Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
File: rrdjIcjUae47oCOSCzcszaXeng8.mft (raw, json)
Hash identifier: UKt5PW0bmWebgmCm3UMFdfg6qhs5TU1z4kKaKk5ewTw=
Subject key identifier: 8D:2B:28:A7:0C:31:52:64:93:29:5F:A7:42:8C:F6:81:D4:E5:40:2C
Authority key identifier: AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
Certificate issuer: /CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Certificate serial: 019771BF2E3EF91AF22A09F103D13CE25D82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
Manifest number: 0735
Signing time: Sun 15 Jun 2025 04:00:43 +0000
Manifest this update: Sun 15 Jun 2025 04:00:43 +0000
Manifest next update: Mon 16 Jun 2025 04:00:43 +0000
Files and hashes: 1: a9ofITqqYa60yp597jFNJiFfkDk.roa (hash: +VNpTQzKJJZj8EZ6senrGu1+xne4/xLouiN0wCmmxbU=)
2: rrdjIcjUae47oCOSCzcszaXeng8.crl (hash: hYFN8+14qFO4xRFjQE2wNGOC/ojTKgKLLjL7uwp4FBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:2e:3e:f9:1a:f2:2a:09:f1:03:d1:3c:e2:5d:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aeb76321c8d469ee3ba023920b372ccda5de9e0f
Validity
Not Before: Jun 15 04:00:43 2025 GMT
Not After : Jun 16 04:00:43 2025 GMT
Subject: CN=8d2b28a70c31526493295fa7428cf681d4e5402c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:c4:4c:27:e9:c3:2c:50:56:3f:3d:49:9a:
f7:29:66:49:36:a7:6f:ef:c7:0d:2a:f8:2b:90:ce:
c9:2f:f3:c6:b8:77:74:c7:06:50:76:44:8e:60:12:
19:0b:2c:f1:2b:8c:3e:e4:19:13:d6:45:89:5d:94:
23:7a:59:cf:24:17:d8:06:40:b0:a0:fa:a1:9c:82:
9c:83:0d:6d:b8:7b:e1:1b:11:8f:e2:42:54:dd:de:
92:45:27:73:33:0f:5c:21:c9:6c:ba:03:37:fa:1f:
05:e9:19:06:b7:27:5c:2b:21:25:17:4c:9c:82:b1:
bf:ae:85:69:ce:39:5c:f5:d9:e7:c0:91:ef:a4:99:
42:cb:9a:0a:c3:9d:0e:3d:66:e7:9e:03:f3:d8:bf:
89:dc:fc:31:8e:ba:76:50:56:72:3f:1e:a3:9c:5e:
8a:61:9b:99:4c:49:9e:12:9d:87:c3:0f:f6:6a:02:
29:b0:2f:d2:5b:35:aa:53:60:15:01:81:fe:29:c6:
61:43:f4:6f:48:2c:d8:0b:e1:70:b3:75:4b:57:56:
70:57:8d:c5:2d:4f:ed:f3:a0:5a:8d:da:7f:8b:31:
25:75:4d:78:d3:a3:d6:f6:05:82:03:1c:17:4d:a6:
a3:92:81:26:88:9c:20:6b:64:ef:c6:7f:6e:75:e1:
66:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:2B:28:A7:0C:31:52:64:93:29:5F:A7:42:8C:F6:81:D4:E5:40:2C
X509v3 Authority Key Identifier:
keyid:AE:B7:63:21:C8:D4:69:EE:3B:A0:23:92:0B:37:2C:CD:A5:DE:9E:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rrdjIcjUae47oCOSCzcszaXeng8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/8d7e85-00c0-40e0-aa80-c7dcc2391cc9/1/rrdjIcjUae47oCOSCzcszaXeng8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8c:d5:c9:7f:d2:42:0e:02:7b:6d:0c:71:6c:6e:6b:44:eb:
52:59:ae:a5:90:3c:27:6c:fa:55:f2:00:10:7a:5e:22:4b:10:
74:cf:d6:c9:97:5b:55:19:8d:05:8f:f0:6d:1c:e5:54:9c:55:
3c:b9:66:38:dc:d6:8b:43:a2:29:40:b1:27:fa:82:1f:8d:43:
87:b3:7c:e0:ec:ed:32:22:fc:6b:9d:73:ca:a8:a0:26:4c:81:
4e:b4:8d:40:bc:c5:83:83:7d:e3:c3:e1:68:5c:2f:0e:0d:09:
94:a0:f7:e1:25:2c:58:d0:f9:49:39:2c:87:af:b1:0c:34:9c:
f0:fc:53:d1:75:bd:7f:e8:f9:9f:7b:20:9e:ac:fd:3e:02:9b:
76:e2:b9:a7:e4:7b:30:a7:76:62:75:20:85:a2:0b:a2:f7:4a:
4a:3e:1b:1f:ef:78:e2:c4:e6:bf:36:6e:2b:1d:28:4c:ca:97:
c2:27:46:fe:69:83:65:8c:53:fd:59:23:c3:05:6a:88:36:82:
d3:03:ee:bf:4c:aa:55:a6:50:1e:2c:a8:66:8d:a9:fd:7d:38:
d4:4b:66:f6:22:33:da:da:e5:23:e4:8c:76:fc:b6:3c:7e:b0:
06:7c:54:ce:08:08:b4:d8:34:9d:9f:c5:a5:7d:ab:9a:25:d4:
00:a4:50:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 12:25:50 2025 by rpki-client