Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
File: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft (raw, json)
Hash identifier: wy53K04oXc3u/okJ3MNaHf4TXwtWelN2i8h5iLVv6Gs=
Subject key identifier: DD:8E:49:7F:8F:34:7B:7F:41:3D:5F:80:D4:71:5F:F5:8A:CB:A6:F9
Authority key identifier: F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
Certificate issuer: /CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Certificate serial: 01978AA3D6A012E9DBF7A03D95301BBABAFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
Manifest number: 0D0C
Signing time: Fri 20 Jun 2025 00:01:22 +0000
Manifest this update: Fri 20 Jun 2025 00:01:22 +0000
Manifest next update: Sat 21 Jun 2025 00:01:22 +0000
Files and hashes: 1: 8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl (hash: o3YMk85ib4IBDEwGGwZ+71F0q2qPjA2iZWcpk2lJQ+I=)
2: YkEpFHQglRkkx7TW2iOd8M7ku-c.roa (hash: kIeQhyyEYB0FfxtFkPtqVvMk30nvPQUJg2CwKA7jeLY=)
3: uq0Ty9FTaErs0rzB7yOaaIcCy9E.roa (hash: cH522XBAhZQR4is+g9SDDOs+Uj5P/+RJANdH54+jdMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 19:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:8a:a3:d6:a0:12:e9:db:f7:a0:3d:95:30:1b:ba:ba:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2693085b5f75c0f10de08e22cbe4b062451b150
Validity
Not Before: Jun 20 00:01:22 2025 GMT
Not After : Jun 21 00:01:22 2025 GMT
Subject: CN=dd8e497f8f347b7f413d5f80d4715ff58acba6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:fc:d7:35:05:de:46:85:0b:3e:51:49:31:
59:88:4c:8c:12:e2:a2:9c:a7:31:ca:47:3b:32:3a:
8d:ec:e9:cf:fa:57:d6:33:22:93:00:6f:50:00:e1:
5b:a4:68:3d:ea:f8:36:a1:c0:37:15:1e:b7:12:6a:
a7:05:47:7f:c5:b4:94:68:2f:e2:13:ab:16:78:8b:
a5:37:2b:ea:fd:ee:51:0f:42:ee:cf:bd:69:51:f0:
b3:08:19:1e:6e:58:a8:ee:c7:02:4f:1d:82:2d:b5:
5f:e5:de:72:67:f2:85:d6:ef:e7:82:ed:30:52:54:
86:c7:18:4e:4f:6f:a5:6a:5e:73:4a:06:0a:38:90:
c4:e6:e5:3d:cf:20:18:b8:da:7b:b3:25:d6:98:e0:
fc:99:db:e4:c6:1f:3f:10:a1:23:b7:11:50:ba:6f:
63:7a:fc:23:6c:3f:8a:f4:45:6b:e7:99:5a:7d:42:
98:b5:dd:31:6a:25:3e:b0:de:2b:31:b9:a5:57:18:
09:95:11:68:c9:76:35:29:ca:1a:bc:22:5f:a3:1d:
eb:97:47:aa:9a:96:5f:b7:1b:df:be:e0:0e:f7:df:
9e:2a:e3:d8:5e:48:96:0c:3b:35:d7:23:59:75:be:
75:f7:e0:43:1b:5c:a0:af:a2:4b:51:97:c4:7a:db:
3d:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:8E:49:7F:8F:34:7B:7F:41:3D:5F:80:D4:71:5F:F5:8A:CB:A6:F9
X509v3 Authority Key Identifier:
keyid:F2:69:30:85:B5:F7:5C:0F:10:DE:08:E2:2C:BE:4B:06:24:51:B1:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/173327-9742-435b-86c0-55e85ea09dde/1/8mkwhbX3XA8Q3gjiLL5LBiRRsVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:83:9a:5f:20:7a:ba:52:4c:1f:94:1f:be:5a:b0:ba:42:59:
ad:8c:3f:3a:5e:cc:ef:d3:4d:8e:30:6b:82:c5:b5:6c:73:4f:
5a:4a:c5:2b:2d:10:7d:41:c8:5e:f1:7f:da:1a:03:a2:87:84:
5d:f5:7e:43:05:22:29:70:50:3d:6f:4d:e2:68:79:87:09:a0:
7b:13:1b:4e:2b:21:60:c7:45:2f:34:ae:c6:b8:6e:50:68:94:
61:9c:1f:cf:03:e6:90:83:ef:62:e9:f1:30:7f:4a:fa:4b:51:
fa:cb:af:13:27:78:41:32:c1:e5:ed:69:2d:d0:a5:be:3b:d5:
32:33:b8:91:7b:99:c6:1b:ae:7e:ab:ba:94:47:66:4c:2c:33:
6c:81:bb:8d:50:99:ad:4c:23:47:28:5e:2e:96:9d:24:98:35:
f1:8f:2f:f4:eb:04:11:40:a9:90:62:f4:d2:fa:21:6e:8a:01:
70:e8:38:57:52:91:6e:d9:7f:a9:ae:10:3a:84:2d:86:53:60:
a0:d1:e1:ac:a0:f9:7b:c5:f0:25:08:13:5c:81:27:ab:44:a1:
17:b8:18:f0:29:8b:85:d2:09:fd:a5:ba:04:f2:b5:c2:67:79:
84:23:b6:17:08:b8:85:ca:6d:d1:ae:c0:2a:d4:1e:35:7e:b4:
2e:e2:27:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 20 05:27:25 2025 by rpki-client