Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
File: a8vbb9OedvAEhAEuExRrIYdVw_s.mft (raw, json)
Hash identifier: i0izfPsMQdLKY1nmLDNVggWlOHLuzxiwOiiH4iPa6Y8=
Subject key identifier: 83:31:E1:0D:66:FC:08:B8:87:41:7B:79:38:81:F5:A8:BB:50:65:7B
Authority key identifier: 6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
Certificate issuer: /CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Certificate serial: 01984A09D66FA6E032FA7A6C3B43DF2F5370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
Manifest number: 14FC
Signing time: Sun 27 Jul 2025 04:00:15 +0000
Manifest this update: Sun 27 Jul 2025 04:00:15 +0000
Manifest next update: Mon 28 Jul 2025 04:00:15 +0000
Files and hashes: 1: a8vbb9OedvAEhAEuExRrIYdVw_s.crl (hash: qyJ3DIHENN3x6w8WFRydYbkEsYiSqavglieQrCnatf8=)
2: cHx9sYkuiAFAjOWcBOb5TDvNls8.roa (hash: ShwHq89MA2jwo160RZTKkKFkHAW0OiQLJH4eT6G+deQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:09:d6:6f:a6:e0:32:fa:7a:6c:3b:43:df:2f:53:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bcbdb6fd39e76f00484012e13146b218755c3fb
Validity
Not Before: Jul 27 04:00:15 2025 GMT
Not After : Jul 28 04:00:15 2025 GMT
Subject: CN=8331e10d66fc08b887417b793881f5a8bb50657b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:a1:25:0f:ec:10:cf:6c:52:60:d3:fa:ef:7d:
fc:37:36:2a:be:6d:a8:5d:e5:77:3f:17:ca:ef:c9:
ca:64:df:15:18:8c:34:bc:ee:2f:34:84:85:3a:75:
a6:0b:d7:34:85:1c:d8:8c:e0:13:4f:81:9d:d4:94:
d0:35:a8:8a:30:9e:ca:7d:88:fa:08:01:20:11:f5:
be:53:23:a0:91:da:bd:06:26:90:3e:d7:9e:82:b4:
a9:4e:45:2c:0b:b1:af:1c:f9:ad:4e:9b:f8:9e:d6:
ac:6e:c5:07:16:fc:e4:0f:7a:1a:ed:63:7c:be:e3:
8d:19:fd:7b:9b:ba:89:4f:10:cf:01:31:8f:d3:2f:
d3:2f:2e:a4:53:ef:78:87:08:e4:1d:16:8d:59:2d:
64:58:e9:29:fa:d0:61:f7:dd:9d:db:e8:79:45:a8:
c1:91:f5:54:b6:0d:e7:0c:5f:9f:6e:29:b4:2a:7e:
6d:2b:a0:ec:17:79:4a:aa:83:20:12:84:7d:f1:dd:
f2:7c:35:a3:63:4e:43:31:ce:9c:32:a9:62:58:60:
09:6f:69:2e:b5:7b:15:c1:84:34:3c:83:3e:4e:b5:
85:72:32:a0:13:9b:43:2b:6f:2b:92:70:b1:4d:8c:
7d:f1:ac:39:4e:74:01:83:5e:c8:15:e5:9a:b0:17:
c8:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:31:E1:0D:66:FC:08:B8:87:41:7B:79:38:81:F5:A8:BB:50:65:7B
X509v3 Authority Key Identifier:
keyid:6B:CB:DB:6F:D3:9E:76:F0:04:84:01:2E:13:14:6B:21:87:55:C3:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8vbb9OedvAEhAEuExRrIYdVw_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/74d876-05a8-4b10-90e2-c9da030af326/1/a8vbb9OedvAEhAEuExRrIYdVw_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c9:2b:bd:32:2f:12:e1:95:ef:18:98:0f:c2:40:ff:eb:50:
ee:3d:50:86:57:3a:d1:c6:f2:e5:7c:c0:37:fa:6f:34:e1:cc:
1a:a4:c0:85:ce:c6:f3:43:e7:81:b0:e8:e8:15:29:3b:22:02:
54:c4:06:fc:fe:de:3b:a4:2e:69:84:00:72:b4:df:d0:64:23:
37:09:c9:15:6d:20:c1:67:89:50:fc:5e:c5:bd:4f:d7:55:9d:
50:2e:a9:08:d8:4d:62:b2:11:d5:d0:08:4b:e5:ee:29:c2:f2:
40:31:ea:45:ca:fb:eb:ee:20:0a:f1:94:87:1c:a3:50:ee:70:
0d:d4:c7:05:cf:64:0c:50:c8:2d:5e:1d:c3:f7:d5:db:7f:48:
47:76:61:bd:97:cd:15:69:24:7b:43:43:41:87:5e:6a:82:2f:
51:d0:8d:03:0b:43:a6:de:bf:a4:e6:15:3f:9a:4a:1a:74:c2:
ca:1a:a3:eb:05:aa:80:5a:46:36:e6:84:fa:ae:95:20:30:6b:
76:7c:f9:f5:7a:7f:d3:a8:13:a8:e7:0f:3c:e4:a9:ff:ea:7d:
e8:ad:47:5a:39:52:32:75:7f:ee:cd:49:b3:25:91:1a:f6:30:
67:b1:c7:36:fa:6f:bd:2a:21:6a:4b:c5:8d:6e:fb:6d:a1:7e:
28:ac:52:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 13:12:01 2025 by rpki-client