
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
File: R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft (raw, json)
Hash identifier: +xQOzmmSfQkaBDRkRwMToM6B6Y2Z4sDsoSh85V92r0w=
Subject key identifier: 5F:FA:7D:E1:68:6C:4B:9C:21:47:C3:CD:E0:C6:17:FE:88:72:26:A7
Authority key identifier: 47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
Certificate issuer: /CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Certificate serial: 01974A43E4D4786D092D5F5341DE2CEE04A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 12:00:52 +0000
Manifest this update: Sat 07 Jun 2025 12:00:52 +0000
Manifest next update: Sun 08 Jun 2025 12:00:52 +0000
Files and hashes: 1: R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl (hash: mucLkPw6CqjqpJXPe7wbm1Pbqbq9BMEjExM3TIgcaNw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:e4:d4:78:6d:09:2d:5f:53:41:de:2c:ee:04:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c68ed50bb53dcae857e4c85bcafd513f2774da
Validity
Not Before: Jun 7 12:00:52 2025 GMT
Not After : Jun 8 12:00:52 2025 GMT
Subject: CN=5ffa7de1686c4b9c2147c3cde0c617fe887226a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c4:fd:4e:00:fc:9e:03:85:23:11:75:4a:19:
43:4c:16:69:3c:bc:a4:70:92:0c:b7:23:bb:93:cf:
4f:e8:a2:82:61:c3:c6:c6:dc:78:67:f3:8e:c5:c2:
24:8a:aa:63:94:24:ee:d4:a0:df:9f:c9:60:24:6a:
d5:28:11:6a:7a:21:6b:a6:47:41:59:20:cb:11:31:
5a:26:2b:00:5b:07:52:0a:03:d0:a2:78:c4:d7:3f:
78:ee:47:63:89:2b:73:aa:da:e2:7e:90:68:58:2e:
15:8c:e4:e0:60:5e:01:f4:07:24:89:7f:37:ae:67:
c8:8e:82:6b:38:08:9e:32:81:cb:7d:f7:6e:35:f1:
db:48:05:53:9b:08:dc:95:c4:16:1e:5a:2d:18:39:
b1:0d:bf:20:ab:1a:58:6d:64:7e:ef:3f:26:2e:0a:
ce:61:62:e9:2b:77:64:e6:ba:e4:5c:92:3e:e5:62:
ae:79:33:01:d0:97:6e:4e:a9:49:b8:de:76:24:ee:
b2:25:e2:84:b8:1f:a2:92:0a:f7:45:61:c3:7c:d7:
b8:d6:7c:eb:1a:9d:02:0d:a5:da:59:87:ba:6a:ba:
83:50:67:fe:07:66:1b:6f:38:32:c2:2a:63:f0:d3:
75:94:6b:9b:79:30:86:8b:bf:33:64:16:49:ef:5c:
2d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:FA:7D:E1:68:6C:4B:9C:21:47:C3:CD:E0:C6:17:FE:88:72:26:A7
X509v3 Authority Key Identifier:
keyid:47:C6:8E:D5:0B:B5:3D:CA:E8:57:E4:C8:5B:CA:FD:51:3F:27:74:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8aO1Qu1PcroV-TIW8r9UT8ndNo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/ffca18-9d76-409c-a0ec-7c4504982030/1/R8aO1Qu1PcroV-TIW8r9UT8ndNo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:a5:c0:7f:f6:66:6c:60:82:c6:10:bf:50:8a:aa:52:77:02:
00:56:dc:b7:21:a0:a0:0b:fd:f3:fb:4d:bb:f9:b1:1d:3c:40:
33:42:97:22:19:1a:8c:99:ec:bf:f1:a1:26:68:32:4f:f2:cd:
5f:29:3f:af:25:fc:0c:0e:a0:62:cb:be:a0:9d:89:51:28:96:
28:b6:5e:df:c1:54:60:19:b0:26:6a:5b:d5:26:5d:f9:58:6e:
4c:07:9d:ce:a7:ee:49:62:d0:0a:df:24:6a:27:07:10:90:df:
d8:70:99:0c:95:56:3c:fa:14:68:31:89:f5:88:72:93:62:a3:
fc:62:da:fa:ee:21:08:78:3c:19:0a:a8:89:6f:97:5b:ac:15:
7e:62:28:58:4a:48:a6:a3:49:e8:63:bf:f5:6e:4f:4b:7a:36:
3d:6a:c9:4a:63:1f:42:16:6b:1e:92:09:ee:e5:80:7e:c6:1d:
6a:64:e7:d7:a7:a7:0b:96:a8:2e:8b:86:c4:d3:f0:7c:ea:39:
93:aa:56:2d:0c:e1:ff:49:82:34:7a:48:f8:24:63:31:91:83:
e5:0b:85:86:c0:c6:c2:2b:3a:17:8b:f7:fd:63:46:9b:5c:c5:
b9:de:8a:61:e0:b5:3b:4c:42:f7:ef:0c:cd:72:3a:75:3b:7a:
6c:61:87:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 21:05:00 2025 by rpki-client