Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
File: c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft (raw, json)
Hash identifier: 9s9lEoTp3YNSRmHHVicyHNYY9aEidbHVvzL/hQkWn0w=
Subject key identifier: B3:8D:8D:85:C8:87:28:FD:74:13:C3:87:1A:51:86:90:16:0B:3D:AA
Authority key identifier: 73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
Certificate issuer: /CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Certificate serial: 01984AAEC14F0422BA3F0EDC158295E07DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
Manifest number: 1601
Signing time: Sun 27 Jul 2025 07:00:23 +0000
Manifest this update: Sun 27 Jul 2025 07:00:23 +0000
Manifest next update: Mon 28 Jul 2025 07:00:23 +0000
Files and hashes: 1: YlBw5zZMyGmVSKcyUcis3LeoBu4.roa (hash: FNW2TVY99VnemA7lyfpV1rEplwNPKCZ+roIw6UfcWJE=)
2: c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl (hash: y03quAWyVhlIxNJehtOwB0yAGiamq6Fo35IHGmjt4/o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:ae:c1:4f:04:22:ba:3f:0e:dc:15:82:95:e0:7d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73cbc147eadd81548151f3510e2de09d868ac6cc
Validity
Not Before: Jul 27 07:00:23 2025 GMT
Not After : Jul 28 07:00:23 2025 GMT
Subject: CN=b38d8d85c88728fd7413c3871a518690160b3daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9e:f2:c7:7d:b0:b6:d7:a5:d2:21:02:a7:e6:
93:db:c6:46:17:02:da:fb:9b:86:be:c8:1d:87:80:
20:e5:40:85:b8:fd:65:f3:ce:11:fe:4c:c6:ec:9d:
72:eb:cc:b2:49:0d:cc:57:fe:3d:64:cf:19:93:bd:
18:c7:45:3a:c1:a0:fa:f4:1c:47:00:f8:c6:39:54:
67:db:94:c1:7a:39:2f:a3:f1:1d:90:a0:e7:c0:da:
aa:99:f0:84:2a:14:c4:bd:e4:e5:75:8f:74:3e:ea:
5a:eb:94:f7:83:99:a3:a1:a6:25:67:b0:9f:e3:4c:
2b:f8:11:74:6b:ef:6e:48:8a:ed:10:3c:b2:0f:94:
25:8a:53:e1:75:7a:3e:f7:41:84:4b:08:e9:8c:80:
08:d7:bb:cc:41:0a:67:99:9b:be:ed:98:55:ba:fc:
25:8d:94:cb:8d:b1:19:d5:07:61:40:84:5a:7d:25:
b1:35:f3:4b:dd:23:38:6a:40:85:d4:f5:30:38:3d:
bc:39:e8:11:fa:86:fb:66:c9:bf:80:f9:52:81:0f:
13:18:aa:8f:db:d1:fa:84:78:06:cf:15:c8:52:34:
e3:5c:02:59:83:32:c7:e0:f8:21:78:82:f9:1b:06:
29:dd:05:51:99:d9:88:17:28:84:55:07:a9:34:6b:
13:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:8D:8D:85:C8:87:28:FD:74:13:C3:87:1A:51:86:90:16:0B:3D:AA
X509v3 Authority Key Identifier:
keyid:73:CB:C1:47:EA:DD:81:54:81:51:F3:51:0E:2D:E0:9D:86:8A:C6:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8vBR-rdgVSBUfNRDi3gnYaKxsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/a6304b-6c59-4f5f-b646-5f0d91f4f908/1/c8vBR-rdgVSBUfNRDi3gnYaKxsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:60:f6:e4:2d:3e:5d:1c:90:15:a2:f0:e6:aa:b8:86:2e:37:
2e:c6:d6:29:a1:81:d5:0d:a1:95:95:f7:c4:2b:00:ce:86:a4:
03:f8:de:22:af:d1:ba:0a:f5:e7:29:f0:b8:c9:84:d5:98:45:
5b:1b:2e:dd:a7:3a:bd:96:94:9f:28:49:77:8f:f1:43:3a:de:
44:89:72:67:2d:b0:95:1c:6d:7d:e5:ec:ff:0f:6f:01:df:f2:
6c:ad:cf:5c:4e:7f:90:9d:47:7d:d5:eb:a4:c1:39:b4:01:ec:
0e:4b:c5:36:03:ad:95:df:47:ef:19:fe:b5:a6:39:0c:c3:e8:
77:62:0b:e7:0f:d8:f3:86:e5:73:45:04:b2:2a:93:2f:90:3c:
d6:96:71:3b:60:42:a4:17:3d:9c:d8:2e:d4:1d:71:c8:dd:99:
59:be:85:37:e8:98:43:1a:dc:b7:79:dd:9d:9c:b1:01:43:b6:
23:d3:97:bd:13:40:d2:52:25:60:3b:43:6c:9c:06:cc:e6:3d:
7f:d7:b0:ae:f6:c8:12:e9:96:ea:c6:e7:03:11:1a:89:f6:a7:
d2:e1:b5:83:5d:ff:ce:5d:a8:4d:2f:b6:f9:ed:06:ec:ea:80:
6f:9c:ae:bc:0a:09:cf:b7:ae:99:8f:9c:e6:be:4d:80:d5:4c:
94:04:b4:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 08:42:56 2025 by rpki-client