Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
File: x8H9uvmsDlre7GCgkjxN1KAektw.mft (raw, json)
Hash identifier: c9sBm7yy70rpVf0Ffa/F9ilEQb+yo6zEa2jU2zNAbKQ=
Subject key identifier: BA:9B:C8:B6:21:AC:61:56:BD:EF:FA:5F:E6:AC:75:04:CE:03:4C:AB
Authority key identifier: C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
Certificate issuer: /CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Certificate serial: 019780C4464575F197E92891B74A3232A3E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
Manifest number: 159C
Signing time: Wed 18 Jun 2025 02:00:35 +0000
Manifest this update: Wed 18 Jun 2025 02:00:35 +0000
Manifest next update: Thu 19 Jun 2025 02:00:35 +0000
Files and hashes: 1: KuITA8F2JpisQKF630WYOsFc4wk.roa (hash: bB2rOvgz8hjIMe852Fv1qtbwAzNh+J9BjKdpPYjEPmg=)
2: x8H9uvmsDlre7GCgkjxN1KAektw.crl (hash: olhR4sH9CRbCJYgDCit4qh7wWKTMJaX3SZ8Ms9amKd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:c4:46:45:75:f1:97:e9:28:91:b7:4a:32:32:a3:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7c1fdbaf9ac0e5adeec60a0923c4dd4a01e92dc
Validity
Not Before: Jun 18 02:00:35 2025 GMT
Not After : Jun 19 02:00:35 2025 GMT
Subject: CN=ba9bc8b621ac6156bdeffa5fe6ac7504ce034cab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:87:fb:5b:81:6e:19:24:2a:92:27:81:0d:4c:
11:74:40:db:6c:5d:19:be:b9:7a:23:b9:dc:c4:39:
71:d7:93:79:a8:65:8d:92:79:69:99:35:83:e6:66:
b7:bf:89:f9:c2:f4:9b:f6:62:a5:74:3d:ad:65:88:
1f:e2:33:74:4d:79:e7:13:ba:8e:de:15:2c:70:db:
97:6e:3d:fc:c0:8e:e4:76:6e:9d:4e:e1:40:3b:f6:
ee:87:04:7a:3f:83:54:cf:bb:d4:63:92:ae:c2:39:
a8:fb:03:ea:ba:b0:8a:33:b5:cf:ec:87:3c:5d:93:
98:df:c0:97:47:b3:f1:6e:53:fe:e9:d5:97:17:59:
b3:0d:66:d8:b1:bf:42:01:ab:c3:7f:91:6a:04:f6:
1e:5f:b9:0a:6c:d3:a2:d9:29:a3:08:60:94:13:8f:
b1:c7:d0:24:f7:39:ba:4b:dc:53:9b:e6:cb:b0:f4:
58:ce:42:5b:2c:da:4f:60:67:be:7b:73:ea:8d:00:
63:88:9d:57:8f:7c:b1:5c:e8:6c:01:cb:7c:0b:8f:
9f:4d:4f:56:de:0d:50:d9:99:71:14:5f:51:6d:1c:
80:7a:84:b0:cd:c2:07:70:b2:50:26:c0:91:09:e1:
42:b7:7e:64:97:50:e1:54:65:09:e2:60:5d:96:a9:
7d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9B:C8:B6:21:AC:61:56:BD:EF:FA:5F:E6:AC:75:04:CE:03:4C:AB
X509v3 Authority Key Identifier:
keyid:C7:C1:FD:BA:F9:AC:0E:5A:DE:EC:60:A0:92:3C:4D:D4:A0:1E:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x8H9uvmsDlre7GCgkjxN1KAektw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/6a272b-8b6f-4fe3-8f29-f0029816097e/1/x8H9uvmsDlre7GCgkjxN1KAektw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:a4:96:ba:8b:05:9e:1e:3f:58:8a:4c:37:3a:21:78:e6:8e:
bd:06:04:18:e5:0a:d8:5c:2c:97:81:ad:af:bd:d0:19:7e:cf:
60:64:c5:1a:61:76:83:0f:cd:14:40:85:ec:4f:ac:bc:b1:34:
8e:f9:e0:69:70:af:d9:f4:79:1d:d7:26:f8:09:05:8a:4d:18:
70:24:7d:78:e2:e3:7b:d9:99:f7:59:0f:32:87:79:de:f1:c4:
e4:53:8f:3b:70:02:20:e8:0f:47:a5:c1:54:f7:13:c5:7b:b1:
f0:78:b7:66:a8:13:41:65:da:04:c2:77:24:9c:4f:03:58:10:
17:6c:44:a0:ac:55:99:29:6b:6a:68:8f:75:35:cf:61:70:6c:
86:ec:d6:46:45:c0:65:fe:aa:dc:67:4d:bb:8b:d3:2c:9e:a2:
14:9f:55:56:f7:c3:08:5b:bf:9c:6d:f9:36:fa:ec:ee:21:40:
1b:bd:25:f6:04:1b:2d:96:ba:f1:8e:63:78:47:aa:98:d2:55:
59:c7:3a:a3:ee:45:83:57:63:34:97:88:d9:fd:79:a3:51:26:
8f:00:1b:7a:30:17:d8:4e:48:ff:bd:27:bd:94:f4:d5:0d:b0:
1c:f3:2f:97:be:c0:d2:bf:d3:46:08:8d:b8:f9:02:17:fd:f5:
47:92:e6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 10:08:44 2025 by rpki-client