Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
File: 8eV-NQ06bbilgFWSmfC504vMWVI.mft (raw, json)
Hash identifier: U1Ke9Qq89v65m3yReeroCtgKXg7lEtWK8QDufIYMax0=
Subject key identifier: 64:C8:BE:29:24:06:4D:BD:D0:30:8E:CA:1D:1E:6B:46:96:FC:45:02
Authority key identifier: F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
Certificate issuer: /CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Certificate serial: 019786C68169AC4E109A1FF4FFA25249B391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
Manifest number: 0132
Signing time: Thu 19 Jun 2025 06:00:45 +0000
Manifest this update: Thu 19 Jun 2025 06:00:45 +0000
Manifest next update: Fri 20 Jun 2025 06:00:45 +0000
Files and hashes: 1: 8eV-NQ06bbilgFWSmfC504vMWVI.crl (hash: pMNJxKRRP92Fu6Tpigh9A3em6/nFjaCuxaub9DKY1gw=)
2: sW8bwiGLsI7Vh96L_GlmvLQDJKY.roa (hash: zwPk0zZ0KWeH/lkVto00u9mSsOX9BDpbaWABcwD0yq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 23:47:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:c6:81:69:ac:4e:10:9a:1f:f4:ff:a2:52:49:b3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1e57e350d3a6db8a580559299f0b9d38bcc5952
Validity
Not Before: Jun 19 06:00:45 2025 GMT
Not After : Jun 20 06:00:45 2025 GMT
Subject: CN=64c8be2924064dbdd0308eca1d1e6b4696fc4502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:81:fb:69:20:63:04:da:33:83:76:b2:f5:
2e:2a:86:82:30:cc:ae:b0:52:74:b6:91:f2:79:ba:
d0:94:45:b4:54:8f:a7:5d:20:d3:0c:ed:48:ff:23:
53:3e:25:9e:7f:9b:0e:d8:0d:d7:59:02:aa:c1:c1:
2d:a8:b1:96:44:3b:f7:f3:19:94:fa:18:53:f3:35:
51:cf:c7:26:1a:27:8c:27:a1:be:32:cc:ce:4c:f6:
75:5f:63:03:dd:51:26:81:9e:7e:57:09:5b:9e:c5:
93:d8:dd:9b:77:a4:79:92:c4:db:1e:73:07:9d:09:
b5:70:fc:40:b3:41:e4:27:6e:ee:e7:46:40:4c:9f:
e9:c8:13:9d:d7:c8:7e:65:c6:87:89:93:05:27:bb:
6d:b0:61:8f:61:55:be:25:b5:76:3f:e1:fe:e4:0c:
c9:4f:65:2a:d5:fc:fb:b0:de:80:10:6c:bf:c2:eb:
ab:bd:6a:e7:73:a0:ef:f1:d7:6a:59:ee:a9:33:c4:
97:93:08:ef:c8:e5:a8:00:54:84:41:06:84:70:df:
ae:af:35:86:e2:75:77:ca:bd:16:27:55:7b:d8:96:
8d:4b:4b:69:83:9a:80:fe:e8:14:3e:92:c7:4b:bd:
ef:42:c8:b9:59:21:c3:b0:e0:7c:9c:65:84:63:88:
3f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:C8:BE:29:24:06:4D:BD:D0:30:8E:CA:1D:1E:6B:46:96:FC:45:02
X509v3 Authority Key Identifier:
keyid:F1:E5:7E:35:0D:3A:6D:B8:A5:80:55:92:99:F0:B9:D3:8B:CC:59:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8eV-NQ06bbilgFWSmfC504vMWVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/222df2-6225-4041-9cb0-0cd9faa5653e/1/8eV-NQ06bbilgFWSmfC504vMWVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2b:06:8c:d8:ef:a9:3a:e3:78:a1:c7:4d:b6:c1:df:e1:65:
f6:1e:60:66:e1:4f:28:63:9b:f1:0a:12:38:9e:22:b3:c6:42:
ce:fe:e2:90:22:ac:67:58:79:07:6c:45:57:e4:5a:a9:43:84:
09:e8:91:3c:4c:3c:75:df:92:7b:6a:4d:d4:b1:05:21:f9:44:
cb:fb:b3:43:6c:14:56:e4:e2:73:e9:a5:2b:92:4b:e6:26:03:
0e:2b:8d:53:97:69:ee:3d:7f:cc:88:c4:9a:35:67:94:aa:b6:
9a:83:c2:39:ad:e0:00:13:1f:52:51:ec:7d:05:7d:00:fd:57:
2b:3e:c7:87:50:2c:71:30:08:19:55:bd:0e:13:17:61:de:d4:
26:e2:b3:a1:ad:2e:e5:20:65:8f:27:17:27:e3:04:fc:b1:40:
92:60:e6:6a:b2:55:3e:f4:0c:b3:d7:16:27:13:9b:4c:71:1a:
0b:2b:e4:d7:14:c2:cd:b4:e3:61:4e:f4:e6:09:8b:0b:04:f6:
70:6a:46:dd:85:e8:6e:9c:e0:33:40:b9:66:f6:a7:05:6b:14:
db:aa:0b:38:bb:77:4a:57:09:4b:4b:48:8f:45:0b:14:db:bf:
86:e2:0d:1f:5a:bc:22:cc:f8:a2:00:41:9c:7c:d5:e7:1c:f2:
c0:de:8f:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 09:20:59 2025 by rpki-client