Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
File: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft (raw, json)
Hash identifier: gxnwcIueZ3cShxtS4BIiOUqgjqBIARAJeg/rFDair3w=
Subject key identifier: 6D:72:09:78:8E:32:EE:5E:D6:FE:7A:00:F1:19:F3:2D:EA:A6:E5:32
Authority key identifier: F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6
Certificate issuer: /CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
Certificate serial: 019777F82F7AF62F7D62EE63ACC50A8CD5A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
Manifest number: 0ECD
Signing time: Mon 16 Jun 2025 09:00:43 +0000
Manifest this update: Mon 16 Jun 2025 09:00:43 +0000
Manifest next update: Tue 17 Jun 2025 09:00:43 +0000
Files and hashes: 1: 0ljyTvQ_d8HoyClfNuv9eO2Q5yA.roa (hash: jw6rtBAELKvNPa562NE5b8O7bUsTaNwLwsoxjTQsK7A=)
2: 8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl (hash: 1MDfhRTGMEQJ/bvL8MehOnUMT/cZnlaS7P5G5x0k4nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:2f:7a:f6:2f:7d:62:ee:63:ac:c5:0a:8c:d5:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f14666fbb64c4da8cb8992bf0da97b8b0117eac6
Validity
Not Before: Jun 16 09:00:43 2025 GMT
Not After : Jun 17 09:00:43 2025 GMT
Subject: CN=6d7209788e32ee5ed6fe7a00f119f32deaa6e532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e1:f6:5a:4a:d8:fc:2a:a3:0b:dd:ba:f0:65:
02:54:a0:e2:74:c4:cb:0f:bb:78:96:3d:c3:33:75:
f0:b9:6b:9f:71:9f:11:d8:f8:3f:25:92:17:6e:46:
e1:ef:b0:ec:70:a1:82:4b:10:a8:2a:ac:64:53:aa:
99:0c:72:5b:5c:36:5d:0e:3e:09:c6:1a:e0:31:83:
39:c9:32:f0:2c:16:07:b7:61:b8:f4:4e:0b:17:a9:
a5:95:2d:83:a3:f5:71:5b:7c:27:66:b0:e8:5b:8d:
f7:36:15:fb:54:84:f8:14:f7:1c:8b:c0:41:98:6c:
67:51:48:ac:b2:f3:89:b9:55:25:55:c2:73:7d:df:
ad:b9:97:1e:9c:c0:96:30:08:d4:8e:d5:d5:fe:66:
b4:90:c1:e1:b3:e7:e4:32:14:c3:57:7c:df:59:4f:
e6:46:8e:c8:df:8c:2a:59:48:ec:03:68:3b:a3:bd:
49:43:34:1e:e9:66:82:95:f2:9b:8c:ee:4b:40:45:
a8:f2:60:12:15:90:4a:ff:33:42:06:2a:5d:76:6d:
d7:b4:6c:bf:47:81:88:a7:00:57:b4:09:37:a8:30:
a3:80:10:0b:18:c7:8d:a4:06:29:59:4c:e6:83:98:
6d:e8:6d:15:90:9d:70:71:ec:4e:6d:d7:80:03:da:
08:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:72:09:78:8E:32:EE:5E:D6:FE:7A:00:F1:19:F3:2D:EA:A6:E5:32
X509v3 Authority Key Identifier:
keyid:F1:46:66:FB:B6:4C:4D:A8:CB:89:92:BF:0D:A9:7B:8B:01:17:EA:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8UZm-7ZMTajLiZK_Dal7iwEX6sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6a8ad5-21df-4dbb-9abd-d446455dc5ba/1/8UZm-7ZMTajLiZK_Dal7iwEX6sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:71:e3:17:76:2e:20:24:31:1c:b8:89:20:7c:48:c5:85:86:
d2:2e:7e:a2:19:ca:18:cf:0f:38:1b:a8:22:19:11:88:6c:d4:
e7:d3:25:ba:66:86:7a:8b:41:9e:22:40:28:a2:b9:fa:62:de:
5d:a1:29:d6:c9:7b:78:b5:12:42:11:2e:c5:74:c7:11:59:c9:
79:fc:54:1b:f0:01:82:b6:98:ed:7f:cd:e5:cc:02:c8:1f:ee:
d4:12:8d:d7:7b:71:34:54:78:95:37:88:e2:af:6d:85:4a:b1:
9a:f8:a5:2f:ea:b9:13:5c:b0:ed:0d:46:cc:83:f1:95:29:6e:
a4:98:3e:4d:eb:ed:8a:4b:08:cf:1c:31:9e:cd:de:e1:13:46:
af:4a:b4:d3:82:49:b5:31:31:f8:12:a0:a8:35:47:8e:1e:f2:
38:4e:6b:27:94:ee:8a:62:46:a8:98:00:b9:fb:81:68:f8:53:
ab:fe:22:bb:65:32:11:4c:ea:0a:c4:24:d7:dc:3b:96:d0:13:
9b:f2:4f:d6:09:48:ba:d9:af:95:db:f6:55:40:2f:8e:23:61:
83:d8:87:79:24:fa:81:bf:78:cf:5f:81:29:4d:a8:a1:4d:7b:
92:63:f9:08:9c:67:35:a7:4e:1c:4c:e4:ea:32:32:0e:0e:c4:
a5:5c:8c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 14:08:16 2025 by rpki-client