Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
File: r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft (raw, json)
Hash identifier: 9honcSo8V/1XQroO9xsyWaFi65GcuP34iImWffo19lM=
Subject key identifier: 98:5B:05:BE:5F:53:07:39:71:21:91:78:4D:B8:DC:E0:F3:ED:72:C6
Authority key identifier: AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
Certificate issuer: /CN=afff13a67f225c3c2a606658c23965b8191d4008
Certificate serial: 01976D3D6F2FBEEBB925573082CC832995A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
Manifest number: 0BB4
Signing time: Sat 14 Jun 2025 07:00:32 +0000
Manifest this update: Sat 14 Jun 2025 07:00:32 +0000
Manifest next update: Sun 15 Jun 2025 07:00:32 +0000
Files and hashes: 1: r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl (hash: J2CPFmssMmwoWoSMl8QtfGaLBUFQMhPfZ5FYssCFvro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:6f:2f:be:eb:b9:25:57:30:82:cc:83:29:95:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afff13a67f225c3c2a606658c23965b8191d4008
Validity
Not Before: Jun 14 07:00:32 2025 GMT
Not After : Jun 15 07:00:32 2025 GMT
Subject: CN=985b05be5f530739712191784db8dce0f3ed72c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a0:ec:ea:d6:2a:30:0b:0b:d1:0b:4b:94:b8:
b6:35:05:61:c0:c2:3f:57:1c:cb:24:6d:d6:bb:01:
22:1c:b4:0b:ea:af:72:af:6a:d8:ff:6a:1c:1b:90:
4b:97:bf:fd:99:b4:69:9c:e1:91:af:f9:de:a6:23:
7a:a9:fd:21:62:d6:8d:5b:bf:b6:83:2f:9c:56:4d:
72:36:57:7a:f5:2b:3c:09:54:78:bd:68:0c:bf:b9:
aa:a9:b5:52:cc:73:24:78:56:2b:ea:24:a1:44:3a:
bf:8e:81:ac:af:2e:c3:12:40:7d:f3:35:8a:83:44:
54:c5:79:da:1e:48:61:25:6b:90:97:46:e1:34:40:
36:42:a5:c6:e1:ee:b8:0d:88:72:fd:29:0b:d6:d5:
5e:4b:66:62:0e:88:2b:7a:ca:65:47:a1:51:8b:aa:
99:d7:74:40:2d:ef:ee:1c:f9:46:42:10:24:61:32:
10:c6:fc:ff:fd:9e:be:c3:25:d3:b3:bc:f8:2e:c6:
4f:9d:5f:eb:bf:05:8b:ad:a6:e6:c2:22:c2:77:4a:
12:49:2e:e9:d0:81:50:a6:2e:b3:d3:1e:64:f3:dc:
58:f9:25:60:d5:dc:4f:72:96:88:c5:14:1a:55:85:
33:a3:4e:2a:3c:3e:45:ba:da:bd:7a:e6:9d:1b:91:
ed:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:5B:05:BE:5F:53:07:39:71:21:91:78:4D:B8:DC:E0:F3:ED:72:C6
X509v3 Authority Key Identifier:
keyid:AF:FF:13:A6:7F:22:5C:3C:2A:60:66:58:C2:39:65:B8:19:1D:40:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_8Tpn8iXDwqYGZYwjlluBkdQAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8f063c-119a-47a0-8b0d-6d2b2ba2a88a/1/r_8Tpn8iXDwqYGZYwjlluBkdQAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:73:04:ea:48:67:73:31:38:59:d9:bb:ce:94:73:2c:cd:d1:
d8:58:9b:b9:f8:5c:00:4b:fb:2b:4c:25:04:3c:b2:bd:36:75:
70:7e:94:82:64:03:e4:f9:b8:92:25:e1:9b:83:54:1d:a0:30:
de:97:85:69:3e:ef:4d:bf:36:3e:35:a5:3f:23:62:cd:97:a3:
40:b7:ce:57:db:95:fe:66:65:4d:c4:a8:70:d3:0b:1c:20:77:
c8:f8:69:23:72:e1:9f:03:be:97:c7:d4:93:90:78:0c:d9:f1:
dc:e0:81:9f:47:75:09:86:e0:4d:f8:52:0f:29:71:60:31:24:
f5:b2:1d:e1:10:3d:f0:8d:45:57:4b:c9:5c:61:6e:3b:c1:de:
5c:56:3c:7e:ba:82:94:3c:60:74:b9:65:e7:ef:32:6b:02:b9:
50:a5:5c:77:92:2f:37:fc:fc:33:59:db:eb:d8:bf:65:a4:ce:
68:d3:53:60:35:5a:f7:c2:86:a0:26:c1:58:c1:8a:6b:62:7e:
8a:b9:ef:01:3f:11:73:98:46:ca:95:3f:a8:62:e4:53:54:dc:
79:4a:2a:7c:1a:c2:a5:85:6c:7c:a2:c8:7b:32:21:d5:2a:24:
38:5b:ee:ed:22:0a:ba:f2:1a:2d:a9:67:18:80:11:10:df:ef:
72:ca:24:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 09:23:57 2025 by rpki-client