Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
File: R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft (raw, json)
Hash identifier: jm71KoWyks2G6U0CFurB9+XGurZy6YgAbqose/Br+tA=
Subject key identifier: AC:75:1E:42:C3:32:E6:18:33:1D:90:17:33:E0:95:61:42:01:8A:9B
Authority key identifier: 47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
Certificate issuer: /CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Certificate serial: 019769299DDD110A480CA6200A2268FBB37B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 12:00:24 +0000
Manifest this update: Fri 13 Jun 2025 12:00:24 +0000
Manifest next update: Sat 14 Jun 2025 12:00:24 +0000
Files and hashes: 1: R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl (hash: SgWITOsPlrd/wygKc2ThEk1/xtCXUCfqXYSYavwwl5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:9d:dd:11:0a:48:0c:a6:20:0a:22:68:fb:b3:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Validity
Not Before: Jun 13 12:00:24 2025 GMT
Not After : Jun 14 12:00:24 2025 GMT
Subject: CN=ac751e42c332e618331d901733e0956142018a9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:e2:68:f2:81:0b:2b:71:7e:cb:be:ae:ee:
69:67:43:b8:b5:7d:ca:22:7f:86:3e:49:e1:12:3c:
08:0b:da:08:f9:1f:0e:af:81:44:d0:6d:59:11:85:
1e:af:0a:b2:83:a2:ad:1b:05:2f:ed:e9:58:06:d4:
d4:47:46:d3:e7:59:85:7e:68:1e:15:86:ab:11:d6:
25:41:14:38:46:3b:fd:fa:52:9a:77:f7:2e:52:0d:
a5:5d:44:49:16:61:b6:cc:df:0f:76:70:cd:1b:3e:
ab:22:8d:a5:e1:e4:bf:8e:17:4a:8f:58:0b:47:b0:
e4:11:74:ee:26:69:48:f5:11:1b:11:4b:71:03:81:
aa:88:0e:82:a1:2c:51:5a:23:2d:b6:17:84:eb:d0:
ba:be:9c:ee:bd:33:61:8b:d7:ae:fa:35:b4:5b:fa:
ff:e9:fd:16:88:c9:79:50:20:7f:19:0c:81:07:89:
c2:e5:4c:c6:b5:f0:d9:c1:72:c8:9f:63:7a:08:4e:
e4:59:be:ba:bc:d2:86:9a:e4:10:23:5d:eb:10:3f:
83:87:85:60:5c:8f:c8:cf:fa:13:0d:5e:dd:bd:a7:
b9:f0:db:ce:ed:13:12:b5:93:1f:60:05:7f:a6:60:
bf:5c:9a:c9:f2:f3:60:d8:46:e7:45:24:6e:59:1b:
7b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:75:1E:42:C3:32:E6:18:33:1D:90:17:33:E0:95:61:42:01:8A:9B
X509v3 Authority Key Identifier:
keyid:47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:51:6d:45:2a:d0:64:bb:88:a9:d2:3a:a0:2e:b0:9c:cd:4f:
c0:19:5a:bc:bd:96:cb:76:0f:9b:15:b6:aa:87:17:d3:a2:ed:
ed:af:c1:67:1d:7f:46:0d:1e:d7:8f:71:22:c8:4f:ab:be:cb:
ce:8e:68:c5:15:49:14:3a:79:ca:be:80:44:f0:09:70:f8:24:
1b:de:bf:ca:3a:fd:ad:9f:8e:b8:8d:b5:47:68:29:40:7d:c5:
ea:53:ab:f2:9d:b4:3e:4a:46:3b:74:72:7c:02:04:66:d9:d6:
00:8b:71:7e:7e:2e:00:fd:dc:de:81:e9:11:65:88:b9:f8:34:
fd:2f:05:dc:2b:95:b3:0e:30:5c:73:ab:0c:e8:a1:11:b3:86:
88:73:3b:b8:8e:ac:b3:4a:b8:d0:5e:18:5a:9b:8b:b1:37:6e:
f3:91:39:f1:6f:5c:4c:61:0e:d4:32:11:05:66:1e:9f:d1:d2:
82:98:1f:9c:32:e7:76:93:5b:65:b7:a8:3a:08:0f:96:f7:2f:
55:92:f4:05:4f:3b:d3:f5:92:1b:db:c3:9d:7d:cb:9a:8e:4c:
b6:d9:b3:ab:6c:79:a0:a3:ec:f8:de:18:56:17:2c:0b:d9:b1:
e2:27:31:86:c8:20:cb:c0:02:79:cd:26:21:01:7f:6f:75:58:
f5:0e:96:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:46 2025 by rpki-client