Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
File: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft (raw, json)
Hash identifier: xycIZaibrXkvukJmpWLqtkRvmamwDEl32FrrwMHnZoA=
Subject key identifier: 71:16:30:A3:EB:02:F0:0D:DF:53:01:69:CD:94:DF:05:C2:8E:77:30
Authority key identifier: F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
Certificate issuer: /CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Certificate serial: 0197499F2F939E5B4CCE2421A236E8DE6A77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
Manifest number: 158B
Signing time: Sat 07 Jun 2025 09:00:58 +0000
Manifest this update: Sat 07 Jun 2025 09:00:58 +0000
Manifest next update: Sun 08 Jun 2025 09:00:58 +0000
Files and hashes: 1: 8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl (hash: eybVv0xXxh0Wa+KC0rCwoL5B/Rlok2eXNa8jdU8riVo=)
2: OnZ1oDUkGHXt8p5LFZr7iXHIj2U.roa (hash: /DcdW9UyVs0Pozfbw9Y31s/RNRP7VGPFkHtsuWsMDGA=)
3: ae03YOkS1ofM34wdhj2KqmDyBno.roa (hash: urHsIcZ4xBvpG+piPTKwb+t4LjinRiEgOkguvBfEZMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:2f:93:9e:5b:4c:ce:24:21:a2:36:e8:de:6a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0f14ed124f9a2f3deab1006f184cf4fb80a3aec
Validity
Not Before: Jun 7 09:00:58 2025 GMT
Not After : Jun 8 09:00:58 2025 GMT
Subject: CN=711630a3eb02f00ddf530169cd94df05c28e7730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:df:de:18:ce:f6:f3:f4:38:b1:10:bb:93:86:
46:6b:ff:b5:76:8b:32:8f:8f:15:35:c6:19:0b:6f:
2a:d9:6e:53:97:55:9e:e4:f3:2f:fc:9b:e7:50:9e:
06:9a:15:7c:49:d5:f5:74:58:21:56:82:48:4a:a6:
41:cc:94:64:21:6d:5a:05:2e:d0:81:9f:53:10:04:
5d:a3:cf:1f:67:fb:1e:b4:30:8d:e9:cc:be:7a:c0:
ea:eb:09:a7:d2:7c:dd:f4:d8:5f:05:fe:d2:13:8a:
63:ad:de:d7:dd:2d:45:06:1d:50:a0:0a:f5:bd:6c:
83:95:bd:4a:88:24:2c:e8:24:e0:e5:37:87:b4:cf:
be:8f:95:61:ce:2c:ce:bb:c7:ff:24:0c:ba:b7:45:
f7:f1:7f:27:ce:0e:ff:53:34:a8:a9:18:fa:d6:0f:
67:73:4b:32:eb:f3:b0:6b:27:ab:ba:0d:f7:a1:7b:
fb:5c:aa:14:4b:b4:f5:63:e6:3b:58:05:16:85:1c:
ae:31:8a:c3:44:fb:ef:f9:0b:b2:4b:32:c8:51:47:
a7:cb:95:e2:3f:1a:a8:1a:c6:f6:38:5b:17:06:51:
50:25:43:7e:cb:f5:f0:3d:e9:33:5c:07:c7:85:c9:
af:a8:23:0d:a2:74:85:53:f1:85:78:a1:8b:e8:d0:
a1:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:16:30:A3:EB:02:F0:0D:DF:53:01:69:CD:94:DF:05:C2:8E:77:30
X509v3 Authority Key Identifier:
keyid:F0:F1:4E:D1:24:F9:A2:F3:DE:AB:10:06:F1:84:CF:4F:B8:0A:3A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8PFO0ST5ovPeqxAG8YTPT7gKOuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/c79cf3-a070-4d5b-9ee4-43612e7d9cc1/1/8PFO0ST5ovPeqxAG8YTPT7gKOuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:24:e2:0c:b9:0c:8e:20:73:b9:62:b7:e7:dd:ff:ac:ec:ba:
3d:f3:00:76:35:d1:fb:61:e6:aa:11:ad:fc:ea:44:af:0a:e5:
04:d4:97:b8:e8:80:8b:9a:87:e3:ab:4c:85:58:87:ed:a4:98:
aa:d5:f2:70:d1:56:1f:d2:65:3e:9e:25:03:4f:2a:be:b7:b4:
e9:c9:1b:4c:70:18:38:a8:1c:2e:3f:d7:e1:5a:87:9c:eb:92:
67:0b:c3:c5:88:bd:f2:27:d2:ff:2f:86:be:58:1b:28:b3:2c:
46:0f:59:21:3d:6c:da:fb:d5:8c:6d:1e:03:9b:07:e1:cc:89:
32:1b:05:cd:31:32:1c:8d:65:f2:b2:05:fa:de:6e:f9:56:54:
33:e7:1b:e9:53:48:14:43:d3:ce:ac:f3:6a:ff:67:48:ee:bd:
fa:ce:05:f3:ec:24:9b:ab:57:55:7f:09:a3:1c:d5:88:93:47:
4a:e8:65:fd:c5:33:20:ac:6f:a4:f3:9d:72:3b:e7:d6:4f:68:
92:ea:97:f6:1f:0a:fa:23:2e:dc:7e:7c:a0:b7:75:2b:63:2e:
21:64:76:ec:09:ae:c4:cc:9a:61:33:82:bc:3e:5f:bb:91:90:
3f:2b:0f:b6:8c:a6:a7:1a:5e:cf:92:65:4e:22:e1:e8:3c:b2:
9d:1c:bf:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 13:40:08 2025 by rpki-client