Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
File: 8o-houRJGJHBmw8QsIb2VZhPWHk.mft (raw, json)
Hash identifier: rSOmQFGsIkxksEqp6G/+fWNXrcu5k1/kxiyDnrPjQ0U=
Subject key identifier: 52:9E:9F:6B:AB:67:BB:CA:A4:BA:51:4E:35:A1:D6:46:99:A0:4E:76
Authority key identifier: F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
Certificate issuer: /CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Certificate serial: 0197711B2AA872808CE11487BE21E4CDA3E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
Manifest number: 09E2
Signing time: Sun 15 Jun 2025 01:01:35 +0000
Manifest this update: Sun 15 Jun 2025 01:01:35 +0000
Manifest next update: Mon 16 Jun 2025 01:01:35 +0000
Files and hashes: 1: 8o-houRJGJHBmw8QsIb2VZhPWHk.crl (hash: 6ZYh7UiU+J2tctP6I3j2DbPZn/3T8rAGAGZZRNllpvk=)
2: IAJBt24rgV_us-DgHGqft-brDOM.roa (hash: EYG4N8j/B/VmDjgrJQXF6wEvv1LkIhmvGFmYVI9Ke7s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:2a:a8:72:80:8c:e1:14:87:be:21:e4:cd:a3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f28fa1a2e4491891c19b0f10b086f655984f5879
Validity
Not Before: Jun 15 01:01:35 2025 GMT
Not After : Jun 16 01:01:35 2025 GMT
Subject: CN=529e9f6bab67bbcaa4ba514e35a1d64699a04e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f4:83:98:ca:86:3d:63:cf:42:52:44:fc:0d:
0d:51:b1:73:7c:77:cd:fb:c5:89:8f:1f:82:d5:ac:
01:66:8c:61:7a:31:9e:96:8e:6e:12:75:aa:e3:35:
cc:d3:16:07:3c:db:66:7d:c7:fb:1d:45:1c:33:35:
7c:c5:60:d9:a4:a1:c9:f7:a2:51:08:34:ab:72:bf:
02:63:a6:20:51:f0:c0:6b:78:ee:df:8a:3e:a7:8c:
ca:1e:17:a9:50:8d:87:4b:08:c0:2a:cf:ec:6f:1c:
a6:fc:60:1d:34:3f:c0:63:a4:e5:eb:fc:ec:55:4a:
a6:e4:af:9e:c6:25:96:3a:e3:a6:66:78:e7:39:43:
54:cd:a3:55:bd:8a:f6:b7:3d:ce:5a:c9:aa:1c:34:
26:c1:a8:e6:0a:f2:fe:00:cf:68:1a:69:bb:ae:60:
ad:b6:63:e1:a3:66:29:56:94:d2:30:b3:16:db:35:
c2:a9:28:f2:28:11:03:7f:9c:cc:ed:25:fd:e4:aa:
b9:75:fc:58:0a:de:5a:f7:9d:0e:6e:1c:d6:2c:26:
33:94:da:72:e8:1f:70:1e:fd:2a:4e:5a:ed:18:36:
46:4a:1a:c0:2b:27:c1:86:f8:b0:0e:61:2e:6e:f6:
e8:f8:24:75:96:69:27:a8:4a:7a:3f:b2:6e:ff:05:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9E:9F:6B:AB:67:BB:CA:A4:BA:51:4E:35:A1:D6:46:99:A0:4E:76
X509v3 Authority Key Identifier:
keyid:F2:8F:A1:A2:E4:49:18:91:C1:9B:0F:10:B0:86:F6:55:98:4F:58:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8o-houRJGJHBmw8QsIb2VZhPWHk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/8bbfac-0780-4bbd-bca2-34a14a2bb401/1/8o-houRJGJHBmw8QsIb2VZhPWHk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b4:dc:d0:40:fc:c0:ac:21:19:ce:0c:7e:52:2d:8a:6a:3c:
c0:50:5b:d6:7f:61:3c:64:60:56:f9:a9:d8:89:f9:6d:b0:f8:
e5:a7:67:cf:d3:8a:01:f2:61:64:c6:27:89:fa:6c:b2:8b:c8:
8f:d0:c0:9e:3b:03:6c:ec:f0:61:e3:83:4a:1d:9f:1e:97:ec:
28:8b:d9:4b:51:fe:60:86:9f:b9:17:b6:8e:15:49:7f:8b:f7:
e5:4d:0f:30:7b:d8:a0:b4:d7:bf:98:93:1a:7d:83:c0:65:48:
91:24:37:84:4a:92:e9:e5:99:42:4c:3b:6a:c1:11:3f:50:eb:
a2:76:6f:82:8d:1a:38:76:3d:de:3c:d7:47:55:18:09:6a:3e:
45:6f:49:ce:29:b6:60:27:38:92:3e:87:8e:87:71:67:b8:d1:
d9:45:d9:07:46:d9:94:2c:06:3f:90:d6:2b:17:1d:56:62:cc:
27:66:15:cb:3f:6f:54:bf:85:60:c4:90:2a:7a:b1:2f:54:5b:
0d:49:6d:64:7c:a8:37:f1:06:0c:79:57:77:a4:3c:58:ce:6d:
74:8c:d2:b0:cb:f5:7e:08:0e:1c:a9:1f:2d:8e:02:c6:3e:ba:
20:04:fd:6f:d7:96:47:80:cd:66:87:e6:b1:67:53:5d:60:56:
e8:65:c5:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 09:12:34 2025 by rpki-client