Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
File: C8cd8W3QtHzQr5cfFNHcptgga7E.mft (raw, json)
Hash identifier: QsPX7WXPf3cq03CFhuR6RgzpSPyT0XHXBqKtB11K0LI=
Subject key identifier: B0:D7:B9:29:77:E6:31:8D:CF:54:53:45:81:EB:1C:8D:E5:A9:8A:4D
Authority key identifier: 0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
Certificate issuer: /CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Certificate serial: 019777C133BE1E5CD514D2A6E5A8CDB507CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
Manifest number: 0A01
Signing time: Mon 16 Jun 2025 08:00:39 +0000
Manifest this update: Mon 16 Jun 2025 08:00:39 +0000
Manifest next update: Tue 17 Jun 2025 08:00:39 +0000
Files and hashes: 1: C8cd8W3QtHzQr5cfFNHcptgga7E.crl (hash: DjRnV1osLPqa/AZ5vc/7+ktn/yFzHXHLkMM+enAdcKc=)
2: xPUzYHJ2p6sBXOjKUulEgLqlcBc.roa (hash: ygZqht59F65fKs2o1JfQZNtwvL5DudVBMCJ5Le5stTY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:c1:33:be:1e:5c:d5:14:d2:a6:e5:a8:cd:b5:07:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc71df16dd0b47cd0af971f14d1dca6d8206bb1
Validity
Not Before: Jun 16 08:00:39 2025 GMT
Not After : Jun 17 08:00:39 2025 GMT
Subject: CN=b0d7b92977e6318dcf54534581eb1c8de5a98a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ef:de:a4:02:03:9a:96:8f:b8:a2:f8:7f:f6:
ec:14:0c:dd:79:20:7d:66:76:24:e2:1e:56:8e:19:
15:c0:fd:ba:78:69:8f:b1:80:ba:c4:1c:4e:9f:e5:
d3:a5:0d:c4:72:d4:bd:8b:71:95:71:76:43:1b:fe:
83:45:3e:d0:5c:c3:dd:50:2b:8d:8b:57:d1:63:3e:
7a:7b:26:75:c8:71:bb:77:27:a8:94:50:d0:2f:f6:
20:1f:18:50:62:b2:0e:b9:cc:ea:e2:6c:22:cf:8f:
37:0c:a8:1e:3d:8f:d1:e2:b3:db:15:3b:9d:31:66:
ee:82:c3:80:af:ef:75:67:ab:70:b0:74:7c:fd:01:
90:23:07:7a:fc:15:11:9f:db:b9:30:69:03:9d:24:
60:61:2e:58:20:c4:2f:31:ea:4c:8e:9e:86:4a:8d:
ec:60:e7:87:1c:d7:86:19:29:65:5b:77:6c:fd:0b:
00:88:71:19:9b:a0:8f:24:51:53:92:51:77:fd:31:
ab:2d:15:a5:d7:16:ac:9e:f9:8e:43:5c:ca:e6:c8:
8b:56:13:d0:4a:dc:24:70:ca:51:ef:9d:ae:1f:86:
b1:5b:7b:6f:58:95:97:a0:9e:28:0c:83:81:fa:1d:
4c:50:86:b7:dc:5d:cf:6c:1e:d2:ae:0c:b7:d8:b1:
cb:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D7:B9:29:77:E6:31:8D:CF:54:53:45:81:EB:1C:8D:E5:A9:8A:4D
X509v3 Authority Key Identifier:
keyid:0B:C7:1D:F1:6D:D0:B4:7C:D0:AF:97:1F:14:D1:DC:A6:D8:20:6B:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8cd8W3QtHzQr5cfFNHcptgga7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/acda5e-4d2d-4f86-a17b-5b493aa07268/1/C8cd8W3QtHzQr5cfFNHcptgga7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:63:d2:53:33:4c:8e:69:06:26:78:21:4c:dd:e3:47:c5:a7:
24:8c:50:e0:2e:10:03:68:6e:69:d4:ff:44:d0:a3:16:da:87:
80:fd:b5:ca:ba:51:04:f7:43:ac:df:54:05:02:a8:eb:5c:eb:
21:1f:13:f2:b9:78:65:bb:20:f7:a7:59:f7:7d:06:f1:52:a9:
0f:92:73:6b:50:a3:07:dc:c9:41:61:0b:de:b4:f8:43:d7:3f:
51:7a:8d:78:ac:29:db:ef:f8:95:cb:13:5d:48:53:bc:e6:49:
43:74:4b:fc:2d:f7:cb:c1:55:0c:6c:e9:ff:ef:f5:fa:cd:81:
5e:93:46:40:a9:20:b6:ae:20:ba:c1:95:03:e9:26:6a:a1:c1:
50:e0:53:95:0d:df:da:70:65:13:13:d8:0d:51:d4:46:26:a2:
b3:13:c8:fa:f5:f3:00:6d:41:f9:64:bc:45:d6:7c:4a:44:25:
88:32:a9:cf:a5:95:c2:7c:08:f1:7b:7c:bb:ed:60:00:f7:88:
29:aa:c9:35:70:40:c8:97:95:37:d7:25:dd:d6:ac:b9:47:6d:
74:f0:16:62:9c:2e:10:19:20:2e:05:a4:30:94:f0:07:35:5e:
51:fc:78:43:79:c8:b1:94:ad:7e:55:56:9a:a4:45:0a:f0:be:
99:a6:2a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 12:21:02 2025 by rpki-client