
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
File: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft (raw, json)
Hash identifier: s8jPRgSb3ThSsXKD/MgUX5/lNukGzrzK9aVHFSzXjLM=
Subject key identifier: DD:96:9F:82:E2:7D:38:58:FC:56:7E:34:91:86:44:0F:D1:3D:DD:8B
Authority key identifier: F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
Certificate issuer: /CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Certificate serial: 01976929BE17F484E3DF252EA4FB56E8F2DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
Manifest number: 0276
Signing time: Fri 13 Jun 2025 12:00:32 +0000
Manifest this update: Fri 13 Jun 2025 12:00:32 +0000
Manifest next update: Sat 14 Jun 2025 12:00:32 +0000
Files and hashes: 1: 8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl (hash: kNSOqBgUgr/wGn2qF5JA0Jq+zKUg7HteWpESWpb+0/Q=)
2: xvoTABjzfOJqRlktELqO5-hThXE.roa (hash: x+oF0WQqCiPxjdbp2WUuqGjKnL/p9KwR8r/xmYFnEcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:be:17:f4:84:e3:df:25:2e:a4:fb:56:e8:f2:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f12d94bb3dc534a6427fe9a67300d8f4c49146c4
Validity
Not Before: Jun 13 12:00:32 2025 GMT
Not After : Jun 14 12:00:32 2025 GMT
Subject: CN=dd969f82e27d3858fc567e349186440fd13ddd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:de:d0:3e:49:de:e5:af:7d:f4:b5:90:6f:40:
c6:d6:a8:ea:df:12:02:bd:fc:e5:51:1a:f4:ec:cf:
c9:79:58:2a:a3:85:e6:7e:9f:72:f9:69:b6:e8:08:
71:5d:08:c1:d6:4d:39:c8:52:85:4c:11:4f:2d:17:
7c:c5:c5:5c:38:54:1b:7c:a0:1b:9b:90:82:dc:6f:
93:14:fc:43:61:b3:c1:46:df:2c:db:85:d4:bb:e6:
62:f8:36:cc:49:02:02:31:95:16:fc:93:5d:bb:6e:
76:bc:90:b2:0a:a8:26:8b:0c:c5:78:83:73:b5:e0:
06:2f:aa:83:ea:9e:f6:d4:71:93:1f:bf:ca:ea:31:
82:46:06:b8:dd:ec:3a:ca:3a:4f:e2:ef:5a:32:1d:
b9:7f:71:81:92:5b:f7:49:85:0d:05:5c:25:e1:fd:
77:5c:b3:1b:19:7e:c5:f9:50:39:75:24:73:02:4a:
f4:6a:d1:4b:ef:0b:6d:2b:d3:20:6a:4b:7e:b7:aa:
f7:6f:4c:5f:f7:11:4e:c0:71:16:69:c5:03:9a:83:
b1:25:9f:da:c8:45:a1:11:d0:58:87:8a:6f:1f:e3:
cf:8d:6f:30:a5:a1:a2:35:a3:c2:17:13:59:a7:de:
82:86:20:79:bf:d7:38:7c:fb:53:80:67:58:98:f2:
81:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:96:9F:82:E2:7D:38:58:FC:56:7E:34:91:86:44:0F:D1:3D:DD:8B
X509v3 Authority Key Identifier:
keyid:F1:2D:94:BB:3D:C5:34:A6:42:7F:E9:A6:73:00:D8:F4:C4:91:46:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/a635af-a46d-4d0b-b931-a3abdbd1da06/1/8S2Uuz3FNKZCf-mmcwDY9MSRRsQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0a:d0:5f:76:2c:01:7d:f4:91:c5:79:4b:d3:de:27:5c:74:
e2:32:f0:f7:f6:0e:65:08:0b:70:73:c4:20:c6:0f:d2:bc:8a:
bc:9a:27:83:5c:7a:b2:9d:fa:7f:aa:e6:ea:bf:7a:98:13:a2:
0b:b0:89:00:f3:e6:3c:bd:16:fc:3e:89:95:15:dd:d1:d2:1e:
58:1a:3b:f1:4b:2e:5d:81:32:69:cd:d6:26:60:24:89:75:20:
7f:e0:dc:45:32:c7:d2:b9:10:60:66:57:b5:41:46:63:a3:f3:
db:67:4e:51:69:da:bd:ee:89:c0:c6:d6:69:82:41:a7:4a:c3:
1d:4c:43:3b:25:a5:93:62:75:87:da:d3:19:c7:57:be:48:6e:
98:6a:6a:2f:97:71:df:a3:1a:06:40:60:b3:34:12:63:2f:9a:
8a:c7:1d:8a:a5:60:63:2d:5d:72:73:c9:7e:1c:02:b8:be:eb:
fa:bb:dd:aa:b4:50:b8:60:7a:c2:f0:1e:09:96:bc:ba:40:25:
91:78:33:99:8c:05:be:a9:a2:63:fc:56:81:c1:e2:e3:cd:e7:
43:1f:c1:0b:28:94:85:57:75:c1:77:1c:55:3a:14:6b:37:13:
a8:dd:3c:75:ad:28:09:19:01:36:8c:06:9c:42:08:79:cf:10:
3b:a8:e7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:53 2025 by rpki-client