Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
File: 8NSBnmY6qUh7aggqd9IjfhuIAqE.mft (raw, json)
Hash identifier: f+2OWJOyET8Yw6+J+Ye24hi1EAaSvufUxEKkcNSuhLw=
Subject key identifier: 40:AA:3B:A5:28:44:07:C5:5C:E3:E7:AD:D3:0D:68:25:E2:F6:99:75
Authority key identifier: F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
Certificate issuer: /CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Certificate serial: 01976A3C46112D8A06A77B565A2DA3E8653B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
Manifest number: 0BED
Signing time: Fri 13 Jun 2025 17:00:24 +0000
Manifest this update: Fri 13 Jun 2025 17:00:24 +0000
Manifest next update: Sat 14 Jun 2025 17:00:24 +0000
Files and hashes: 1: 8NSBnmY6qUh7aggqd9IjfhuIAqE.crl (hash: JoYf95k12n2PSLEK+W5mjLq9NObooyWMP0qwVkXPFs0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:46:11:2d:8a:06:a7:7b:56:5a:2d:a3:e8:65:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d4819e663aa9487b6a082a77d2237e1b8802a1
Validity
Not Before: Jun 13 17:00:24 2025 GMT
Not After : Jun 14 17:00:24 2025 GMT
Subject: CN=40aa3ba5284407c55ce3e7add30d6825e2f69975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6c:46:2b:03:eb:e4:03:f0:24:04:5d:68:93:
2e:f2:c3:4a:27:5b:a6:9e:4f:d4:af:86:b7:46:ae:
b8:30:44:94:b7:f0:a1:e3:51:b3:4f:10:43:44:1d:
e1:4d:ec:00:13:c8:e0:2c:b8:a4:92:39:33:4d:c4:
02:0e:24:05:09:3f:c3:96:7a:8a:eb:fb:0f:b5:2c:
dd:7f:74:ef:65:ba:c7:13:8b:0b:08:69:e7:7c:f1:
cc:f6:e9:17:dc:70:6f:5a:ae:02:51:8a:eb:5e:56:
ea:6f:d9:48:65:50:e4:c7:93:73:b2:2b:a8:f1:9c:
48:36:c6:6a:2b:ab:c1:6e:e9:5a:24:54:33:c3:28:
59:12:63:10:e6:cd:c9:32:95:cc:a4:f7:00:57:90:
4a:56:89:40:ad:a5:a0:d0:0b:24:ba:9d:6d:1b:5b:
e6:47:1b:42:48:a2:ed:a2:74:ba:bc:61:e0:d1:34:
26:4d:0b:3d:1f:2b:91:af:f2:d5:07:1d:a8:74:b7:
3d:b1:18:4f:97:7f:7a:20:06:48:cc:76:31:52:c5:
3b:f5:a5:2b:e0:06:fa:a8:47:0d:00:28:19:af:11:
a7:86:8b:ab:16:ad:6d:ce:ae:4e:4c:30:ce:49:b6:
43:3c:24:a0:7c:f2:f3:fc:8f:d7:83:67:a6:30:b8:
30:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AA:3B:A5:28:44:07:C5:5C:E3:E7:AD:D3:0D:68:25:E2:F6:99:75
X509v3 Authority Key Identifier:
keyid:F0:D4:81:9E:66:3A:A9:48:7B:6A:08:2A:77:D2:23:7E:1B:88:02:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NSBnmY6qUh7aggqd9IjfhuIAqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/34d39a-62d2-40f2-84aa-9724cad6baee/1/8NSBnmY6qUh7aggqd9IjfhuIAqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:b8:b5:08:0b:97:a6:e3:47:ca:85:30:12:6a:b7:d2:0f:5e:
9d:5a:0d:03:f2:33:69:8e:ca:60:d6:5a:01:63:4c:21:ff:57:
1c:28:50:3c:4c:ed:ea:1d:14:a1:1b:8f:ce:58:4a:0c:ed:fa:
db:b6:be:f6:c7:fb:cc:e3:02:fa:a5:63:d9:55:66:47:e4:2b:
20:21:5d:70:a9:a2:29:50:47:e9:a9:68:e4:56:dd:57:be:27:
d8:85:8a:6f:c7:2c:84:2e:76:fd:c5:6c:3f:a2:49:66:4b:c5:
54:81:86:4f:99:fd:a2:b7:46:8d:fc:86:09:b8:3b:a5:46:af:
21:eb:08:1f:79:4d:ea:26:9e:13:8c:b2:75:24:d5:af:65:87:
b9:b9:50:39:68:90:fb:40:07:bc:ff:93:f2:4d:3d:5d:e9:cc:
c5:1d:00:ec:db:03:b1:12:59:53:ef:55:13:06:62:c9:d8:87:
37:d6:d6:65:ad:6e:0c:ea:7e:74:68:db:2f:f8:e4:f0:78:c4:
d5:65:6a:eb:05:51:cd:32:81:2a:3d:b0:c6:c2:6a:b4:85:69:
e1:82:5f:90:08:47:46:a4:73:87:1b:c5:82:56:bb:1b:a5:01:
8b:ff:39:0f:f1:71:ff:f0:2f:21:3e:04:83:16:0c:07:5e:73:
cd:2f:cf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 20:01:25 2025 by rpki-client