c6:cc:21:59:46:dd:c7:
42:1e:a6:8d:e1:5a:49:8b:52:90:44:b0:f6:36:e1:
40:03:6c:ef:63:13:bb:b1:b6:56:5f:c2:61:04:69:
0f:70:88:79:0e:1b:50:cc:7a:22:18:7f:ed:20:a7:
d7:bc:48:a4:56:49:a1:9d:e8:5d:7c:83:7c:b0:d9:
e7:81:ec:3b:37:3b:df:d8:53:8a:a8:49:62:27:0f:
2e:ee:54:37:55:a0:39:a8:a4:ca:b7:09:e1:0f:fb:
ae:20:e0:41:8d:3e:43:e8:78:2a:4f:b0:33:52:5e:
d5:9f:be:3e:ce:70:b5:d9:fa:1a:f5:76:fd:41:57:
a1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:90:B6:A9:8E:2B:47:02:4E:3E:28:44:57:0A:19:6A:B3:7F:3F:23
X509v3 Authority Key Identifier:
keyid:F1:B1:5E:77:AF:4E:DD:E1:11:92:C6:FE:CD:50:B2:1C:D3:79:D4:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bFed69O3eERksb-zVCyHNN51CE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/500fa9-6fb8-4768-80de-1340cc5b3d57/1/8bFed69O3eERksb-zVCyHNN51CE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5d:33:3e:e3:3a:f4:6f:70:bf:bb:3d:c0:a2:f1:5a:b5:df:
3c:f3:54:24:d8:1b:c3:51:bc:bb:28:53:4c:78:33:1b:e9:c3:
92:8e:63:1a:d4:85:74:ee:3b:3f:88:d9:c0:8e:bb:9c:d9:e6:
ae:3b:78:9c:0b:f4:ae:59:db:19:f8:49:06:23:43:0c:af:08:
b0:e8:38:56:dd:31:07:d2:3f:a0:7c:03:c7:98:59:fc:db:43:
d2:e2:56:2f:3b:30:86:0f:2d:32:35:98:58:aa:ba:fe:fb:5a:
ed:93:cd:23:be:f0:3a:b8:d6:a0:3c:51:d5:31:55:fd:ae:74:
a8:cd:36:96:a4:77:45:da:c7:6f:ff:d6:1e:6b:22:1d:33:13:
1f:36:8a:2f:bf:c4:e8:7e:0f:a5:c4:d9:50:5a:b5:89:13:13:
4d:bb:4a:15:9d:66:9d:6d:6e:9c:6b:1c:9c:b1:0a:f3:d6:aa:
a5:bc:70:11:5f:26:03:6b:75:33:f7:b9:c5:5f:9f:1d:dc:d4:
f6:cc:d8:16:b1:58:98:02:16:94:77:16:7a:ba:40:1d:a5:f7:
22:e6:b5:eb:16:2d:e9:ac:28:bb:83:33:21:b9:52:d3:14:fb:
21:ff:b4:2c:42:4c:60:1e:aa:0f:87:b5:41:ac:38:db:46:38:
21:53:63:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 04:15:22 2025 by rpki-client