Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
File: 2O8SkM84tPbgGD5-S_h6xnoS16s.mft (raw, json)
Hash identifier: +wlMFwzDYVS+wxvjC+KD6NITva13b4f5oUkCYrPa8rc=
Subject key identifier: A7:CE:D8:2B:64:B4:62:E2:24:A2:B6:06:FB:ED:AF:19:95:C9:2A:20
Authority key identifier: D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
Certificate issuer: /CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Certificate serial: 0197684E940647F774E5DEF5E3D2FA13DAF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
Manifest number: 0C18
Signing time: Fri 13 Jun 2025 08:01:09 +0000
Manifest this update: Fri 13 Jun 2025 08:01:09 +0000
Manifest next update: Sat 14 Jun 2025 08:01:09 +0000
Files and hashes: 1: 2O8SkM84tPbgGD5-S_h6xnoS16s.crl (hash: yqFpDzGCRljUXOj0UejDnnQOAZufy4te3za7GZO0w+8=)
2: B6rNTDmSeixvi2u96itxbHQseH8.roa (hash: /bpvcJ02LIsBEU3Cv3unhIGktgtKR8kh+JeWSM+804A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:94:06:47:f7:74:e5:de:f5:e3:d2:fa:13:da:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8ef1290cf38b4f6e0183e7e4bf87ac67a12d7ab
Validity
Not Before: Jun 13 08:01:09 2025 GMT
Not After : Jun 14 08:01:09 2025 GMT
Subject: CN=a7ced82b64b462e224a2b606fbedaf1995c92a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:83:f9:99:71:64:e9:22:84:bd:d9:18:b9:26:
05:55:ca:ef:8e:6a:0b:a3:d2:e5:e0:02:c1:60:e9:
da:be:62:05:a1:12:84:60:33:91:34:36:bc:00:ab:
d4:30:ae:4b:32:ce:27:16:ed:21:67:9c:1d:e2:91:
de:c6:40:08:c6:78:70:d8:86:4e:af:eb:1a:ae:5b:
5a:b5:18:53:20:34:66:b5:e7:e6:75:49:cf:56:5c:
a3:e1:2c:a3:16:0d:3c:7f:6e:75:a9:98:eb:8d:e4:
50:37:f1:0f:fa:5f:a5:47:fe:0b:43:97:c8:3c:12:
7a:17:28:9e:44:da:e5:18:3f:9f:15:bb:0d:71:ba:
61:e4:ab:df:ea:64:15:05:9a:d7:f6:a6:32:31:49:
7c:09:3e:8d:a8:46:10:34:a2:ba:a7:fd:c4:22:87:
33:e6:d5:23:01:e5:ef:73:05:6a:47:da:1e:40:7a:
71:5b:3c:e4:cc:1a:c5:2a:11:02:d9:a4:1e:b1:16:
63:e9:91:00:fd:53:40:40:35:16:c6:66:32:fe:dd:
38:60:8e:14:63:a3:bf:fa:ab:20:38:4b:24:b9:25:
4d:32:46:8a:a3:96:d6:d9:64:f4:ac:2d:18:3c:7e:
9f:ea:12:10:00:81:9f:f7:97:40:c9:ea:03:61:9b:
9b:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:CE:D8:2B:64:B4:62:E2:24:A2:B6:06:FB:ED:AF:19:95:C9:2A:20
X509v3 Authority Key Identifier:
keyid:D8:EF:12:90:CF:38:B4:F6:E0:18:3E:7E:4B:F8:7A:C6:7A:12:D7:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2O8SkM84tPbgGD5-S_h6xnoS16s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/3308f5-27e3-4c94-a46b-48e6f260fba5/1/2O8SkM84tPbgGD5-S_h6xnoS16s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:fa:a4:d6:e9:b0:60:ed:7c:2f:24:33:5f:8f:e6:6d:82:65:
61:2c:d2:d0:b0:55:78:79:f0:77:74:b0:ac:a7:f2:39:01:cd:
ab:95:bd:ae:57:49:f0:7a:e2:c5:74:48:a3:f3:aa:5a:61:8a:
e4:9e:12:f2:fd:76:af:b3:bc:0a:e2:a7:cc:6a:5d:19:44:dd:
89:a5:a7:12:76:2f:80:31:d0:4f:da:9d:d2:97:e1:88:62:50:
66:5f:3b:c4:9a:30:d7:95:85:ca:18:94:64:b5:7f:6c:a4:1b:
d7:fd:f8:c3:f6:71:c4:54:ae:2d:dc:62:e9:95:bd:26:07:f0:
99:5b:78:26:0d:36:dc:eb:9d:96:5a:72:2a:f8:9b:24:ea:cc:
97:0a:9e:6c:f2:26:48:55:ef:42:98:3b:76:d1:e7:d3:bf:a2:
72:51:6a:7b:b7:04:a7:f0:b9:34:f0:79:db:06:db:9b:12:10:
d3:6a:83:a6:f8:ca:16:fe:ff:e3:83:c9:fe:98:c8:61:4b:6d:
37:54:c2:2b:0e:b4:62:a9:2c:ab:0b:ab:ff:3d:fe:5f:81:d5:
9b:5a:be:f5:62:e0:2d:b6:6e:8b:08:86:69:e1:a7:28:4d:36:
0d:aa:69:ce:71:85:dc:53:0b:ca:f4:99:67:45:8d:ae:c5:f7:
4b:75:d8:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:22:31 2025 by rpki-client