Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
File: rcpuVKzQJs76NitCJ7iQgcClAEk.mft (raw, json)
Hash identifier: dsB2NikL2zOYrYNZRgOdES4gEZ3blu38KidkZxBomIc=
Subject key identifier: 90:0E:B7:3D:6F:AA:F4:17:85:E3:8C:DF:30:BE:EA:FE:96:4F:E3:6C
Authority key identifier: AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
Certificate issuer: /CN=adca6e54acd026cefa362b4227b89081c0a50049
Certificate serial: 01977865FAB12063B74FCEA9F25A30B8B970
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
Manifest number: 02F3
Signing time: Mon 16 Jun 2025 11:00:38 +0000
Manifest this update: Mon 16 Jun 2025 11:00:38 +0000
Manifest next update: Tue 17 Jun 2025 11:00:38 +0000
Files and hashes: 1: nH-mLa1nqtF7NuWi_AxaaJ7rrpE.roa (hash: k+SK+iFUjD8k3G8uFqdLPMVQgq2VY/v5iPwBM07SwqU=)
2: rcpuVKzQJs76NitCJ7iQgcClAEk.crl (hash: aTWLW5Ce9C0Iazac3r7GhXDB0gxkupVFthPwYadSun8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 11:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:65:fa:b1:20:63:b7:4f:ce:a9:f2:5a:30:b8:b9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adca6e54acd026cefa362b4227b89081c0a50049
Validity
Not Before: Jun 16 11:00:38 2025 GMT
Not After : Jun 17 11:00:38 2025 GMT
Subject: CN=900eb73d6faaf41785e38cdf30beeafe964fe36c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:34:cf:d0:7d:62:b2:32:63:48:c3:a9:2a:a4:
e0:ec:f4:90:f4:3b:dc:e2:93:44:dd:cf:83:5d:4f:
33:f7:8a:2e:06:85:e1:8b:30:ad:91:33:39:d2:63:
52:95:82:80:3f:e8:18:0c:73:01:0e:e9:3f:52:db:
ef:de:63:51:91:95:48:43:be:6d:f4:22:8b:aa:78:
00:1f:da:bf:a3:1b:46:c3:82:23:fa:0c:83:1a:08:
61:d8:9f:03:6f:5a:69:15:1c:ce:97:da:f9:cf:60:
fe:e9:46:85:e8:8c:f0:35:0b:88:56:57:85:b2:cb:
2a:e7:52:b6:1b:29:79:6c:8d:ea:b9:a7:26:84:23:
a5:01:db:8e:b3:43:3b:cc:a0:ed:8e:e8:51:f3:77:
f0:c0:45:17:f1:69:bc:a4:9e:fc:76:de:eb:c8:d7:
71:b2:91:d4:fc:b5:0c:a1:34:f3:a7:f7:96:0b:3e:
dc:34:5f:e9:42:aa:9e:55:93:98:e7:07:e8:89:7b:
88:cf:e8:55:6f:22:ae:af:d6:09:5a:d5:58:1a:10:
51:c6:d3:74:66:af:d4:50:18:9c:d5:c3:79:63:23:
21:45:92:c2:3f:56:bf:ad:8a:03:c2:42:73:40:97:
80:85:7d:b5:67:f2:a6:7a:ef:19:01:1b:42:85:22:
5c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0E:B7:3D:6F:AA:F4:17:85:E3:8C:DF:30:BE:EA:FE:96:4F:E3:6C
X509v3 Authority Key Identifier:
keyid:AD:CA:6E:54:AC:D0:26:CE:FA:36:2B:42:27:B8:90:81:C0:A5:00:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rcpuVKzQJs76NitCJ7iQgcClAEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/b172b7-6ae5-46e1-b0c0-0065e4a890b4/1/rcpuVKzQJs76NitCJ7iQgcClAEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:37:8c:c5:7e:2b:d4:fd:95:c3:44:15:36:93:d3:f5:62:a8:
19:2e:95:06:27:56:cf:0d:38:fe:aa:69:99:c9:a4:e7:da:86:
e5:9a:0b:a1:78:4d:8b:36:7e:ed:97:2c:df:3e:f7:85:20:9e:
9e:77:b5:46:0e:cb:4a:a0:32:af:cc:77:e3:c6:88:3d:85:4d:
b4:13:62:5a:a5:67:8d:5b:05:95:ad:61:12:74:5d:be:e6:de:
c2:2d:44:ca:ad:53:3f:15:d8:c7:90:ac:89:f4:57:87:1b:b8:
0d:bb:20:cd:e1:83:9b:de:9e:27:37:30:30:e8:57:30:df:14:
4e:1e:14:ec:a5:54:34:85:10:47:b7:6f:cf:e6:17:5b:6a:6e:
28:95:f7:03:ef:54:aa:16:69:1a:ab:49:41:08:a3:b2:a5:67:
c7:da:57:bc:9d:0b:f7:79:d5:b8:eb:a3:0d:e7:4f:35:7e:80:
7c:a0:f3:07:93:51:50:ba:56:cc:67:c6:b7:51:8b:d3:69:4c:
21:11:b8:1d:ce:89:5a:27:0b:c5:c6:17:ab:05:93:7b:46:8a:
ee:f4:20:07:d2:d2:3d:db:47:18:8b:6e:a8:1a:a6:69:29:fd:
02:af:50:c1:94:e6:b4:38:2c:a2:09:b6:20:9b:7f:96:96:2d:
e7:8f:83:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 20:30:26 2025 by rpki-client