Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
File: 8E0nhIX_rqeekQomJTOoC1q5HIo.mft (raw, json)
Hash identifier: ok7QT80EKSqwm1doKg4lehi/mxOQZzCDH6UfC3mIKDs=
Subject key identifier: D8:8C:3F:B1:9B:80:98:F6:A7:BD:50:D3:7A:14:B1:84:71:1E:17:4D
Authority key identifier: F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
Certificate issuer: /CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Certificate serial: 019773773EED12A57864FBDA98F600330BA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
Manifest number: 09EB
Signing time: Sun 15 Jun 2025 12:01:24 +0000
Manifest this update: Sun 15 Jun 2025 12:01:24 +0000
Manifest next update: Mon 16 Jun 2025 12:01:24 +0000
Files and hashes: 1: 8E0nhIX_rqeekQomJTOoC1q5HIo.crl (hash: 9A7epgrJLM3cdDNgO79UsvkBS/6FU7Sz8xKjAdeshi0=)
2: 9fWa2lfLkLJ8sCmivN6TQyBLwDA.roa (hash: IPb2Fry6AFROnpqPDxpsLGmfQRyiCcADkUuNtSOH1vw=)
3: M0hmVP_O7pmzGC1lZ8auVtUv08M.roa (hash: O6keKWXCa23CBnMYQ5j2NdMEa5h/R6dRjRYYfD56tpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 12:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:77:3e:ed:12:a5:78:64:fb:da:98:f6:00:33:0b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04d278485ffaea79e910a262533a80b5ab91c8a
Validity
Not Before: Jun 15 12:01:24 2025 GMT
Not After : Jun 16 12:01:24 2025 GMT
Subject: CN=d88c3fb19b8098f6a7bd50d37a14b184711e174d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b6:a8:30:34:14:50:fe:15:96:e8:32:d0:90:
6f:d6:c4:2b:ed:e9:af:bd:ed:5d:71:a3:00:6b:01:
64:f1:db:7f:95:a8:d0:eb:6e:25:df:1c:88:41:3d:
8d:4c:a6:dc:35:4d:c9:08:f4:e5:80:8b:88:b0:e4:
f8:a5:32:69:6e:42:ed:25:e0:2a:cc:d3:d8:5f:ae:
77:c2:2e:36:e1:5b:88:08:c9:50:d6:a1:b3:5a:53:
a0:78:6a:d3:3a:ef:85:1f:95:02:cc:49:44:40:c0:
da:be:bd:28:5b:4c:73:32:ad:cc:cd:db:e6:ca:be:
e8:a1:a5:60:6a:27:6a:75:1e:8f:2d:6c:e7:fa:9b:
cb:11:d6:06:41:b5:ab:df:ff:ec:b5:17:94:40:d7:
3d:14:c6:e7:5a:62:a4:a6:d3:dd:d2:bc:31:5f:04:
93:fb:a8:b8:5c:14:3f:66:ca:99:bb:aa:1e:63:9d:
fb:fe:48:29:bf:c7:8b:39:69:ff:fa:92:b1:74:47:
17:9a:78:ee:cf:e0:e1:a7:ff:92:62:45:9e:8d:03:
b4:79:09:45:a0:d8:f9:95:c9:4f:e3:f6:78:53:ad:
53:a8:99:ea:3c:f6:2f:03:30:23:df:9d:a5:70:70:
a3:67:76:61:9e:fd:b3:92:47:b8:8f:c8:6a:50:b5:
8a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:8C:3F:B1:9B:80:98:F6:A7:BD:50:D3:7A:14:B1:84:71:1E:17:4D
X509v3 Authority Key Identifier:
keyid:F0:4D:27:84:85:FF:AE:A7:9E:91:0A:26:25:33:A8:0B:5A:B9:1C:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E0nhIX_rqeekQomJTOoC1q5HIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/aa7426-711d-4f3e-8df9-5c0e316d28b8/1/8E0nhIX_rqeekQomJTOoC1q5HIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:67:7b:d3:18:c7:c9:59:17:28:b0:bb:45:c7:f3:c0:f8:a6:
71:11:71:aa:4f:2b:33:b2:f2:0b:2b:05:62:97:ca:50:ec:7c:
cc:a8:5d:42:ab:83:b7:aa:52:0e:b5:08:88:44:16:7c:08:3d:
1a:48:c6:2a:47:6f:d1:7e:7c:23:32:4a:57:51:7b:c1:23:76:
d8:e0:85:33:98:3e:dd:e6:ba:ca:8e:72:8f:3d:5c:e4:af:6c:
af:e9:74:22:4a:a7:bf:21:43:9c:3b:0e:86:06:9b:9b:e6:30:
8f:8e:0d:80:e1:c1:69:1a:df:37:e5:25:43:87:91:8e:37:b9:
ea:aa:3d:d6:36:e7:1d:c4:c5:3d:7e:24:58:9e:64:59:50:35:
98:05:33:bb:35:80:37:8f:4b:4c:a4:ca:81:70:f4:69:34:11:
a9:16:17:e0:bf:45:05:e2:92:19:e2:78:40:cc:b8:b2:fe:3c:
11:31:05:65:cf:41:bc:f1:63:ee:f7:74:2e:7f:60:03:67:67:
7f:69:b7:ec:8d:20:19:bf:6f:99:25:95:6b:88:4f:09:3b:84:
92:b0:79:d2:86:44:e2:01:80:f5:c1:49:d4:89:6e:a8:ca:8f:
d2:fb:b4:ba:98:3b:14:1d:f8:5f:c8:c4:48:5d:bb:9d:61:43:
82:fa:b1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 20:45:49 2025 by rpki-client