Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
File: rcipu8K8OkyLuHbM3ZX9hlJQtts.mft (raw, json)
Hash identifier: C8zrsBihhNxf1GRJN9MNVuZNLDZqubHdzkLYFs7YiQU=
Subject key identifier: B1:1C:7D:D3:81:A9:1B:3B:07:63:0D:C9:21:49:1E:A1:5B:6E:C1:8B
Authority key identifier: AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
Certificate issuer: /CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Certificate serial: 01976F629EC9CAA9582DA9103D8E16254D1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
Manifest number: 1161
Signing time: Sat 14 Jun 2025 17:00:23 +0000
Manifest this update: Sat 14 Jun 2025 17:00:23 +0000
Manifest next update: Sun 15 Jun 2025 17:00:23 +0000
Files and hashes: 1: 6nn-10KbmPgCc6evrpm-TWzQPN8.roa (hash: o4INP15AI01CmXxJKcY1+iiTvm9rSpAtz6YN4QZ0dG0=)
2: ipLrAgoe3ckvRnx1pnkVJjcwwdU.roa (hash: rQ9TfGtesxjebHDlAk08FQJ/mYhxwGmDbJSu6X6Tu58=)
3: rcipu8K8OkyLuHbM3ZX9hlJQtts.crl (hash: NhcVxcA70bVqjuUHpHtz6Relk/rXBEQbL001XAsYu1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:9e:c9:ca:a9:58:2d:a9:10:3d:8e:16:25:4d:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adc8a9bbc2bc3a4c8bb876ccdd95fd865250b6db
Validity
Not Before: Jun 14 17:00:23 2025 GMT
Not After : Jun 15 17:00:23 2025 GMT
Subject: CN=b11c7dd381a91b3b07630dc921491ea15b6ec18b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:51:1d:04:cb:ce:38:9d:0f:22:10:64:64:55:
5f:5b:88:37:b3:4a:d7:c7:34:74:cd:e6:ff:71:d1:
36:25:6f:db:36:89:80:8c:b6:04:7d:0e:79:f6:7a:
5b:76:41:ee:06:95:87:7c:e9:81:bb:c2:a7:6d:d5:
74:54:ae:95:00:b7:ec:c7:d5:b6:fe:c0:3d:49:62:
f4:dc:64:7f:4d:80:e6:7e:75:82:c1:c3:5d:4a:66:
d1:ff:69:da:78:75:d0:f9:23:ab:b7:ff:b3:cd:07:
db:95:be:42:fc:33:43:df:e0:7b:8f:d2:e4:a9:b1:
78:18:64:8c:1e:df:2e:04:4e:eb:ac:fa:27:a3:3f:
8a:47:2a:87:4b:b1:f9:85:d3:4f:ce:43:ee:d9:43:
34:34:44:76:a5:fc:63:69:d3:45:42:04:7c:a1:43:
15:1a:ae:7d:4f:4e:15:73:2b:44:4e:22:a5:13:7f:
61:71:18:56:69:3e:cd:4c:db:68:8f:df:b5:b4:59:
d1:f4:51:40:7d:fc:35:e0:34:c0:e0:dc:0b:00:82:
87:d1:c0:2c:ce:18:93:78:50:5a:d2:0a:d4:84:35:
cb:63:4e:a8:8d:b5:d4:42:51:c8:4c:4b:cd:f1:fe:
5d:ef:fe:3c:50:6b:19:68:6e:af:05:52:23:00:fd:
58:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:1C:7D:D3:81:A9:1B:3B:07:63:0D:C9:21:49:1E:A1:5B:6E:C1:8B
X509v3 Authority Key Identifier:
keyid:AD:C8:A9:BB:C2:BC:3A:4C:8B:B8:76:CC:DD:95:FD:86:52:50:B6:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcipu8K8OkyLuHbM3ZX9hlJQtts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/86772e-5e6b-406c-8a9e-1654a80dbc36/1/rcipu8K8OkyLuHbM3ZX9hlJQtts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:81:cf:d6:ff:b8:fb:2d:ec:9a:76:35:ef:5b:08:a9:e1:8d:
21:03:64:1e:18:e1:e8:3e:f4:2a:39:03:7b:60:c1:f3:57:e6:
d2:ca:62:cc:5f:83:ed:58:cb:2e:bf:d3:27:cb:d1:31:87:3e:
bd:1a:8b:94:3c:9c:b1:93:82:23:b9:f5:ee:07:c8:1b:c8:65:
fb:99:38:16:7e:84:21:49:ed:5e:a3:fe:c9:1a:26:b7:24:7a:
f0:69:de:d7:c8:fd:fb:ee:04:05:44:c2:87:4f:bb:7d:a0:8e:
59:5c:ad:90:54:be:b2:41:1f:73:e5:be:50:36:e9:ae:d4:80:
52:e5:ec:df:84:ec:41:87:a2:fc:b9:b1:d0:95:7e:be:33:7a:
5e:f5:ed:d9:b7:c8:2b:1f:bc:72:e4:c5:83:bf:4b:74:92:96:
68:ba:b8:78:0e:87:92:a0:05:4f:4c:11:27:07:28:1b:a4:e6:
c5:e4:4e:7e:5f:9d:b1:e2:84:f1:59:55:ac:b0:6f:64:ef:85:
c3:e7:54:1c:e8:b8:e9:d1:ca:af:7c:24:88:ae:18:1c:8c:8e:
35:5a:e2:eb:d7:3f:28:5c:6f:58:8d:52:1e:28:93:fc:60:0e:
cb:8b:22:5e:2b:ab:8b:83:bf:6f:c0:28:9d:13:21:5b:05:1d:
ec:ec:1d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 21:51:08 2025 by rpki-client