Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
File: 8cH5rk0YR9SdTY_a40V7WhclZwc.mft (raw, json)
Hash identifier: wbDDJDUWIjcwaRyNRKYr62+1OXyRr0rjkRnikBkQRLM=
Subject key identifier: 97:2B:04:8D:6D:74:E2:A9:A2:EB:8D:7A:9D:32:72:CE:8F:66:14:38
Authority key identifier: F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
Certificate issuer: /CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Certificate serial: 019746D48ACA40D7CAD7BC14D9615ED8AB35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 20:00:23 +0000
Manifest this update: Fri 06 Jun 2025 20:00:23 +0000
Manifest next update: Sat 07 Jun 2025 20:00:23 +0000
Files and hashes: 1: 8cH5rk0YR9SdTY_a40V7WhclZwc.crl (hash: PxxUK7PR2dLaA1LzWRFC+K9F0Aj1ZNU4Y34MMJfBCII=)
2: gNeiVk2m8BNFP8OBLSZLGLMl51E.roa (hash: Pvly8BuBxC0TCqmwqCY2YQ1zQ+UXFXDzJobqg59BS7c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:d4:8a:ca:40:d7:ca:d7:bc:14:d9:61:5e:d8:ab:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c1f9ae4d1847d49d4d8fdae3457b5a17256707
Validity
Not Before: Jun 6 20:00:23 2025 GMT
Not After : Jun 7 20:00:23 2025 GMT
Subject: CN=972b048d6d74e2a9a2eb8d7a9d3272ce8f661438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:86:4f:8b:ad:cf:d6:ef:18:22:b7:8f:c8:6d:
2a:b5:61:bf:d2:69:49:77:4b:16:a5:73:ff:0c:97:
b6:9e:fd:50:c2:5b:0e:96:c1:ee:90:5c:48:57:90:
bc:83:4a:73:0f:67:fb:f1:37:bb:ea:2c:13:2c:00:
28:e4:c3:05:8b:2e:b2:b5:19:48:55:e6:4b:6e:a3:
72:69:f3:da:3d:4b:e2:5c:04:3b:8b:24:4c:e6:06:
23:7a:80:d6:26:ce:bc:5d:ab:a0:bf:dd:99:6e:c7:
57:cd:a6:7c:0a:a8:83:47:39:60:dd:06:25:70:e8:
f7:55:f8:f3:20:2a:45:af:5a:49:13:5f:6d:4e:34:
bc:9a:24:76:94:6c:df:3f:bf:5a:3d:ef:b6:96:33:
6a:5e:e7:f5:af:ca:d5:1d:e7:ae:29:1d:9f:9d:8f:
84:99:23:d9:29:f3:fe:4f:05:36:09:88:99:ab:40:
3f:89:0b:a5:22:f8:63:77:87:9e:74:5c:de:5c:2e:
ec:39:cd:c5:e3:68:0c:cc:a8:f8:11:5c:b9:24:59:
c9:97:c5:9a:34:f6:52:04:e5:89:39:5b:d9:b6:4b:
c4:1e:3e:22:c7:c7:ec:a1:b4:c4:3a:0c:f0:a0:d5:
6e:88:07:b1:28:e0:41:38:b5:3a:12:70:e2:10:6b:
d1:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:2B:04:8D:6D:74:E2:A9:A2:EB:8D:7A:9D:32:72:CE:8F:66:14:38
X509v3 Authority Key Identifier:
keyid:F1:C1:F9:AE:4D:18:47:D4:9D:4D:8F:DA:E3:45:7B:5A:17:25:67:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cH5rk0YR9SdTY_a40V7WhclZwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/846050-2a3b-48d7-b2ae-2581b3db78cb/1/8cH5rk0YR9SdTY_a40V7WhclZwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:d2:a8:53:18:68:6d:aa:93:89:b8:36:0a:47:e3:fb:d1:40:
80:3b:f1:9f:18:18:e5:1f:aa:58:7f:7f:1d:65:f4:f1:b1:3b:
6a:16:fb:9e:ac:75:db:89:23:6e:74:54:dc:eb:63:e2:bd:2b:
88:9c:04:1c:0b:c3:e1:e3:4a:d1:a6:ce:a7:d0:9e:f5:9a:ab:
80:e3:73:39:d1:fa:db:12:d6:a3:1f:97:dd:20:d6:51:da:0a:
67:a3:ef:41:12:5f:0e:ea:ab:30:ca:5c:78:48:35:ff:60:70:
63:d6:31:31:e7:4c:89:47:20:70:cf:0f:b2:b9:07:db:6a:a7:
da:1b:70:3a:bf:89:b7:18:52:d0:83:0e:ad:2a:b1:19:af:36:
da:2b:07:c9:70:76:7f:36:71:84:96:f3:d2:d6:20:ac:bf:51:
60:f2:2b:30:6a:f6:97:3d:ff:e2:4b:a5:b7:6f:9e:36:9a:8f:
38:d0:2a:05:65:d6:72:f2:55:da:2b:f6:f4:4e:05:df:2a:27:
c1:e8:1f:54:f5:13:c0:b7:46:e0:c3:c6:34:8d:98:40:a2:7f:
19:9b:1e:24:97:a4:31:2d:12:65:1c:b8:f2:0b:02:2d:3c:76:
1f:fe:33:c3:69:47:17:2f:fd:bb:13:0a:c6:6e:3d:a3:54:28:
32:b3:94:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:01 2025 by rpki-client