Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
File: 8bi7seGGpZnUzAWMq_TfDiUvMfo.mft (raw, json)
Hash identifier: xK+xpDirP008KZDwGlMJ/K4+HGYyHjK986OS6IWdfIc=
Subject key identifier: 9E:1B:15:4A:8C:CD:62:B2:54:64:12:DF:CF:FB:91:40:0D:17:A7:70
Authority key identifier: F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
Certificate issuer: /CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Certificate serial: 019768BC2F7FF1A30BC09BCF7F27F86ED65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
Manifest number: 157B
Signing time: Fri 13 Jun 2025 10:00:52 +0000
Manifest this update: Fri 13 Jun 2025 10:00:52 +0000
Manifest next update: Sat 14 Jun 2025 10:00:52 +0000
Files and hashes: 1: 8bi7seGGpZnUzAWMq_TfDiUvMfo.crl (hash: 9dkSn1YLYEPNzxUkcb7IBWA36/T0OBKRK/mNqY6Z4ck=)
2: j0TS7sWufeH5UA9R8L5Lar1dfN8.roa (hash: 4uoOp+ywbPIH2GvAsL/CI2u9RgmZPn6i2PjYhgr/qBg=)
3: rPef_fSf30lKUIt0FiquYhoXATY.roa (hash: Z0VOnnMDQ8rVUNalJ6zJanV6z7u+O1OwYpukhKJNqvw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:2f:7f:f1:a3:0b:c0:9b:cf:7f:27:f8:6e:d6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1b8bbb1e186a599d4cc058cabf4df0e252f31fa
Validity
Not Before: Jun 13 10:00:52 2025 GMT
Not After : Jun 14 10:00:52 2025 GMT
Subject: CN=9e1b154a8ccd62b2546412dfcffb91400d17a770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:92:16:f8:22:b4:d7:21:5e:7d:ac:ac:77:f6:
90:1c:07:f7:f0:ca:14:94:6b:4d:5c:6c:f8:ec:fd:
34:ba:25:68:7c:e8:78:90:1c:54:a5:71:52:06:8d:
93:d6:44:7e:8b:2e:a1:3b:e2:b1:d8:b3:e0:b4:46:
a7:fb:11:65:fc:ed:e6:bc:83:1b:1f:a3:15:14:93:
83:bc:bc:11:f2:1e:2f:0f:e4:5c:30:fd:df:a3:6a:
be:07:2f:72:20:0d:4f:53:30:9f:21:ee:78:f9:6a:
c9:ed:dd:7f:8a:a1:f1:fb:ca:e1:85:38:66:a3:0c:
d1:00:7e:2e:35:01:8d:6a:f9:b9:9a:4c:df:6c:8d:
7b:87:12:99:67:75:65:30:39:75:d3:93:89:bf:0f:
ee:c3:66:29:f2:ce:78:fb:95:54:30:8c:0c:73:d7:
bc:c6:99:46:e6:c1:74:f6:67:44:16:94:83:a9:f9:
ea:dd:55:64:d3:64:83:76:3a:f6:6b:55:bf:9c:f3:
7d:2d:17:fd:75:86:eb:35:43:a3:f8:fb:1f:33:87:
f5:05:a6:3a:3a:66:cb:34:cd:e7:62:af:3b:ca:47:
0b:4d:bb:4c:b6:48:3d:8c:ae:f4:a5:70:3c:1d:be:
13:4a:ef:a7:1b:1b:c4:65:b9:29:9a:36:7d:1d:3c:
a2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:1B:15:4A:8C:CD:62:B2:54:64:12:DF:CF:FB:91:40:0D:17:A7:70
X509v3 Authority Key Identifier:
keyid:F1:B8:BB:B1:E1:86:A5:99:D4:CC:05:8C:AB:F4:DF:0E:25:2F:31:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bi7seGGpZnUzAWMq_TfDiUvMfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/321ea6-eff7-4514-ab2d-5b4b85fd5ae5/1/8bi7seGGpZnUzAWMq_TfDiUvMfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:09:03:6e:70:84:39:05:92:6e:eb:74:d2:20:00:d8:09:b5:
38:9b:60:86:c9:03:73:d0:03:67:7e:07:2c:cc:7b:17:bc:16:
07:8c:83:7f:68:e1:51:b2:9a:ea:75:99:5c:29:32:ad:d1:d7:
29:55:1b:d9:30:a3:1c:37:97:b6:c4:e4:b1:0e:74:b8:45:e9:
54:21:77:c2:03:ec:89:16:e1:99:14:da:62:b4:cb:27:14:db:
67:f5:22:f4:c3:6d:41:0b:64:29:b8:64:c9:d2:1f:47:bc:3f:
73:f4:c4:a7:7d:25:bd:16:5b:72:80:69:73:0a:57:22:92:e1:
f2:da:33:34:98:67:9b:a0:ee:fa:7a:66:c7:70:9b:7e:73:31:
5a:a7:5b:73:ce:05:34:41:d9:e3:b8:c5:37:8f:df:39:d5:68:
83:8e:73:ab:20:be:de:34:97:ec:dd:bb:a8:8a:22:ea:c9:ea:
1f:08:46:e7:a9:47:f4:8d:48:a7:81:df:08:5c:de:ff:5c:4b:
6f:dc:ab:47:cc:4a:cc:51:3c:f9:08:6f:33:34:20:58:c8:29:
9d:43:28:8a:5e:76:ec:e3:be:5f:c6:b2:06:b8:4d:a5:ee:a6:
06:c1:12:40:0d:f8:98:6a:93:e6:7b:1a:d2:ce:d5:93:a9:dd:
41:5f:3e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:02:30 2025 by rpki-client