Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
File: R8CqLp6CAO7mcCaUKixSSIAvM7g.mft (raw, json)
Hash identifier: 62jbTozXZmUULYRE8WHHpN+MXjOKV5Kg+RgCKaCZrwM=
Subject key identifier: CB:78:E7:F1:2A:32:9D:B1:42:ED:29:59:A5:1C:6B:09:23:12:BA:69
Authority key identifier: 47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
Certificate issuer: /CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Certificate serial: 01976C98F9C3E4BAC833A085D660CC1FF4F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
Manifest number: 1383
Signing time: Sat 14 Jun 2025 04:00:54 +0000
Manifest this update: Sat 14 Jun 2025 04:00:54 +0000
Manifest next update: Sun 15 Jun 2025 04:00:54 +0000
Files and hashes: 1: R8CqLp6CAO7mcCaUKixSSIAvM7g.crl (hash: mHVf1z8rS/O9b+cKT953I5DT9s4x76AZl+CkHCPKAAk=)
2: qkYxxaIiN3jcZulu8UiMqofxjLE.roa (hash: cRshqAIAXgfUlz/OBpedkq/8h7RRrBNX/FMXdEVJZFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:f9:c3:e4:ba:c8:33:a0:85:d6:60:cc:1f:f4:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c0aa2e9e8200eee67026942a2c5248802f33b8
Validity
Not Before: Jun 14 04:00:54 2025 GMT
Not After : Jun 15 04:00:54 2025 GMT
Subject: CN=cb78e7f12a329db142ed2959a51c6b092312ba69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:02:73:f0:40:ba:5d:60:d3:f7:b8:6e:c5:da:
79:d2:56:d3:b3:3c:d4:29:b3:61:a1:b8:82:91:06:
3f:b0:60:a8:5a:4a:c9:a7:0d:05:f0:f6:0f:fc:8a:
6f:8a:b6:80:a6:bb:34:4e:99:1b:45:d2:f8:7c:85:
b4:63:0a:d2:52:2a:c2:ee:83:2a:c5:b9:b6:f6:91:
64:dc:17:77:57:7f:25:74:aa:be:ad:b9:86:de:ae:
74:bf:49:e7:d7:68:fa:ca:8c:07:72:4d:8d:95:4f:
39:c9:d1:e9:92:09:42:d2:e5:46:4b:ee:b9:ac:32:
ba:0f:52:34:7c:44:04:11:a3:d2:dd:df:82:ea:29:
f2:01:32:0e:63:52:29:d5:1d:2e:21:0b:04:0c:ec:
8d:7c:8c:01:c1:99:83:71:59:40:10:f2:14:ff:41:
ef:8a:a8:64:4a:b6:84:4d:d9:7a:23:fa:b2:4e:7f:
9a:c4:14:9b:6f:cc:c5:1c:2d:be:b4:a3:24:0a:bd:
8e:81:83:75:8a:27:4b:81:bc:25:d7:cf:86:78:b9:
fc:61:9b:b9:c4:c3:bf:9b:08:8a:ea:c0:41:14:9c:
c9:bc:e7:06:92:78:f6:6c:c7:c6:f6:71:1c:39:4c:
94:17:75:d9:11:eb:85:3d:d9:b2:41:40:19:75:73:
c9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:78:E7:F1:2A:32:9D:B1:42:ED:29:59:A5:1C:6B:09:23:12:BA:69
X509v3 Authority Key Identifier:
keyid:47:C0:AA:2E:9E:82:00:EE:E6:70:26:94:2A:2C:52:48:80:2F:33:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8CqLp6CAO7mcCaUKixSSIAvM7g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/846ae2-7ddf-4332-a363-c692782064b0/1/R8CqLp6CAO7mcCaUKixSSIAvM7g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:2d:8b:32:3b:4d:98:1e:20:9f:c3:74:9e:e5:7a:b9:96:31:
ff:39:f7:99:10:d4:99:c5:33:dd:29:9a:35:d6:d6:a2:a3:6a:
b1:33:0c:f5:9f:df:54:51:2b:20:05:2b:e7:f0:6a:2c:38:f5:
bd:86:79:84:0c:8a:f0:ae:f2:ce:f3:37:f7:92:93:d7:03:55:
95:6c:b3:bf:e2:ab:7b:75:aa:b7:a3:51:01:69:78:9c:bf:fb:
e6:30:81:dc:46:54:c0:5c:11:59:db:52:61:d8:01:dc:39:69:
32:1f:89:15:3d:5f:46:4b:35:67:da:ac:c5:13:5c:80:2b:12:
bd:22:67:18:40:6d:e7:59:79:e2:59:f3:b4:de:f4:8e:1d:63:
f7:e7:96:68:a9:a1:3b:4f:53:14:0b:a6:a0:c6:1f:a7:e1:25:
bf:3d:39:48:0b:5e:15:b0:ae:b4:9a:b6:50:2e:b2:e9:a4:5f:
56:3f:d2:7a:67:97:a7:63:41:eb:c5:d0:93:02:c0:57:53:df:
fe:3a:cc:2d:d8:b3:75:5c:53:80:a0:db:21:de:23:22:8c:65:
ed:08:c1:10:6c:05:bd:3f:6e:c1:f7:f2:f9:3e:aa:de:76:8f:
f8:a4:d9:7e:f1:6b:b8:d3:0c:99:24:75:77:3e:0c:50:d8:6d:
92:45:a4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 11:13:38 2025 by rpki-client