Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
File: 8fF-vMKlJa_PySIYFZyvUogpeNI.mft (raw, json)
Hash identifier: DhHkLh39UzNiFYH7KipGaeVvUOXL1MqIjazFQ2NWTRc=
Subject key identifier: 95:67:8C:7A:A8:22:E5:05:57:0B:1D:29:D3:3E:EC:B7:A5:36:DC:2D
Authority key identifier: F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
Certificate issuer: /CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Certificate serial: 01976C2B6189BC9C26651184528C76FC773B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
Manifest number: 05EE
Signing time: Sat 14 Jun 2025 02:01:11 +0000
Manifest this update: Sat 14 Jun 2025 02:01:11 +0000
Manifest next update: Sun 15 Jun 2025 02:01:11 +0000
Files and hashes: 1: 8fF-vMKlJa_PySIYFZyvUogpeNI.crl (hash: efEjpwBr2voI7+HrL3Ib4XXMl/UZU87YBxCkFiYWSQU=)
2: xG5nFDK1Nyvy5vl4sT_P7td-s98.roa (hash: 9ZslVC10Wq5A6L0EoqSP1oGGII0oefI9/cuRC4XS49Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:61:89:bc:9c:26:65:11:84:52:8c:76:fc:77:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1f17ebcc2a525afcfc92218159caf52882978d2
Validity
Not Before: Jun 14 02:01:11 2025 GMT
Not After : Jun 15 02:01:11 2025 GMT
Subject: CN=95678c7aa822e505570b1d29d33eecb7a536dc2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:fb:32:77:da:27:6c:0d:c7:13:8b:ab:96:33:
85:dd:a1:d8:86:eb:82:f1:40:79:c7:22:8a:d1:61:
df:4d:58:44:e7:df:b5:16:91:a7:cf:99:a3:84:29:
77:90:47:8f:80:e5:54:e7:ee:31:ae:85:53:3b:20:
3d:9c:ee:d7:84:8b:35:00:f2:6e:8a:e2:c0:5a:43:
ba:06:9b:9b:38:f6:fa:46:21:83:6f:73:60:cb:ab:
a4:91:de:29:23:ae:5b:bf:66:78:ff:ba:4c:f9:3d:
46:41:3c:43:99:87:2d:bd:15:5b:98:24:39:d9:5f:
fa:5c:5b:6b:4b:26:43:64:0c:e6:91:69:5e:51:9b:
9c:47:ea:c8:d1:8b:19:fe:04:5a:9c:7f:50:43:72:
59:fc:ae:6f:99:2d:84:4e:cb:81:b5:0c:a1:76:06:
7c:8a:60:96:cd:e2:e3:8b:00:da:08:29:16:6b:9d:
56:a3:2c:26:c2:f7:47:74:53:fa:99:28:9d:2d:01:
a3:67:bf:c4:87:ab:3a:a7:ae:73:ee:2d:55:e8:d6:
b6:07:1e:54:6c:3f:57:8c:ec:c4:4f:b3:8d:e0:8a:
8b:ea:13:7c:87:b4:c4:7e:cb:96:1b:91:e4:28:3a:
0c:ad:4c:23:df:14:1a:43:fc:9f:e8:51:0b:ab:fe:
da:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:67:8C:7A:A8:22:E5:05:57:0B:1D:29:D3:3E:EC:B7:A5:36:DC:2D
X509v3 Authority Key Identifier:
keyid:F1:F1:7E:BC:C2:A5:25:AF:CF:C9:22:18:15:9C:AF:52:88:29:78:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8fF-vMKlJa_PySIYFZyvUogpeNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a72da1-af81-4787-a085-ff34a8ae901a/1/8fF-vMKlJa_PySIYFZyvUogpeNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:4d:7e:ed:4c:b2:68:cd:5f:0d:2d:b2:bb:7f:37:dd:22:9b:
3e:a2:fd:bf:3b:45:ab:24:2c:ad:75:ac:9a:db:56:4f:d9:b5:
0e:cc:58:be:5a:40:a0:34:18:e9:06:b1:be:e4:71:56:5e:bb:
60:72:d5:94:3f:9d:7d:e3:15:88:21:76:a1:ca:e1:d4:eb:37:
bc:dd:60:bb:30:af:9e:37:39:2a:92:9f:10:ba:72:87:63:40:
7c:97:dc:87:67:85:6c:5b:68:c1:cf:cf:a0:d0:61:63:4f:7b:
7e:b6:f9:42:38:60:4a:b6:1f:35:14:4e:e3:68:d8:4d:73:7c:
ab:0d:5f:fb:8a:b5:d5:82:6e:05:77:2b:1b:1e:da:ac:9d:73:
df:4a:20:34:83:59:0c:9a:48:b0:1d:8a:1a:dc:f1:01:a9:7b:
ba:f2:a1:82:6a:7f:cb:15:c9:84:f4:bc:30:63:db:22:af:c5:
86:75:a9:91:8d:8a:05:21:ba:56:0e:dc:65:3d:7b:b1:b4:ad:
b9:64:6f:09:86:3a:08:c3:50:b4:29:c2:51:5a:41:43:89:44:
12:52:4f:2f:c8:e9:46:c9:ee:23:c1:08:a2:00:27:06:7e:b8:
31:bd:57:cf:52:b9:34:f0:f0:1e:20:07:65:4e:ce:41:d3:6e:
9a:43:01:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:10:54 2025 by rpki-client