Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
File: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft (raw, json)
Hash identifier: imgLHMsCp/DnShnmADxPm3oA/cVUZUJzfpnSI9bNuJY=
Subject key identifier: FC:4D:90:4E:BD:32:14:70:CC:8A:59:30:29:BE:1E:56:D4:B0:1C:45
Authority key identifier: F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
Certificate issuer: /CN=f296fa79967e1aea042602f93242880a9543938b
Certificate serial: 019786C648561C37878B9926028B72E3B51B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
Manifest number: 159B
Signing time: Thu 19 Jun 2025 06:00:31 +0000
Manifest this update: Thu 19 Jun 2025 06:00:31 +0000
Manifest next update: Fri 20 Jun 2025 06:00:31 +0000
Files and hashes: 1: 8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl (hash: hJdMUQbZk9gm6MRtb1Dm785HGv93GgIOix+nJ+W+5rA=)
2: H-eIyUNZ0W3PQRk326R5srYUXMQ.roa (hash: sIobqQC6E12Xk9efcNzqh0/xjMLIgWaEqWZ87SibDYw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:c6:48:56:1c:37:87:8b:99:26:02:8b:72:e3:b5:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f296fa79967e1aea042602f93242880a9543938b
Validity
Not Before: Jun 19 06:00:31 2025 GMT
Not After : Jun 20 06:00:31 2025 GMT
Subject: CN=fc4d904ebd321470cc8a593029be1e56d4b01c45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7d:f8:56:25:9c:9e:8f:e0:be:38:07:76:df:
b9:14:d1:12:d4:76:a5:7a:b9:aa:0b:f4:ce:e3:22:
c2:ea:ae:90:b1:c8:8a:52:0f:a5:97:68:31:5b:4f:
ba:a0:08:f0:ed:b3:c7:f4:73:2e:dd:08:0c:6c:39:
fc:93:cb:7f:5f:e4:80:c3:8a:79:5d:66:86:86:ba:
52:d3:6a:8d:d5:ba:25:33:4b:a9:66:bd:c2:3a:c8:
f8:d3:9f:57:4c:74:29:db:89:7f:d7:92:c2:3d:79:
12:2e:f4:d3:5e:2a:8f:c1:d0:ae:e1:58:7a:ca:40:
f8:ed:24:d7:dc:a5:c0:55:d9:2f:bd:d6:37:0a:6f:
cc:5e:e8:3b:77:4c:3e:24:2f:70:05:fc:96:fe:65:
9c:3c:6b:d4:f0:b4:22:a4:7d:f4:00:53:98:b5:32:
c5:46:7c:cd:ee:fd:25:be:cb:a3:c5:40:87:78:52:
8d:cb:e8:7c:ec:da:71:90:14:a8:04:b8:d7:05:c7:
8d:08:0a:0d:2f:1f:28:2c:e1:b9:44:7d:24:6b:08:
45:1b:80:14:37:21:1d:27:c8:79:a1:4e:6c:5f:71:
15:82:13:ba:f6:c3:36:6d:a9:b6:be:47:a9:75:61:
54:17:1b:c9:e3:04:47:1b:34:30:54:ef:af:22:88:
53:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4D:90:4E:BD:32:14:70:CC:8A:59:30:29:BE:1E:56:D4:B0:1C:45
X509v3 Authority Key Identifier:
keyid:F2:96:FA:79:96:7E:1A:EA:04:26:02:F9:32:42:88:0A:95:43:93:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8pb6eZZ-GuoEJgL5MkKICpVDk4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/6d2a28-bc83-42d5-8556-9409d91090fa/1/8pb6eZZ-GuoEJgL5MkKICpVDk4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:24:53:be:78:57:fd:a8:d9:bc:32:fd:45:51:75:52:01:07:
a2:a3:2b:fb:89:fa:87:33:06:4c:6f:6f:80:13:0a:46:da:e1:
21:a6:7d:3d:8a:5e:27:ed:c8:13:2f:11:8a:fa:57:b8:87:13:
1c:74:0f:4d:33:8c:73:d3:24:11:bc:90:79:92:2c:92:a7:3f:
4f:1d:3a:ba:7c:34:16:19:93:25:c0:1a:08:e9:0c:77:3e:d6:
3a:d9:3c:cd:82:ba:7c:af:83:0a:11:f9:88:40:c5:75:9f:fd:
10:67:2d:56:2c:89:5b:96:9a:e1:c6:2e:15:b3:ab:94:97:8f:
14:0b:77:e7:c0:61:85:7b:b4:09:ad:3f:9b:40:a2:0a:03:36:
7e:40:18:c8:41:07:4c:76:12:d7:f0:11:4a:82:85:5b:7b:53:
bf:ed:05:62:45:8e:f8:df:36:44:52:95:e6:93:50:2b:98:e3:
dc:d5:5e:1e:5f:8d:b1:2b:e2:09:5a:88:e7:a8:10:d2:bd:bf:
4a:f9:f2:df:d4:1e:dd:f7:56:41:41:68:9a:87:0f:f3:4a:96:
89:c1:46:a8:40:bf:df:75:ef:30:43:4e:62:f3:8c:65:9b:cb:
83:ba:06:1e:6b:a4:28:95:a5:b2:82:ec:7f:07:90:cd:cc:ba:
d4:c6:5d:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 14:45:40 2025 by rpki-client