Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
File: s8hW6VbErdthWY88JInyvfbtHRg.mft (raw, json)
Hash identifier: mPOf6B+92tldnPKZfi0gtqsKBv+nSIZIfifb/5W3CvY=
Subject key identifier: 6A:AC:15:1D:4A:82:FA:91:13:6D:BA:20:E6:DD:75:8A:FC:4D:85:FF
Authority key identifier: B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
Certificate issuer: /CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Certificate serial: 01976E87596AC9436D79E4EEBB3045676EB4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
Manifest number: 1520
Signing time: Sat 14 Jun 2025 13:00:53 +0000
Manifest this update: Sat 14 Jun 2025 13:00:53 +0000
Manifest next update: Sun 15 Jun 2025 13:00:53 +0000
Files and hashes: 1: Kc4V5tzdi4xhmWeJoyXZlmZAD6U.roa (hash: gVw1MMRDs2rY597vN0xWVEhdeHW2cAUodm7HsTOIyc8=)
2: s8hW6VbErdthWY88JInyvfbtHRg.crl (hash: BEQlMAcXD101yTfWx2T3m2evtQhlxjwlTi+9l118OLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:59:6a:c9:43:6d:79:e4:ee:bb:30:45:67:6e:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3c856e956c4addb61598f3c2489f2bdf6ed1d18
Validity
Not Before: Jun 14 13:00:53 2025 GMT
Not After : Jun 15 13:00:53 2025 GMT
Subject: CN=6aac151d4a82fa91136dba20e6dd758afc4d85ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:62:09:a5:97:7d:e2:ef:c6:94:c9:48:e2:48:
0b:cf:31:38:f9:18:ea:a8:e1:dd:40:c2:f4:3a:02:
e1:ed:b9:16:6a:aa:22:2d:7c:c9:78:72:96:40:5e:
19:00:7b:b6:05:f1:5f:c2:8f:8c:45:21:78:81:d6:
4c:16:c3:b1:90:6d:b2:e4:83:9d:45:46:2e:9b:1e:
67:27:f0:ec:68:a7:79:f4:06:f2:26:b6:8b:df:22:
ee:47:cc:80:95:00:bc:64:0e:38:e2:df:1a:31:e7:
68:ea:0a:fb:ca:17:47:8f:73:78:e9:54:b5:15:76:
d6:f3:fc:53:57:7b:73:7f:23:b0:bf:f0:3b:5b:4b:
8b:b4:85:14:04:71:97:0c:ce:37:87:fa:75:c9:47:
36:a0:a3:91:03:e8:77:29:d4:e9:f4:11:fd:a6:3d:
12:96:91:c5:43:08:54:83:31:e3:94:28:d3:b4:54:
4d:15:ce:bf:4a:db:fc:67:21:8d:c7:9c:ea:2d:d7:
ba:ce:17:39:59:62:c1:05:ca:61:0a:07:53:e1:64:
0d:d9:5e:71:f9:77:9f:56:4f:69:35:f7:17:e2:bf:
0e:ca:26:df:9e:d1:fa:f8:fa:52:92:d2:b6:25:40:
4d:2b:97:89:c6:05:56:3f:a2:34:ab:51:8a:3b:1d:
06:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:AC:15:1D:4A:82:FA:91:13:6D:BA:20:E6:DD:75:8A:FC:4D:85:FF
X509v3 Authority Key Identifier:
keyid:B3:C8:56:E9:56:C4:AD:DB:61:59:8F:3C:24:89:F2:BD:F6:ED:1D:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s8hW6VbErdthWY88JInyvfbtHRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/c55be7-fe64-4e73-a063-1b0ef44f7884/1/s8hW6VbErdthWY88JInyvfbtHRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:53:28:fb:68:2b:c3:1f:03:f9:ae:e2:87:58:96:24:ec:ce:
65:3e:de:60:4c:5f:90:38:db:5e:c6:ca:b0:6d:5d:c7:42:fa:
0a:61:d9:df:39:6d:39:14:cc:ce:2f:f8:a6:91:de:ad:9f:36:
cd:59:02:57:d9:06:e5:82:76:53:1e:ee:d2:79:88:7c:44:91:
90:5d:90:bc:6b:d8:36:cd:eb:20:90:f0:52:60:a8:6f:4a:39:
81:32:e7:63:23:ab:9d:56:1d:81:52:29:7e:42:8d:36:d1:59:
b7:ed:d2:dc:8f:69:62:c0:b7:0a:5b:cf:20:c3:d4:6d:5d:c6:
9e:65:1a:00:3e:0e:d3:fc:5f:92:8d:8e:1f:e9:8a:c8:4b:78:
53:af:7e:b8:8c:f9:ba:84:85:a8:f6:2e:c3:ce:91:62:eb:40:
ab:81:e9:17:a8:1d:ad:d3:5b:dc:87:78:42:64:11:15:67:28:
e3:06:91:f5:b4:ac:42:09:e6:fa:94:7b:f6:16:01:21:42:b7:
3b:02:c3:cd:e5:63:2c:70:05:43:bc:b3:b3:dc:37:0e:29:dc:
e8:f0:e6:4c:12:56:03:09:87:71:8c:b5:e1:92:45:bb:66:34:
92:c5:36:6c:44:9e:ce:53:99:9e:eb:6a:31:20:46:6f:e6:79:
69:0c:b1:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:30:19 2025 by rpki-client