Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
File: A8bOoqgCIDYSMbavu8jIzapP1Rc.mft (raw, json)
Hash identifier: fRsf3QS5ISJ4g9Bf9c2weL7AzeVtJq+6YQDBw6MoR6I=
Subject key identifier: 70:12:47:76:E7:83:82:F5:8B:A3:90:CD:99:66:0B:03:02:D9:9F:8B
Authority key identifier: 03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
Certificate issuer: /CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Certificate serial: 01976DAB9E88E9B406E6B692F0A81F4B26CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
Manifest number: 1017
Signing time: Sat 14 Jun 2025 09:00:53 +0000
Manifest this update: Sat 14 Jun 2025 09:00:53 +0000
Manifest next update: Sun 15 Jun 2025 09:00:53 +0000
Files and hashes: 1: A8bOoqgCIDYSMbavu8jIzapP1Rc.crl (hash: xIlsL/KujMpEgDYnqjs+MXOkJQAd0DXfEXEzlw0g1NM=)
2: cp23u9vhlMaqrHKUYwtPPiioz4s.roa (hash: vMJOgdz9BvyEVCpUUDvmbRYIMf8G3KzzC7uWtP3ziOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:9e:88:e9:b4:06:e6:b6:92:f0:a8:1f:4b:26:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03c6cea2a80220361231b6afbbc8c8cdaa4fd517
Validity
Not Before: Jun 14 09:00:53 2025 GMT
Not After : Jun 15 09:00:53 2025 GMT
Subject: CN=70124776e78382f58ba390cd99660b0302d99f8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2f:9d:02:48:4f:9f:06:e3:91:d6:9a:4e:d3:
a1:6b:94:87:68:e2:4f:7c:9b:bb:31:5d:f1:96:9d:
38:41:5e:be:5d:3a:0b:3d:25:8d:09:b1:b1:80:0b:
da:d7:2c:7e:d0:38:18:9c:74:35:c0:23:92:4a:e5:
8a:dc:a2:3b:96:82:9e:5f:73:d7:6c:48:82:ae:e8:
0c:ee:2c:00:b3:74:60:34:e0:5a:89:2b:8a:af:52:
50:a7:41:af:dd:12:28:30:91:52:3a:ae:fd:8f:f7:
e3:eb:05:c8:52:bf:bb:c8:21:27:f1:dc:35:02:85:
31:e7:e8:e1:2d:ec:bc:24:4b:11:b5:6f:13:7e:78:
50:89:2c:8e:72:c2:96:0d:72:db:ad:fc:92:8e:67:
23:a9:f3:f3:db:d6:13:25:22:ba:38:fb:e3:35:80:
96:21:ba:04:97:aa:00:df:bb:2f:b0:2e:f0:4c:90:
bf:0e:bb:cb:00:52:5c:b1:11:25:72:ef:31:2a:7c:
25:d4:3a:e1:59:55:14:69:3b:d0:5e:a3:b0:e4:d3:
38:1c:dd:76:ad:78:b7:cb:d8:64:28:9b:49:3f:97:
90:17:b5:93:5a:62:eb:67:34:78:50:99:d4:d5:a1:
fb:40:e9:91:0f:ac:48:66:27:d8:b9:71:54:9d:72:
bd:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:12:47:76:E7:83:82:F5:8B:A3:90:CD:99:66:0B:03:02:D9:9F:8B
X509v3 Authority Key Identifier:
keyid:03:C6:CE:A2:A8:02:20:36:12:31:B6:AF:BB:C8:C8:CD:AA:4F:D5:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A8bOoqgCIDYSMbavu8jIzapP1Rc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/393911-49a2-4a76-be14-f46d6ab3d326/1/A8bOoqgCIDYSMbavu8jIzapP1Rc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:5c:f5:d7:3b:7d:a6:fc:87:a8:44:7a:5f:c3:35:09:b5:b4:
6e:47:60:67:ef:bb:56:90:f0:d1:f4:38:9a:55:d9:8d:13:c5:
ae:3b:a4:7a:59:32:96:1c:3e:f5:a3:14:26:49:80:2c:9f:45:
9c:57:87:30:9d:19:70:b5:6c:9a:42:33:17:6c:5c:30:a7:a3:
b8:31:9f:95:c6:ef:ff:f1:12:c3:37:73:fe:02:c1:fa:44:e1:
21:3c:eb:52:e0:6f:1d:66:da:05:75:1b:f6:d7:21:2f:60:3a:
a2:5d:ff:ea:8b:71:4e:76:44:c2:7b:f5:c3:64:aa:1e:58:24:
b8:25:e9:f8:c9:a4:6c:6b:b8:3a:17:c9:ae:c8:46:30:ba:63:
5d:b6:78:af:2d:a4:d0:44:74:5b:fb:7c:a5:a1:1b:8e:fc:38:
1f:84:64:35:9b:c9:35:5c:64:07:9c:d5:a5:16:e9:08:ef:6d:
73:22:66:70:b1:b2:2e:85:d4:d5:b3:b0:26:f5:70:bb:c9:69:
18:6f:5c:ee:1e:3d:8c:4a:2c:9f:ae:f8:2e:e9:90:8c:56:57:
aa:df:18:89:bf:af:49:4d:b6:fa:75:f6:d6:d5:3b:b9:22:30:
00:25:c9:99:f2:a8:96:44:6d:ae:14:48:ba:a8:8b:f2:c8:76:
af:60:4c:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 13:20:12 2025 by rpki-client