Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
File: 8nptTTKDKDFyXEjbUYokAPGpJL0.mft (raw, json)
Hash identifier: 87CkPM7C8Ythpe7Gl+0e5+T0lkOZJATHfwqr/Q04lrw=
Subject key identifier: 9D:64:E0:53:C9:14:69:C1:1E:65:AD:5B:9E:9A:AD:1B:A0:89:69:D8
Authority key identifier: F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
Certificate issuer: /CN=f27a6d4d32832831725c48db518a2400f1a924bd
Certificate serial: 01976D745538E527B4EE94730D2968B7E530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
Manifest number: 14A1
Signing time: Sat 14 Jun 2025 08:00:29 +0000
Manifest this update: Sat 14 Jun 2025 08:00:29 +0000
Manifest next update: Sun 15 Jun 2025 08:00:29 +0000
Files and hashes: 1: 8nptTTKDKDFyXEjbUYokAPGpJL0.crl (hash: DGBxZVkOMQVwh8FXMXhIPV3tcS32RJiC5F7w12o3Vf4=)
2: m0jbiHxRktR_kE-i3D3woRX2ZsI.roa (hash: fSOohTJ+oYWg/YD/VykP7b8U7lIYd4B0MDv4mOCNuT8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:74:55:38:e5:27:b4:ee:94:73:0d:29:68:b7:e5:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f27a6d4d32832831725c48db518a2400f1a924bd
Validity
Not Before: Jun 14 08:00:29 2025 GMT
Not After : Jun 15 08:00:29 2025 GMT
Subject: CN=9d64e053c91469c11e65ad5b9e9aad1ba08969d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:02:d4:80:b4:68:f9:89:1b:45:b0:b2:43:c6:
29:95:a1:e5:a7:68:55:01:6e:8a:57:48:70:8b:4d:
fe:db:bd:d5:80:e4:2a:0e:b0:13:56:bb:25:2a:40:
b0:aa:70:d7:ac:4b:6a:ee:4b:1f:72:d0:e3:84:e7:
f2:c1:26:89:aa:8d:07:6c:93:f7:e6:65:c8:1e:22:
62:81:7f:6f:5c:9d:e8:ff:f4:92:8f:a8:28:4f:fe:
c7:4d:7e:f8:9b:5f:64:09:64:03:08:fc:dc:2a:5f:
ec:a1:c6:9a:37:3e:a7:d6:16:a5:26:8d:ab:e1:b9:
8c:56:be:ae:36:36:49:92:e7:c2:3e:1c:75:75:d6:
72:8b:32:2e:13:ca:84:29:fa:b4:e9:44:f8:3d:99:
7a:9f:8d:ce:9a:b0:5e:ef:b0:5b:ea:98:f6:45:c3:
a3:bd:08:41:46:fa:39:ed:ea:56:25:ba:57:ca:86:
c7:f7:28:d2:2f:8b:02:7a:08:ef:06:a7:5e:97:e0:
35:07:4a:cc:34:af:6c:50:43:b7:4c:b6:4d:f1:f0:
ce:59:84:65:5c:1e:01:19:c4:83:40:bf:53:f7:08:
e8:c4:52:e5:b0:94:1a:1f:58:fc:78:28:81:94:3b:
9a:66:23:c1:df:9e:ef:85:25:d1:bf:4a:55:74:9a:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:64:E0:53:C9:14:69:C1:1E:65:AD:5B:9E:9A:AD:1B:A0:89:69:D8
X509v3 Authority Key Identifier:
keyid:F2:7A:6D:4D:32:83:28:31:72:5C:48:DB:51:8A:24:00:F1:A9:24:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nptTTKDKDFyXEjbUYokAPGpJL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/28f8ec-e577-4752-8685-1573ef6271eb/1/8nptTTKDKDFyXEjbUYokAPGpJL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:24:27:35:2a:e9:44:65:43:67:6e:62:28:e6:f5:31:dd:7c:
19:97:49:35:49:d6:85:3e:9b:a2:0a:97:dc:d4:7a:f0:16:a8:
83:fe:d5:93:7c:8d:b7:f2:85:ce:0b:bc:86:db:74:a9:df:d0:
f3:a6:38:e2:cb:9a:34:5a:e9:1e:3d:97:0c:64:ca:87:6d:cd:
df:14:22:83:f8:c5:a0:64:11:ee:d5:fd:08:9b:78:c0:41:1e:
7e:3f:58:04:e4:8f:81:76:90:3b:6c:dc:80:1e:30:55:d8:82:
80:b8:48:95:19:e1:4b:2e:60:20:53:19:10:43:a7:27:20:b1:
ca:9a:95:ea:ac:b4:7c:29:ae:c5:b9:0a:ab:62:3b:b1:1d:b0:
cc:18:13:e0:34:5b:81:5e:6b:ae:17:2e:49:1d:f6:22:0b:bf:
37:e1:cd:58:dc:56:24:0a:5f:a9:05:db:3a:ea:ab:5e:d4:f4:
60:2c:18:02:a2:62:5c:bc:5d:ae:9f:94:dd:81:3c:24:b1:d3:
77:91:28:cf:d2:d2:9d:e4:f6:24:b3:e9:a9:3b:3f:c5:40:2a:
62:5d:db:34:f4:f0:04:65:42:4d:ef:20:ea:4b:cb:ca:95:a8:
96:87:9e:53:c8:2c:52:09:df:6b:c4:16:33:68:7b:e9:af:07:
ef:e6:89:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 10:44:54 2025 by rpki-client