Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: pEbVouHSCc5KyNXlxjLxip/sKNW2nmJcUUAMCH5K294=
Subject key identifier: 6C:13:22:C1:20:E3:7C:98:22:29:CD:A5:CB:CC:E8:20:E7:D4:01:47
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 01977B303DBB13B0701A28D3FAAE315E6185
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 0F5B
Signing time: Tue 17 Jun 2025 00:00:48 +0000
Manifest this update: Tue 17 Jun 2025 00:00:48 +0000
Manifest next update: Wed 18 Jun 2025 00:00:48 +0000
Files and hashes: 1: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: 0Dg5FZ10NooKPdM4We6PuJcRVJzaDLnxFk28R1L4rEQ=)
2: Mkl44sEh_I1NJhSRpZogcHN-KpQ.roa (hash: UFBdvkUQHMElnZ7pMex1cDJSyxO3mce2NK6vzaKBwPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:30:3d:bb:13:b0:70:1a:28:d3:fa:ae:31:5e:61:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Jun 17 00:00:48 2025 GMT
Not After : Jun 18 00:00:48 2025 GMT
Subject: CN=6c1322c120e37c982229cda5cbcce820e7d40147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8e:49:7f:5e:3c:06:9d:93:ce:f2:8c:d3:07:
10:25:16:ee:64:d3:6d:b7:cb:db:bd:6f:7d:05:6f:
ac:0c:d0:b7:42:82:3d:50:ad:b5:63:4b:88:7b:ce:
19:5c:d4:12:54:81:fe:dd:9e:a4:a7:e8:61:52:f6:
fe:f4:61:6f:4d:6d:a9:a5:69:07:87:e1:26:b6:ec:
f4:38:7a:f6:1e:4b:15:6e:55:80:8c:ac:0d:31:a0:
56:6f:ea:37:88:f7:e5:42:d3:31:74:50:5b:5f:e0:
64:ce:35:c2:ba:65:d4:6e:91:9f:6b:32:08:57:c9:
25:48:16:36:e7:8f:f1:3c:4a:53:2a:35:af:cf:0d:
84:d5:ac:24:7f:c1:d5:c2:5b:79:80:8c:01:fc:c7:
48:21:ed:27:a7:0c:bf:7f:2e:b8:8b:23:c1:3d:ff:
b9:b5:26:ba:12:11:08:29:ae:3a:2a:60:18:42:df:
8f:5b:41:62:9e:51:58:64:cb:f4:f6:2f:5e:5e:6e:
60:9b:2a:9a:ea:a2:9c:5e:e0:1d:59:1b:49:06:f8:
c0:13:a6:14:68:dd:24:7c:7b:24:2c:54:4d:66:fd:
32:f8:40:c8:8b:34:d7:da:3f:fe:83:d1:79:66:eb:
ee:49:ab:39:40:c8:73:c8:8f:bd:97:11:7f:bc:87:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:13:22:C1:20:E3:7C:98:22:29:CD:A5:CB:CC:E8:20:E7:D4:01:47
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:0a:ca:3a:da:c0:e7:c3:64:9a:96:6c:49:0c:45:8d:ed:ae:
53:46:84:a5:62:21:23:2d:85:7d:2c:09:35:ae:ce:9c:3e:8c:
50:bd:f4:8b:49:89:b2:7e:fa:3d:bb:42:e4:f4:87:2f:01:4f:
21:a8:78:dc:ee:b9:41:e6:3b:b8:1c:76:d3:34:2e:f0:48:f5:
00:9b:4d:ca:1d:09:96:45:92:c3:df:30:d8:83:ae:ed:b7:0f:
44:12:97:71:c5:c6:df:16:9f:43:33:8c:a2:e1:69:d5:39:5b:
20:4f:d1:35:57:63:da:17:ef:6e:c0:da:1a:e1:33:ef:c7:d3:
d4:ff:e9:29:9c:fa:0d:cb:59:fe:1a:e0:d2:fa:44:d4:c6:a2:
5f:2e:25:84:5c:14:fd:27:9a:3b:5c:70:38:ba:5d:6e:c3:e3:
e1:ea:73:bb:db:7e:d9:d9:0a:20:8d:89:e9:ec:2d:6b:8d:6c:
27:66:3e:8d:1f:9c:72:60:1c:3b:e3:fe:20:87:85:e6:d0:1a:
a8:84:42:f5:98:e5:aa:42:ed:b1:24:55:2d:bf:0a:82:c4:2e:
a8:a4:9b:5b:f3:c1:81:b2:4c:73:fb:1a:91:78:91:52:dd:34:
54:f3:2a:2e:39:f0:cf:3e:b4:b6:db:3a:10:64:3f:48:9c:45:
e9:00:cf:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 06:32:07 2025 by rpki-client