Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
File: 8NWfEh_H76DBC33WFNlah1bVNgY.mft (raw, json)
Hash identifier: NbBKAiaq9Zf0eDCtLML5vPx8YmVfjsFQENiorxyq8ZI=
Subject key identifier: 04:22:65:F1:46:01:74:4F:C2:F3:91:59:28:67:61:23:51:8A:EA:40
Authority key identifier: F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
Certificate issuer: /CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Certificate serial: 01976C991C3C4B58005AFCD647AE2660793A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 04:01:02 +0000
Manifest this update: Sat 14 Jun 2025 04:01:02 +0000
Manifest next update: Sun 15 Jun 2025 04:01:02 +0000
Files and hashes: 1: 8NWfEh_H76DBC33WFNlah1bVNgY.crl (hash: K81nQjsEiDFBPnWuLMqVO/ysc1nWyHLyacv79Yhr0Lc=)
2: bExl4A_tLBAbX-OeFCCRrL9Dsyk.roa (hash: MMmRyVv8bOvPQ4JoDHNxbF0lksG8UDkMZAPsWlNfgRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:99:1c:3c:4b:58:00:5a:fc:d6:47:ae:26:60:79:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d59f121fc7efa0c10b7dd614d95a8756d53606
Validity
Not Before: Jun 14 04:01:02 2025 GMT
Not After : Jun 15 04:01:02 2025 GMT
Subject: CN=042265f14601744fc2f3915928676123518aea40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c7:be:d9:67:84:2d:a6:c2:fc:dd:97:e8:6b:
fe:43:e0:e3:8e:ab:72:85:e1:14:fd:f8:57:d7:a4:
76:ca:e4:e5:76:d4:4b:ba:f9:df:18:62:a4:a1:38:
ad:68:58:c1:56:59:6a:64:b9:51:e1:da:7d:13:84:
6d:b5:1d:f0:58:e7:a4:41:ec:fc:14:ef:8c:bf:4e:
ac:c4:e0:f3:42:ff:cd:20:8e:4f:02:35:6e:97:4d:
f6:b0:cd:7d:96:c8:a2:6c:06:cd:55:7f:60:d8:28:
c5:66:79:19:eb:4c:be:0d:d7:38:de:8e:0d:ae:d6:
77:7d:5d:78:c9:0a:e6:ad:f1:83:9b:1a:e5:9c:97:
6a:f6:93:a0:af:bd:bb:94:18:45:7e:5e:b2:5c:07:
45:93:ea:a9:c7:25:f9:f3:ff:ff:4a:ee:ea:d9:b6:
7b:be:e9:1d:45:1f:6e:f7:d3:19:91:05:91:d4:56:
c0:cc:50:0f:51:5f:a8:88:7a:d2:27:18:65:0c:c7:
00:66:43:16:18:d1:f4:5d:6e:99:e8:6f:3e:d1:12:
c3:58:d8:5a:c3:f4:b0:96:e8:e2:af:13:a7:fe:b4:
17:33:5c:b6:0c:d5:09:d5:08:30:c8:f5:dd:af:c0:
01:e5:7b:5b:6d:84:65:f8:65:58:fe:e9:9a:98:16:
50:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:22:65:F1:46:01:74:4F:C2:F3:91:59:28:67:61:23:51:8A:EA:40
X509v3 Authority Key Identifier:
keyid:F0:D5:9F:12:1F:C7:EF:A0:C1:0B:7D:D6:14:D9:5A:87:56:D5:36:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NWfEh_H76DBC33WFNlah1bVNgY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e698c7-0b1f-4106-ba67-6eefe5b335aa/1/8NWfEh_H76DBC33WFNlah1bVNgY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:fb:9a:71:b2:6e:6d:8c:83:e7:c1:57:46:99:3f:0f:f6:10:
96:26:7e:e3:e6:86:bf:05:de:a9:86:af:56:51:bf:b7:a0:fa:
41:b4:1e:c3:28:1b:b7:c9:34:e8:b8:6a:12:80:74:a6:d6:a5:
95:3a:67:54:20:1b:5f:60:a0:38:b9:15:36:b5:91:33:c3:81:
91:79:81:e7:1a:5e:4e:c2:95:0b:c7:81:54:a0:0f:8c:f5:2c:
f4:db:ad:d2:bb:f6:c8:02:4f:2d:f2:75:f1:64:16:e0:12:ad:
4f:c6:54:5f:ab:78:d1:1d:a8:3f:48:b1:e3:40:35:5c:1b:cc:
a5:d1:99:71:d5:bc:7b:91:5a:32:be:3d:92:97:d2:79:66:98:
c6:fa:b4:b2:1d:23:b1:57:b6:ec:bc:7e:ed:d6:1e:dc:ef:01:
f3:b4:76:6a:3d:27:4a:3e:30:28:63:96:c6:4f:82:db:90:04:
c9:ae:df:33:86:30:53:84:00:ad:9b:44:c7:08:48:92:88:72:
71:50:ff:7b:35:e8:3e:61:a4:30:44:c0:3c:50:ab:10:dc:1d:
4b:e1:c8:4d:7b:a2:6c:22:21:cd:8c:30:3f:c3:f2:98:0f:32:
7e:bf:66:eb:4b:5e:f0:6c:5b:16:97:04:01:b7:61:3f:2b:8f:
9b:26:11:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:06:22 2025 by rpki-client