Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
File: dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft (raw, json)
Hash identifier: ImpnyIwjofMeyVTWgSEjz5QTDG5cof4BofsAn7ESOYw=
Subject key identifier: 7F:70:D3:10:1E:19:A9:C3:D3:6A:8C:EB:43:A5:50:F6:E2:1F:FC:0A
Authority key identifier: 74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
Certificate issuer: /CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Certificate serial: 01977941E2843DEC8ED24D75E0985C7A66DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
Manifest number: 088B
Signing time: Mon 16 Jun 2025 15:00:50 +0000
Manifest this update: Mon 16 Jun 2025 15:00:50 +0000
Manifest next update: Tue 17 Jun 2025 15:00:50 +0000
Files and hashes: 1: dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl (hash: Ov99lS5hcK1GcSQlcItEOGht8o0+Yw+UmHG1LKEzKT0=)
2: dqNNte5TVfV2tDh9E3yBjcN5L9k.roa (hash: ZCWWVAbkz+YG+QqwhLTaaD7cWJwvtiRAyhgAtKdQ9Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:41:e2:84:3d:ec:8e:d2:4d:75:e0:98:5c:7a:66:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74bf07f04cc76a90ad97f9f1749fabcf05c35d62
Validity
Not Before: Jun 16 15:00:50 2025 GMT
Not After : Jun 17 15:00:50 2025 GMT
Subject: CN=7f70d3101e19a9c3d36a8ceb43a550f6e21ffc0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:9d:8a:bc:fa:fd:18:55:fc:d2:8d:8a:c6:
76:dd:e4:e0:f3:23:b2:5d:be:59:ae:3b:48:ad:6a:
29:ee:d8:9f:77:71:de:2a:87:09:14:25:42:1a:1e:
02:85:75:6f:9c:5e:62:3c:02:c3:07:54:d8:f1:6b:
6e:c9:f2:52:2a:e2:64:f9:b1:62:04:3c:c0:13:f5:
ba:42:76:e1:15:dc:17:e0:8a:53:55:80:a1:13:be:
bb:23:64:51:69:83:7f:a0:37:1e:a7:de:e1:d6:5a:
73:76:36:d8:66:20:77:c0:1a:16:9f:6a:61:72:6b:
6d:67:3c:cd:40:48:2c:e9:46:a7:95:28:58:02:40:
58:54:f5:72:07:2c:9b:37:60:21:b8:9c:44:ec:a1:
36:04:90:7a:61:1f:8c:59:9e:72:69:8a:f3:c0:93:
eb:c5:19:07:78:0d:02:cf:7d:27:62:b4:54:c4:5e:
75:3e:58:6e:f0:f3:aa:a4:b0:87:93:09:f9:05:35:
a4:42:dc:9d:31:72:83:a3:2b:ed:17:eb:f0:3a:a1:
75:93:05:87:76:3d:8d:b8:21:8a:66:6b:43:1f:0a:
c3:be:19:1e:72:07:4f:cf:dd:8f:3a:77:ca:2b:7f:
00:47:a1:87:4f:7f:0c:0a:be:2c:6f:d6:06:52:40:
a3:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:70:D3:10:1E:19:A9:C3:D3:6A:8C:EB:43:A5:50:F6:E2:1F:FC:0A
X509v3 Authority Key Identifier:
keyid:74:BF:07:F0:4C:C7:6A:90:AD:97:F9:F1:74:9F:AB:CF:05:C3:5D:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dL8H8EzHapCtl_nxdJ-rzwXDXWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a0b395-61ff-457d-8ff8-ec084137e242/1/dL8H8EzHapCtl_nxdJ-rzwXDXWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:12:f1:8f:00:a5:e5:43:64:0c:a4:6c:08:83:4f:8d:4e:9f:
7a:06:ac:bc:93:3c:95:22:57:e2:5f:70:2e:0a:ea:14:02:03:
f4:c2:7b:b0:12:4e:0a:5a:f5:f0:75:20:b7:47:6a:16:f1:3e:
65:e2:32:98:73:3a:81:8d:eb:60:83:fb:95:23:db:4d:0f:76:
61:f3:ce:a3:37:d6:e0:7e:50:43:48:aa:93:02:11:c4:20:2e:
dc:13:b5:c0:5b:6a:4f:69:ff:bc:63:94:5c:9b:96:a5:03:00:
68:0a:63:80:f0:34:ef:19:f5:94:af:f1:fb:39:92:79:42:b0:
48:3c:87:4e:a4:15:bb:dc:98:f2:f9:cd:0b:c0:20:2c:e0:a5:
99:6d:1c:d4:b7:77:4b:65:6d:5d:d1:71:65:a0:84:f4:20:ae:
3c:6b:9f:3b:45:5c:09:78:86:1a:e3:5d:7a:d0:a0:14:d6:30:
58:c5:c7:e0:4e:2e:8a:62:5d:97:38:bf:33:6e:e1:5d:4c:f9:
1d:b4:55:83:a0:1c:db:c8:10:7a:f8:c4:05:62:2b:72:6f:12:
54:12:8a:77:80:92:2c:55:90:bd:75:3e:80:eb:34:0c:8f:88:
15:cc:83:91:83:6c:09:1f:b5:50:45:30:bf:85:9a:16:fc:6b:
a2:8f:cb:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:03:43 2025 by rpki-client