Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
File: rPerPxqT5xTzB0oF2G_M4iBjBag.mft (raw, json)
Hash identifier: FW8NDbBhBNQMrza3Uwys2cpOhjUH/mylW6g0BIyNs50=
Subject key identifier: 8B:DC:0A:97:26:82:1E:74:37:DE:39:BC:CE:21:CF:FD:E4:86:5C:6A
Authority key identifier: AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
Certificate issuer: /CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Certificate serial: 019747799AAC32BF8CBF3EBB4EB55D866B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
Manifest number: 0861
Signing time: Fri 06 Jun 2025 23:00:41 +0000
Manifest this update: Fri 06 Jun 2025 23:00:41 +0000
Manifest next update: Sat 07 Jun 2025 23:00:41 +0000
Files and hashes: 1: KcohbphFnkSf2gxoBmgqyMOKDSE.roa (hash: /zXCNYtomEkl0yxgG+cZiQbxEeQJlGsjs0SY8DMwQ+k=)
2: rPerPxqT5xTzB0oF2G_M4iBjBag.crl (hash: q2grc3Dp/3EG35BDEhVYQsWDHX2jUwrqDpjzp3CRssY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:9a:ac:32:bf:8c:bf:3e:bb:4e:b5:5d:86:6b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acf7ab3f1a93e714f3074a05d86fcce2206305a8
Validity
Not Before: Jun 6 23:00:41 2025 GMT
Not After : Jun 7 23:00:41 2025 GMT
Subject: CN=8bdc0a9726821e7437de39bcce21cffde4865c6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:25:4c:89:f8:96:94:a0:f9:bf:41:4a:c2:d6:
d6:46:7f:ff:c9:a0:d1:73:9d:6d:db:d7:c4:1c:62:
89:4d:e7:ae:ee:27:8f:44:50:84:1c:97:29:ad:d4:
0c:a5:5c:00:3a:82:a4:99:2e:f2:1a:ed:3b:05:28:
6b:4c:62:bc:65:95:fa:20:d5:ec:06:43:49:b8:50:
03:5f:a5:2b:81:6f:6b:f3:2b:aa:c2:57:5b:12:31:
61:a9:3a:13:6c:39:48:7b:cd:f8:a0:c5:85:41:6f:
69:52:a0:e8:40:4c:3f:1c:45:4d:25:d9:9d:4a:4b:
e2:ab:48:fc:63:bc:38:51:9a:8e:e0:36:10:3d:7f:
1d:7a:2b:dc:9f:89:a3:88:45:e4:b1:35:e3:c4:d7:
4f:c1:e4:92:9b:9d:9a:57:39:fc:5f:0c:f0:a2:78:
a6:5c:21:7b:a9:5f:c6:41:ee:fa:69:63:9b:1e:5a:
58:fc:a0:8f:26:da:8a:d6:64:d3:1b:50:33:f1:5e:
d2:08:80:7d:26:b9:0f:29:3d:55:02:07:c0:91:81:
42:86:e7:12:94:72:8e:3e:9c:03:75:22:0e:79:42:
9d:61:be:78:f9:6f:4f:f6:fd:a3:02:ce:ae:f5:87:
27:12:65:d9:19:2d:f1:08:b9:02:3b:2e:fc:bd:1e:
04:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DC:0A:97:26:82:1E:74:37:DE:39:BC:CE:21:CF:FD:E4:86:5C:6A
X509v3 Authority Key Identifier:
keyid:AC:F7:AB:3F:1A:93:E7:14:F3:07:4A:05:D8:6F:CC:E2:20:63:05:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPerPxqT5xTzB0oF2G_M4iBjBag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a21f34-82f2-41c9-b60c-ad43ccd7aae8/1/rPerPxqT5xTzB0oF2G_M4iBjBag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:ca:68:f2:33:ac:73:3e:16:8c:db:cd:e2:6d:1a:9b:e1:69:
b2:81:22:b1:ff:11:9a:d3:3b:9d:cb:2c:38:cf:bb:86:83:46:
35:d7:ab:09:25:41:ee:64:07:3d:39:5c:e4:f7:be:3e:92:d8:
f1:f9:a0:35:0c:05:f8:a4:68:f2:df:7f:3f:cf:b3:3e:22:51:
1b:f7:40:7b:25:f9:0a:76:ef:d5:e9:b2:30:a6:07:67:05:ce:
f5:24:dc:a9:3f:05:9d:84:8e:67:af:25:da:1f:31:47:3d:42:
42:ef:84:18:bf:80:1b:05:22:75:7f:32:bd:62:26:51:58:30:
3a:53:51:62:e0:63:df:81:b3:d2:cf:ed:72:d9:2e:26:4c:9d:
95:fd:7a:92:35:ea:23:4d:e6:56:56:83:14:dc:0e:89:98:61:
dd:c9:e1:93:11:b9:32:57:e1:9d:f8:e0:93:88:18:f0:22:c8:
3c:23:55:2d:ce:37:89:11:b9:90:a4:50:f2:0f:43:df:9c:68:
8f:9d:1a:25:63:a5:36:3e:e1:f0:f8:c5:4f:41:90:98:ae:d2:
df:1b:a8:1b:43:2e:84:77:bb:99:13:65:7f:86:4a:0d:11:c9:
53:94:ca:19:4a:89:0e:fd:51:be:a6:f7:1c:92:1f:20:50:b7:
9e:26:e6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 01:19:01 2025 by rpki-client