Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
File: kS8Wn8dEy-iVqfhe2reW1KxwACk.mft (raw, json)
Hash identifier: PFKff1C7q0VW/9SIb/WqjdsoaCyMAmBG4ObfjKyLzF8=
Subject key identifier: 45:B3:A5:4F:56:C4:C9:F1:E5:23:A4:B9:43:AD:41:FF:C1:88:79:5B
Authority key identifier: 91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
Certificate issuer: /CN=912f169fc744cbe895a9f85edab796d4ac700029
Certificate serial: 01978168EC7108DFE2EBF5A1BB8E31A79045
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
Manifest number: 0DA8
Signing time: Wed 18 Jun 2025 05:00:26 +0000
Manifest this update: Wed 18 Jun 2025 05:00:26 +0000
Manifest next update: Thu 19 Jun 2025 05:00:26 +0000
Files and hashes: 1: TYH4Ce0-k-wvqgRH0i5li3BgriI.roa (hash: Q3Et9vzkH2i83UUu897K4DdPhoe5uvwQSHH8BVd+9Y4=)
2: kS8Wn8dEy-iVqfhe2reW1KxwACk.crl (hash: DUOKvh/wCUAEei0icZY59BZilDgSTXIysthdQqnqWFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:81:68:ec:71:08:df:e2:eb:f5:a1:bb:8e:31:a7:90:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=912f169fc744cbe895a9f85edab796d4ac700029
Validity
Not Before: Jun 18 05:00:26 2025 GMT
Not After : Jun 19 05:00:26 2025 GMT
Subject: CN=45b3a54f56c4c9f1e523a4b943ad41ffc188795b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:de:af:23:fc:a6:b4:87:1d:f4:2d:1e:2a:cd:
3e:72:1d:b2:9a:90:15:66:3f:36:90:f5:25:ec:6d:
59:05:ff:34:2f:a0:ef:0a:b9:67:58:50:ed:a1:2c:
b5:06:9a:1e:ad:d1:59:f2:73:c4:e7:c6:2a:d2:5e:
ff:e5:6f:83:bc:f8:eb:a1:be:56:44:03:53:6e:5e:
35:b4:90:fe:5f:e6:63:3b:1a:77:c6:91:ca:3b:da:
9d:43:cc:b5:41:e1:64:e3:d0:ba:06:b4:17:1a:bc:
6a:b3:85:3b:c4:cb:ad:30:f6:1d:23:5e:14:51:1d:
26:e2:53:9d:0a:0d:3e:4b:d8:a3:d3:ef:70:d1:34:
7a:da:f3:4a:f2:8d:ff:8f:be:f6:ee:fc:03:79:2f:
30:a4:37:58:72:be:27:74:17:69:57:1e:0f:49:97:
42:a9:f0:10:22:69:1a:8f:76:42:40:8c:76:94:60:
04:a3:b0:54:2e:96:50:e7:63:c6:94:d2:9d:fb:94:
ef:53:3a:bf:de:ad:1e:2a:7d:12:33:ba:52:a6:a7:
66:cf:96:12:08:3c:d1:c1:36:7c:ad:91:e2:aa:42:
6d:af:c6:d2:8a:5e:6b:8e:53:36:7a:41:a4:ec:d7:
45:f0:2c:70:c4:5e:be:ae:78:88:99:d5:d5:41:5d:
0e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B3:A5:4F:56:C4:C9:F1:E5:23:A4:B9:43:AD:41:FF:C1:88:79:5B
X509v3 Authority Key Identifier:
keyid:91:2F:16:9F:C7:44:CB:E8:95:A9:F8:5E:DA:B7:96:D4:AC:70:00:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kS8Wn8dEy-iVqfhe2reW1KxwACk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9d54cb-7ceb-458f-bd77-b2283c9a536f/1/kS8Wn8dEy-iVqfhe2reW1KxwACk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:97:c2:4e:96:6d:df:5d:d2:e4:62:ba:0f:2d:15:dc:29:be:
ba:39:ef:96:a4:dd:0c:46:9c:b0:bc:a2:74:f9:63:70:87:04:
a2:a0:4a:c3:95:02:82:b4:fe:38:15:f2:a6:12:42:b2:b4:30:
9f:a3:99:41:be:d8:bd:6c:f2:18:36:06:e7:e8:75:db:25:1e:
46:f4:5e:7f:63:ea:c7:d6:2c:98:45:5b:a3:46:88:19:41:9b:
9e:a8:2d:09:da:d9:32:12:2a:00:42:3a:02:6d:bd:c0:f7:ac:
4a:d8:2d:a2:5a:ff:4b:88:08:b4:32:51:e9:f3:43:8a:97:d1:
d9:4b:bd:9c:59:c3:99:bc:95:db:2f:d6:9a:74:88:5b:66:a5:
b0:30:e7:44:67:73:aa:57:d6:6c:fa:7e:6d:21:ff:7f:7a:b4:
b7:e7:e8:a2:37:46:27:b7:49:d1:6e:21:8f:e9:8b:95:6b:16:
14:df:25:bd:a1:61:f7:d8:a2:48:46:94:13:67:e7:c1:3c:e2:
58:2f:78:0f:ad:36:1b:b0:4a:33:4e:ad:53:9b:4d:75:5e:08:
fe:6a:86:e8:bc:29:d6:d5:9d:53:67:24:a0:7d:76:09:53:2b:
fb:2d:f8:d2:59:5e:6a:7f:bf:b2:09:e0:ed:7b:db:b4:9a:30:
a8:02:f6:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 18 09:16:57 2025 by rpki-client