Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: nsK0p/kCDnWdKqISnO7q3ArQUJeKjbnObvB4uQIJ3j4=
Subject key identifier: 63:7B:76:26:A1:0A:01:BD:0B:7E:30:21:1F:EF:33:63:B9:EE:66:6E
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 019769CEC2141E14FE4F4BDCC5E9C859F4BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 0678
Signing time: Fri 13 Jun 2025 15:00:47 +0000
Manifest this update: Fri 13 Jun 2025 15:00:47 +0000
Manifest next update: Sat 14 Jun 2025 15:00:47 +0000
Files and hashes: 1: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: sIFgwaKuYUTx1aEsh7vGaZtBQJMzuAk1YO1r5TLZPp8=)
2: FwjOhi182_59p8dwQga5XgkbJ0s.roa (hash: Mc8kDGGDUHY1tIZcCKRSsVLGZ6kIEWbGczkswWitHog=)
3: tFuBusypscfP0op8t0fbvhVLTp0.roa (hash: pms99WF44PQkWw+lLwCckChT1mv5Etpr0MeX5NnHJWM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:c2:14:1e:14:fe:4f:4b:dc:c5:e9:c8:59:f4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Jun 13 15:00:47 2025 GMT
Not After : Jun 14 15:00:47 2025 GMT
Subject: CN=637b7626a10a01bd0b7e30211fef3363b9ee666e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:9a:06:14:4f:64:86:de:2e:c4:58:0a:ef:62:
ed:d0:22:7d:23:ab:fc:9d:4b:cd:de:05:17:a0:ac:
c2:06:5b:97:1f:0b:97:b1:fe:ee:80:e9:d1:4d:7c:
3f:b3:8a:f0:fd:92:03:42:06:10:05:70:10:38:ed:
db:ef:58:97:f2:9f:8d:1a:4e:62:62:93:27:e5:4e:
e8:f6:1b:01:4a:da:08:5f:9f:c1:88:8b:54:80:fd:
e3:30:38:b9:4e:65:9a:ff:44:5a:9d:97:38:d7:86:
bf:34:a7:6f:1c:af:73:09:ed:ec:b1:ca:5f:de:10:
bf:99:67:11:dd:a2:65:5a:6e:3a:33:e6:e3:8f:e4:
54:ba:58:e7:b5:c6:b0:8a:e4:7d:41:01:84:7e:cd:
ed:82:42:54:22:29:7c:91:83:4a:ca:19:f1:a0:7d:
55:5a:1f:60:a1:55:6c:28:06:4f:bb:fe:a6:d4:84:
db:39:79:5e:17:25:ce:14:90:b9:40:a3:3b:e4:ca:
f2:e4:b7:90:39:1d:ee:a8:a6:46:de:13:f4:08:05:
11:f0:7c:8d:2f:61:fa:ac:d5:85:38:10:ae:5d:41:
5d:2d:51:aa:b7:d3:01:60:69:9a:62:23:3f:6f:ee:
98:12:8f:92:80:35:c8:cc:f3:5b:e0:b9:dd:a1:dd:
2f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:7B:76:26:A1:0A:01:BD:0B:7E:30:21:1F:EF:33:63:B9:EE:66:6E
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:1b:68:41:ed:f8:14:ce:c5:ef:7a:3b:c0:c6:60:d1:af:79:
81:27:b4:95:62:55:17:34:5e:05:7e:b7:91:30:e8:9a:10:b0:
9c:fd:55:be:d9:c8:13:22:5e:32:6e:95:aa:b9:7a:46:93:db:
f7:6d:93:dc:17:22:03:10:28:24:18:d6:33:d5:40:d0:7c:58:
7a:27:8e:1c:9f:c2:f1:be:0f:05:81:94:70:d9:06:c2:79:07:
35:08:18:75:fe:72:56:c6:54:52:33:fd:88:b9:cb:8a:9d:fc:
a3:41:ad:c4:97:8e:4f:ba:4d:dc:55:a4:66:c3:d4:fd:03:35:
41:0e:85:83:04:13:e5:3c:23:18:5a:6f:2f:33:a7:37:26:b8:
3c:65:ba:fd:01:30:af:e2:6b:a8:07:47:4f:0a:99:73:46:87:
fe:64:0f:a1:29:cc:11:cd:68:6d:2f:c5:2b:f6:71:f4:03:cd:
ec:af:25:cd:0d:48:75:54:ed:a7:cb:fa:f2:df:e2:df:04:af:
18:1a:c7:d7:60:74:a2:b9:ec:76:08:de:78:33:2d:f7:23:63:
48:65:27:76:86:b0:f5:65:ef:91:8a:4a:64:eb:d6:47:34:3d:
32:f7:d5:a1:fd:59:ee:73:67:e0:4c:a2:f8:50:42:d0:c1:e6:
9a:a1:9e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:41:12 2025 by rpki-client