Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: 9T/qFw5n59X3OyMP0wWGEXIDowurQEKoIWyhcuR3Zew=
Subject key identifier: 52:9B:A6:48:29:1F:DF:A2:E7:D1:5C:F8:72:F7:40:99:69:8E:E1:95
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 0197868F084CB5EE5D4A5DC6904F5815125A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 159D
Signing time: Thu 19 Jun 2025 05:00:10 +0000
Manifest this update: Thu 19 Jun 2025 05:00:10 +0000
Manifest next update: Fri 20 Jun 2025 05:00:10 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: ViUbzHvjIo+wOLNii9RRhoe5BZR3CepIYBDU8e/R+l0=)
2: gNeiVk2m8BNFP8OBLSZLGLMl51E.roa (hash: Pvly8BuBxC0TCqmwqCY2YQ1zQ+UXFXDzJobqg59BS7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 05:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:8f:08:4c:b5:ee:5d:4a:5d:c6:90:4f:58:15:12:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Jun 19 05:00:10 2025 GMT
Not After : Jun 20 05:00:10 2025 GMT
Subject: CN=529ba648291fdfa2e7d15cf872f74099698ee195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:33:cf:c7:8f:34:dd:5b:21:9a:e9:9d:a8:7a:
96:7b:93:2c:cc:f0:3d:ae:72:c6:30:8f:ad:cf:c4:
83:d1:b9:8d:5e:c3:84:ea:4b:5a:3c:3e:58:e3:91:
06:c6:33:37:64:3b:5b:42:44:00:99:c2:19:97:12:
16:64:c1:41:f6:0b:00:7f:3d:af:d9:92:a0:16:57:
ce:ff:15:16:59:dd:fd:e3:7d:c0:87:c3:12:02:9f:
e8:34:63:22:0d:c6:b4:7d:f6:5b:d9:3a:90:5f:bf:
b3:b0:e7:f7:5c:4e:77:c9:b7:3e:7e:42:2b:5f:d5:
ee:1b:91:af:a6:25:40:9b:bf:34:e7:bc:83:38:05:
27:66:1a:83:7b:49:8b:42:60:13:3c:40:cf:fd:9f:
15:9e:01:c2:6a:7b:df:12:cd:90:23:7a:66:cb:96:
b2:27:c2:56:3b:4d:53:49:c3:f4:c5:81:ce:f7:ca:
83:f6:42:58:5f:8c:6d:d1:2d:24:fb:d9:e6:bb:d9:
e2:5d:aa:00:73:4f:4b:1c:ac:4c:86:b2:96:b2:d7:
ec:56:a7:a8:6a:0d:96:b7:1a:0a:c0:ed:fc:4c:37:
61:d4:45:88:37:6b:fc:52:05:99:20:26:86:96:0e:
72:9f:00:64:52:e5:8b:e1:62:9f:50:1d:81:1e:61:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:9B:A6:48:29:1F:DF:A2:E7:D1:5C:F8:72:F7:40:99:69:8E:E1:95
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:33:9c:4e:64:c5:8d:39:1d:a9:f4:32:43:a6:7e:b9:6d:d5:
e5:53:4e:b0:54:2f:ec:91:eb:e1:10:2d:c2:e3:dc:b9:5b:b9:
4a:56:40:e1:08:db:d0:f6:a5:52:63:c2:08:e9:49:e5:61:00:
9a:41:3d:ea:c0:e8:01:9d:8d:9b:58:11:fa:49:31:bb:8f:a6:
1d:45:80:3d:d6:b1:44:2c:65:84:3f:37:53:fd:b1:08:ba:dc:
92:08:4b:12:b2:f9:b0:6d:6a:ca:33:64:67:19:90:ce:28:48:
e4:12:3b:0d:83:fb:df:b3:91:32:1a:e6:d1:33:a1:0a:54:7e:
4d:75:4e:e5:25:fe:6a:53:1b:88:0a:cc:64:2f:83:3d:96:0a:
b2:cf:30:b9:f2:f8:a7:7c:cd:c4:17:5a:62:51:14:83:d0:d4:
4e:a5:ff:8b:fd:6f:8b:d0:6f:a8:d7:64:a7:ef:0c:f3:22:d7:
68:d4:5c:ed:92:2d:4c:9c:65:e8:35:b2:1d:97:5b:e4:23:e5:
17:3a:a7:89:d4:13:02:e3:96:a8:c6:0d:fe:c6:ca:24:60:73:
3c:93:17:f0:60:6a:35:06:9c:a0:d9:68:2b:c6:0e:d4:05:bb:
cd:80:34:1e:e0:77:60:ae:69:96:3e:af:ac:15:72:25:07:13:
b0:59:f4:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 19 12:31:50 2025 by rpki-client