Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
File: 8WaLESRDpJbpZlHVgrbMZBP7XHY.mft (raw, json)
Hash identifier: zfTcoSgpxLt2YuQWKk1fQr3pV8v3CiFjf8GUVb7S4Sw=
Subject key identifier: 50:20:72:8C:38:BF:FA:80:EC:D8:4A:9E:AA:C8:24:AE:CE:67:8F:6B
Authority key identifier: F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
Certificate issuer: /CN=f1668b112443a496e96651d582b6cc6413fb5c76
Certificate serial: 01976FD106640EA39AA6C150EE00F4281E32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
Manifest number: 0573
Signing time: Sat 14 Jun 2025 19:00:58 +0000
Manifest this update: Sat 14 Jun 2025 19:00:58 +0000
Manifest next update: Sun 15 Jun 2025 19:00:58 +0000
Files and hashes: 1: 8WaLESRDpJbpZlHVgrbMZBP7XHY.crl (hash: aPCLLcwWNNA53VV2KrMkc+WwKErh/tzqSRDIijD2rgU=)
2: zTop8kv04M-CPRutWJMmw5M7s5M.roa (hash: h5ZlzzODOy4Yt5G5OttRKd2ppDnce+EkREvBpaIbOxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:06:64:0e:a3:9a:a6:c1:50:ee:00:f4:28:1e:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1668b112443a496e96651d582b6cc6413fb5c76
Validity
Not Before: Jun 14 19:00:58 2025 GMT
Not After : Jun 15 19:00:58 2025 GMT
Subject: CN=5020728c38bffa80ecd84a9eaac824aece678f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9b:26:00:81:14:33:ac:1a:e9:a6:90:a3:ce:
85:92:35:e9:de:0d:75:d0:9d:da:a5:da:45:a6:3f:
31:d3:c1:a0:f8:2e:61:9a:ba:9b:c1:e9:b8:13:be:
39:1f:d0:7e:f8:5a:a1:ae:48:f6:6c:b3:f8:b2:37:
99:21:37:8e:de:e2:ad:09:d7:22:30:6b:21:85:64:
ea:bf:26:76:21:08:21:ac:46:60:44:19:70:07:01:
8f:ea:b9:aa:82:b2:dd:f1:91:5d:c1:1a:41:dd:0a:
70:ac:8e:4b:f8:09:8c:7f:09:10:a4:60:b7:99:28:
76:18:63:56:05:70:11:5a:28:9c:00:f1:ab:c3:5b:
1b:ff:33:23:56:70:73:a0:99:99:39:d0:18:ee:e7:
9b:e2:81:de:0b:71:c7:45:99:66:e3:35:d7:59:c8:
2e:c5:97:6f:f1:96:dd:13:0a:de:d4:6c:54:c4:a8:
8c:cf:85:ac:17:0c:12:12:85:99:58:f9:12:4e:75:
08:39:57:a0:79:a1:fb:3f:dc:d6:2c:c1:5b:cd:50:
28:cf:55:6d:ba:39:98:69:16:e9:e6:1b:52:77:89:
59:45:32:0d:37:fd:1e:73:eb:ec:c2:59:ad:39:a4:
e1:dc:36:8b:d0:b9:4f:45:aa:17:fe:e1:2d:9b:00:
ee:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:20:72:8C:38:BF:FA:80:EC:D8:4A:9E:AA:C8:24:AE:CE:67:8F:6B
X509v3 Authority Key Identifier:
keyid:F1:66:8B:11:24:43:A4:96:E9:66:51:D5:82:B6:CC:64:13:FB:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8WaLESRDpJbpZlHVgrbMZBP7XHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/25d2d0-2026-4d81-8549-1fb6685a8d97/1/8WaLESRDpJbpZlHVgrbMZBP7XHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:8b:04:99:bb:f7:79:b6:8c:c2:38:3a:15:f8:43:37:17:e2:
32:f8:93:86:04:df:2d:41:6f:9b:d7:18:7f:e9:ea:51:b2:a6:
f4:97:8b:f2:9f:85:a4:c4:e7:66:93:59:b3:5d:fb:f5:bc:8f:
14:d8:77:83:0b:47:d0:95:c6:1e:f0:2e:67:e1:81:b7:d3:8d:
6c:44:51:c1:8b:c8:26:19:b8:d0:3a:a8:0d:5a:65:42:fb:08:
7a:4a:3f:16:64:5b:84:76:6c:e9:75:54:60:9c:09:66:8d:a9:
45:03:94:ec:6e:ce:83:87:bf:d1:64:b5:ae:a3:c3:85:2e:4a:
ca:85:d2:0a:b6:4e:b0:9c:5d:00:cf:18:d2:5a:f2:92:e1:cb:
dc:40:0d:1a:d7:6f:8d:f7:b7:94:a0:ed:d8:81:c2:30:85:6d:
c7:63:88:11:40:1c:f1:9e:fa:13:a9:9c:ba:4b:5b:08:16:c0:
e8:79:4d:47:e8:8a:87:5d:aa:f3:9a:a7:ed:1e:a7:1d:ab:62:
67:44:cb:2a:db:05:14:1e:0e:85:9e:44:15:31:db:55:b1:f2:
2c:d2:84:a2:49:d8:ac:7b:b3:8e:8f:7a:44:01:92:48:74:b3:
60:3f:55:e8:99:28:89:86:c9:81:eb:ce:7a:42:36:c1:b9:31:
c1:cc:10:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 03:07:28 2025 by rpki-client