Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
File: _X0csRSU6ziY8Q09Y1vnXxay3FE.mft (raw, json)
Hash identifier: kiLjIARqQAcf5v+fzKE9O+0Zu8U/tnQb/Kq2l+cCF7o=
Subject key identifier: 8D:EF:88:3B:48:D9:3C:9A:F6:93:85:CA:B8:2D:90:0B:03:15:C5:11
Authority key identifier: FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
Certificate issuer: /CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Certificate serial: 0197722D0CE57E16175B58A7A7C5D987BA98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
Manifest number: 0BD5
Signing time: Sun 15 Jun 2025 06:00:44 +0000
Manifest this update: Sun 15 Jun 2025 06:00:44 +0000
Manifest next update: Mon 16 Jun 2025 06:00:44 +0000
Files and hashes: 1: EryZGhKHOKFejsNYtsHoCrBOwlI.roa (hash: XPrcWsidSTpQokDPJh6WTZK3lvnDmP0xxlT9T9iBNGQ=)
2: Q8FRv-AW6LCPe-NhY9NXN5LnC4o.roa (hash: N2JyPxT8+m5HQDRPSXJdJM2oBFZFnSgrTMkI9DghAaA=)
3: _X0csRSU6ziY8Q09Y1vnXxay3FE.crl (hash: ZfG1QCRx2KJDdkmN/5VuuZFJpYPtGYVdAkRw8KTXSR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2d:0c:e5:7e:16:17:5b:58:a7:a7:c5:d9:87:ba:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd7d1cb11494eb3898f10d3d635be75f16b2dc51
Validity
Not Before: Jun 15 06:00:44 2025 GMT
Not After : Jun 16 06:00:44 2025 GMT
Subject: CN=8def883b48d93c9af69385cab82d900b0315c511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:52:b9:38:fe:b5:d9:54:56:e4:b1:a0:2d:6a:
34:19:4f:13:07:d8:cf:8a:30:ec:e0:be:82:b7:5a:
95:e6:25:cb:e6:0c:ff:9d:41:26:9e:e5:9e:80:08:
19:c5:1a:1f:a9:41:cb:25:09:4d:dc:78:53:04:2e:
c7:33:bc:54:84:d4:fe:fe:3d:20:f2:07:52:ba:e1:
34:aa:39:26:4c:52:8c:ac:6f:68:2c:a7:64:a1:5f:
09:55:bc:e9:c5:03:22:51:d9:6f:15:66:3a:1e:fe:
ab:82:df:8d:74:d6:08:b3:1e:1e:f1:a0:3b:b0:4a:
b0:9a:65:24:b2:b4:81:7a:16:0f:69:99:5b:64:ab:
f5:29:a7:11:77:40:b6:c6:07:74:49:5e:cf:17:cb:
0e:ca:43:93:36:3d:ce:ef:60:74:c8:4c:a1:ae:39:
61:00:f3:24:51:19:d1:b1:68:62:b6:c6:11:f3:4b:
e0:de:aa:dd:41:52:ce:11:e2:18:e7:1b:93:82:d9:
5e:8c:ab:dd:92:29:68:e7:38:68:97:11:d8:dc:30:
6e:36:d9:f4:1b:4f:6e:31:66:29:47:25:2f:af:0e:
64:6b:6d:63:02:24:e7:43:14:28:a6:47:04:e6:f1:
5d:15:fd:27:e7:05:f7:fe:32:6d:56:12:75:e5:53:
30:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EF:88:3B:48:D9:3C:9A:F6:93:85:CA:B8:2D:90:0B:03:15:C5:11
X509v3 Authority Key Identifier:
keyid:FD:7D:1C:B1:14:94:EB:38:98:F1:0D:3D:63:5B:E7:5F:16:B2:DC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_X0csRSU6ziY8Q09Y1vnXxay3FE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/a6c152-37d3-4f86-8f6e-7659bf86ac4c/1/_X0csRSU6ziY8Q09Y1vnXxay3FE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:26:74:a2:23:88:f6:8d:7f:66:a2:c9:7a:3b:67:64:9e:4d:
d5:d6:e7:3e:60:6f:f3:10:1f:5f:7d:75:cb:09:da:76:4e:d7:
0b:e3:42:9a:b4:52:a3:7f:5c:3b:22:c8:08:ed:1d:3c:0b:ae:
a2:be:30:46:f7:3a:c9:15:cd:fc:0e:a4:18:98:23:12:97:b0:
dc:55:04:b5:05:2e:f0:24:c0:b6:e3:3d:96:54:67:d9:2b:55:
12:f1:25:88:ef:a1:bd:74:22:17:59:ec:c9:52:a8:ed:74:a6:
6d:e0:f6:76:b8:83:69:69:c4:ad:86:f8:49:56:41:6a:2f:d1:
94:49:54:e2:84:31:ff:6a:39:ce:23:0e:02:94:6d:42:d1:c3:
42:7a:9e:12:54:f0:46:d2:10:da:b3:af:9f:5f:95:58:db:6f:
23:48:b3:d1:a8:6d:ac:45:27:4f:37:2e:0b:d6:c1:b6:4e:7e:
16:44:51:1d:9d:7d:0d:21:73:42:c7:d4:f7:5c:78:ae:20:5f:
fd:07:a7:9f:68:8b:ea:0e:85:c9:8f:f6:94:3b:20:5d:4e:62:
09:56:99:b1:cf:88:fc:29:08:b9:c9:62:1d:d1:0f:3b:30:32:
3f:5a:fd:53:5b:f7:9b:dc:36:af:c4:3a:65:f1:3d:35:5e:c2:
73:0a:45:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 13:00:31 2025 by rpki-client